Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: I4ud4r4UzDiOUzKQQB9RXWUFEFQmUstUIUeMn8X0Tw4=
Subject key identifier: B8:F7:F9:FA:70:BC:50:26:0F:B8:F3:41:E0:06:FA:F2:F8:3D:58:19
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 01962828E34ACFFDC3EF7347834B99E3BF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 14EB
Signing time: Sat 12 Apr 2025 04:01:30 +0000
Manifest this update: Sat 12 Apr 2025 04:01:30 +0000
Manifest next update: Sun 13 Apr 2025 04:01:30 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: rQOBuMcctqANu+R20pNgnc41Pz9QZfH7wa2eD/NgjL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:28:e3:4a:cf:fd:c3:ef:73:47:83:4b:99:e3:bf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Apr 12 04:01:30 2025 GMT
Not After : Apr 13 04:01:30 2025 GMT
Subject: CN=b8f7f9fa70bc50260fb8f341e006faf2f83d5819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ff:c8:61:82:d0:f6:28:30:52:0c:35:2c:16:
65:f8:5e:a1:2f:c4:e3:95:65:c8:9f:cd:f5:13:06:
6f:9b:b5:91:5f:b1:c1:a4:4d:60:71:9b:45:c8:1b:
f2:04:5a:ee:43:37:40:e9:e1:26:80:b5:80:a7:b3:
be:6e:c1:3b:42:28:c3:5e:98:59:12:06:82:42:c5:
04:0e:78:54:66:80:58:32:47:41:f0:ac:28:01:72:
a5:21:e4:19:cc:fc:32:10:f2:1e:23:1b:24:8e:b4:
31:e7:11:6c:d6:98:5f:d5:cf:cf:f7:d9:a1:85:b7:
4e:4f:80:58:26:79:c5:5b:ef:8f:12:1f:6c:43:42:
ce:01:5b:cb:d9:12:c9:ed:b5:1d:bf:5b:39:d9:87:
18:17:09:d6:6b:af:f8:c9:d3:14:e8:7a:d2:36:37:
aa:1f:b9:9e:f2:3e:c7:99:ce:c7:37:3b:6f:78:db:
4b:1f:cf:45:c9:d5:b0:ae:51:1b:f2:e1:8b:ed:ec:
ab:b8:03:8e:44:70:91:f7:50:fd:46:74:1e:af:c0:
0f:55:6f:3b:4d:5c:72:05:a8:c6:ba:a2:19:ca:e4:
f1:92:c0:b5:90:3a:ec:40:4a:f4:e6:bd:10:ad:08:
b8:67:07:ff:87:3e:ab:e2:60:b9:fa:45:f4:47:36:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:F9:FA:70:BC:50:26:0F:B8:F3:41:E0:06:FA:F2:F8:3D:58:19
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f9:2c:9b:2e:4c:39:15:b0:ed:9d:92:1b:8e:2a:13:61:89:
6c:d7:2a:db:d2:b0:d1:5c:7c:67:1c:ac:08:34:4f:7f:69:ae:
09:df:a4:1d:a5:71:74:dc:6c:53:54:42:57:d2:aa:8d:ad:e6:
ba:6f:a4:61:cd:61:d3:b4:36:8b:83:91:c9:a6:63:9e:04:c8:
47:d3:bd:0a:ea:46:5d:e9:27:ec:f5:7e:24:07:02:56:4b:1c:
0f:33:c3:a3:f6:64:41:09:cb:6e:18:36:89:b8:2d:a0:7c:14:
8b:b6:d2:98:f5:65:e3:cc:61:4e:55:40:8c:87:11:97:66:f1:
93:93:41:df:8e:16:7f:d0:68:02:f1:72:96:fc:58:8c:3d:b6:
6a:cd:5f:dd:21:37:19:19:5b:a5:e8:ec:8d:e1:77:9a:f1:01:
fc:59:73:39:30:f4:a8:91:07:4d:4f:d2:bb:1e:23:4c:46:75:
87:5c:23:29:78:8d:9a:5e:44:7c:11:6f:1b:c5:db:ee:66:3e:
66:27:23:df:ec:5d:43:a7:be:a4:7c:fb:42:9f:83:04:16:fa:
36:30:4d:ee:7d:29:35:1c:93:d2:9a:f3:76:f5:23:8e:ff:1f:
c5:9c:8f:fa:e1:a9:96:64:51:72:3c:14:16:14:56:4a:90:67:
52:b8:a3:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYoKONKz/3D73NHg0uZ478BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjdjMDJkZTdmYzhkMTFhMWFmZTdhZTYyYzU4NTRkMTc3
Njc1NTMwHhcNMjUwNDEyMDQwMTMwWhcNMjUwNDEzMDQwMTMwWjAzMTEwLwYDVQQD
EyhiOGY3ZjlmYTcwYmM1MDI2MGZiOGYzNDFlMDA2ZmFmMmY4M2Q1ODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv/IYYLQ9igwUgw1LBZl+F6hL8Tj
lWXIn831EwZvm7WRX7HBpE1gcZtFyBvyBFruQzdA6eEmgLWAp7O+bsE7QijDXphZ
EgaCQsUEDnhUZoBYMkdB8KwoAXKlIeQZzPwyEPIeIxskjrQx5xFs1phf1c/P99mh
hbdOT4BYJnnFW++PEh9sQ0LOAVvL2RLJ7bUdv1s52YcYFwnWa6/4ydMU6HrSNjeq
H7me8j7Hmc7HNztveNtLH89FydWwrlEb8uGL7eyruAOORHCR91D9RnQer8APVW87
TVxyBajGuqIZyuTxksC1kDrsQEr05r0QrQi4Zwf/hz6r4mC5+kX0RzbACwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj3+fpwvFAmD7jzQeAG+vL4PVgZMB8GA1UdIwQY
MBaAFJtnwC3n/I0Roa/nrmLFhU0XdnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYt
YzgxNzQzYjJjYWU2LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYtYzgxNzQzYjJjYWU2
LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/ksmy5M
ORWw7Z2SG44qE2GJbNcq29Kw0Vx8ZxysCDRPf2muCd+kHaVxdNxsU1RCV9Kqja3m
um+kYc1h07Q2i4ORyaZjngTIR9O9CupGXekn7PV+JAcCVkscDzPDo/ZkQQnLbhg2
ibgtoHwUi7bSmPVl48xhTlVAjIcRl2bxk5NB344Wf9BoAvFylvxYjD22as1f3SE3
GRlbpejsjeF3mvEB/FlzOTD0qJEHTU/Sux4jTEZ1h1wjKXiNml5EfBFvG8Xb7mY+
Zicj3+xdQ6e+pHz7Qp+DBBb6NjBN7n0pNRyT0przdvUjjv8fxZyP+uGplmRRcjwU
FhRWSpBnUrijuA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:46:59 2025 by rpki-client