Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: 70jDrfS8+RAmd/l/fJY67yC2JTm55SIGTDQZpCHrpmA=
Subject key identifier: 7D:C6:1F:18:27:8D:C5:A9:A5:D6:12:7A:61:47:B5:4B:AA:88:BC:33
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 01962CAABD243CFC754DA8DF662E7809CA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 0C88
Signing time: Sun 13 Apr 2025 01:01:49 +0000
Manifest this update: Sun 13 Apr 2025 01:01:49 +0000
Manifest next update: Mon 14 Apr 2025 01:01:49 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: VaURyPF2oxrGbuXRnQ9Vc1P50fXE7O3Clp0btKoWwpM=)
2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:bd:24:3c:fc:75:4d:a8:df:66:2e:78:09:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Apr 13 01:01:49 2025 GMT
Not After : Apr 14 01:01:49 2025 GMT
Subject: CN=7dc61f18278dc5a9a5d6127a6147b54baa88bc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:24:57:03:fb:17:0c:0f:2d:98:cf:20:b3:
99:f2:7e:c7:0d:8f:42:b9:00:49:1c:f5:9d:a6:b1:
51:4c:a8:8e:a5:ed:c0:78:9a:52:4c:1b:31:6b:df:
b6:e6:23:d4:a0:61:87:8d:21:62:4d:24:a6:05:e9:
2b:7c:c5:9a:f5:06:50:5d:0f:65:cc:14:b4:c6:28:
53:27:fb:a0:25:fd:46:fe:9c:47:59:8c:bc:4e:03:
c4:ab:e7:0e:92:77:64:14:80:20:7b:c6:3b:5f:05:
f3:e4:e3:91:9a:04:e3:2d:d0:b9:eb:a2:e2:fd:8e:
70:6b:f2:b8:73:56:75:07:6d:29:31:ca:e3:63:78:
08:4c:5d:be:7b:56:20:f2:2e:40:89:9d:e5:96:6f:
84:58:66:e1:f2:16:70:37:67:ec:53:d6:d6:9f:60:
08:15:78:ec:e8:5c:a5:61:70:f9:75:53:7b:c6:04:
92:25:7e:4b:ae:df:63:44:b4:96:ec:c3:8c:33:04:
d6:28:f3:a6:ff:80:4b:f7:66:35:cd:7e:b6:36:b0:
10:ab:47:47:0d:d8:82:80:00:9b:20:de:fd:df:0b:
8a:12:48:4b:1b:91:f9:b4:0a:fa:f6:26:a9:da:0c:
eb:d8:9e:69:93:f6:7a:cd:bc:9b:eb:ba:80:04:d6:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:1F:18:27:8D:C5:A9:A5:D6:12:7A:61:47:B5:4B:AA:88:BC:33
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b2:42:08:d0:45:56:aa:3e:83:a2:d5:ab:df:81:b5:7b:55:
a4:f2:1d:aa:6c:ca:25:0c:fe:d3:59:e7:8b:1e:a8:67:85:3f:
69:0c:e2:f2:04:83:94:dd:a0:e5:e9:a4:96:ec:06:1c:cc:40:
f6:f3:70:ff:e7:0b:ce:a7:23:97:86:57:b1:b7:de:bb:61:42:
fc:52:d0:4b:20:bf:af:b3:61:63:dc:28:1e:dc:e7:36:24:40:
aa:c1:29:9a:00:ce:27:18:7e:3a:51:2f:87:a2:72:c3:35:dd:
2f:d2:c8:0b:78:a4:2d:94:3d:37:2a:53:9f:3b:43:c6:dd:c0:
5f:da:e8:38:29:0e:df:81:5f:73:6c:9a:97:3e:ef:58:c3:24:
80:9a:7b:13:9c:ea:af:4a:e2:ee:a7:fe:79:c9:2a:e1:fb:ec:
78:19:f8:c8:0a:36:05:c9:c2:c0:1f:82:f8:b5:86:8f:36:21:
ea:58:f1:78:6e:c7:b0:6e:3e:4b:ed:b9:be:49:d7:d3:ef:44:
65:b2:53:d9:9c:c5:68:61:7b:1d:72:d4:c5:96:72:ce:e6:90:
bc:10:d3:d4:7d:79:ca:fc:4b:8b:b1:61:80:98:13:79:eb:20:
c3:0b:07:95:1f:14:ee:1b:0f:57:0d:8a:2e:90:ea:0a:7a:2e:
93:fc:3a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsqr0kPPx1TajfZi54Ccp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYwZmYzNjVkNGJkOTA4ZGU5MDJlZWRhMDNiMjc5YzJm
ODA5ZDMwHhcNMjUwNDEzMDEwMTQ5WhcNMjUwNDE0MDEwMTQ5WjAzMTEwLwYDVQQD
Eyg3ZGM2MWYxODI3OGRjNWE5YTVkNjEyN2E2MTQ3YjU0YmFhODhiYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskokVwP7FwwPLZjPILOZ8n7HDY9C
uQBJHPWdprFRTKiOpe3AeJpSTBsxa9+25iPUoGGHjSFiTSSmBekrfMWa9QZQXQ9l
zBS0xihTJ/ugJf1G/pxHWYy8TgPEq+cOkndkFIAge8Y7XwXz5OORmgTjLdC566Li
/Y5wa/K4c1Z1B20pMcrjY3gITF2+e1Yg8i5AiZ3llm+EWGbh8hZwN2fsU9bWn2AI
FXjs6FylYXD5dVN7xgSSJX5Lrt9jRLSW7MOMMwTWKPOm/4BL92Y1zX62NrAQq0dH
DdiCgACbIN793wuKEkhLG5H5tAr69iap2gzr2J5pk/Z6zbyb67qABNbG8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3GHxgnjcWppdYSemFHtUuqiLwzMB8GA1UdIwQY
MBaAFNqvD/Nl1L2QjekC7toDsnnC+AnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAt
NDA5MTc2Zjg0NmQzLzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAtNDA5MTc2Zjg0NmQz
LzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirJCCNBF
Vqo+g6LVq9+BtXtVpPIdqmzKJQz+01nnix6oZ4U/aQzi8gSDlN2g5emkluwGHMxA
9vNw/+cLzqcjl4ZXsbfeu2FC/FLQSyC/r7NhY9woHtznNiRAqsEpmgDOJxh+OlEv
h6JywzXdL9LIC3ikLZQ9NypTnztDxt3AX9roOCkO34Ffc2yalz7vWMMkgJp7E5zq
r0ri7qf+eckq4fvseBn4yAo2BcnCwB+C+LWGjzYh6ljxeG7HsG4+S+25vknX0+9E
ZbJT2ZzFaGF7HXLUxZZyzuaQvBDT1H15yvxLi7FhgJgTeesgwwsHlR8U7hsPVw2K
LpDqCnouk/w6FQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:54:29 2025 by rpki-client