Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: T7FZvd3GuWxPM/f2pkBYGR8dhJwpUwtmPm/TvRhn/Co=
Subject key identifier: 02:49:DA:3F:22:E9:79:1B:6B:0A:03:28:AE:F7:39:F6:5A:82:2C:99
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 01974A43C65D95EA746EFACF288D70283972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 0B47
Signing time: Sat 07 Jun 2025 12:00:45 +0000
Manifest this update: Sat 07 Jun 2025 12:00:45 +0000
Manifest next update: Sun 08 Jun 2025 12:00:45 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: yKonZjrBJgKrC7d5nAk+vG1sp72ke5wlGbYKwvnA7Zk=)
2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:c6:5d:95:ea:74:6e:fa:cf:28:8d:70:28:39:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Jun 7 12:00:45 2025 GMT
Not After : Jun 8 12:00:45 2025 GMT
Subject: CN=0249da3f22e9791b6b0a0328aef739f65a822c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:e6:17:b1:9b:3d:2a:c4:8f:b2:03:6b:d1:
49:6c:38:59:1f:c6:17:f8:cc:40:12:f1:02:fd:e8:
32:98:54:56:05:e2:cf:96:14:c9:02:ae:a7:ae:c3:
fd:bc:2f:ab:d2:1b:56:7f:6b:5e:7c:f1:c6:12:18:
fc:90:41:4b:5b:3e:3e:b6:c4:c9:8f:63:e0:be:fc:
0f:54:ab:f6:2b:ac:5a:29:02:52:d9:85:24:9d:b0:
b9:0f:bf:0a:64:fe:a6:af:6a:17:d8:7a:64:79:22:
0b:4a:77:e5:ce:71:b6:5c:b4:7c:cb:9f:0b:de:15:
3d:a8:45:a5:ba:20:11:3d:25:9a:ab:09:a3:68:dd:
43:35:fb:ff:8f:0a:f6:bc:8a:7e:b9:e2:43:3b:73:
a5:b9:06:91:62:8d:22:eb:be:41:92:46:b7:72:85:
03:28:5e:85:32:ac:cb:81:bf:09:da:c0:01:2b:fa:
a8:52:39:b4:e6:96:29:13:f7:ec:e3:20:c3:a5:19:
cf:14:36:c9:77:0e:c3:a6:c7:0d:97:7e:8e:86:46:
82:d1:8a:ff:30:77:55:27:84:fc:ec:41:1b:19:a4:
4f:c5:85:83:84:10:2b:f0:05:40:d8:c1:eb:71:94:
3c:bb:6d:2b:46:07:93:10:28:a0:72:ea:0b:64:3d:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:DA:3F:22:E9:79:1B:6B:0A:03:28:AE:F7:39:F6:5A:82:2C:99
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:46:24:3b:aa:51:13:dd:26:7c:60:03:0b:6b:6e:6c:57:
8b:06:52:50:81:54:63:a1:05:5a:06:89:1a:9b:bf:6a:78:7b:
59:d8:8c:e8:1d:60:61:53:a9:7c:94:cf:1d:3d:d9:b7:c0:8d:
68:79:c5:15:3a:10:77:23:0b:38:3c:03:d7:ed:e3:9c:09:7d:
ff:96:48:3e:4f:5c:54:91:31:f8:e8:35:e6:c1:29:22:af:bd:
80:3b:1d:92:29:9e:e3:9a:fd:8f:55:45:22:d2:97:82:7c:10:
c0:ba:20:52:ca:37:67:b2:72:e9:29:1b:90:42:b6:ce:7a:11:
98:1e:bb:af:39:95:3d:3c:c0:f7:1d:0b:40:ed:21:c5:2f:1b:
cd:86:87:07:f5:23:ed:d9:b1:33:d8:f7:25:1b:99:e1:db:36:
42:13:16:b9:93:07:c3:2b:17:54:58:13:88:c5:67:12:45:c0:
ca:06:56:4f:d2:40:6c:23:5d:30:b1:0d:53:a0:29:28:2c:87:
ea:3b:46:b8:45:41:d8:c8:52:d5:d9:fb:05:81:63:98:f9:78:
b3:ef:18:36:3a:b9:3d:47:ea:d0:bd:c1:bc:f1:62:12:98:e7:
93:8c:4a:10:54:83:51:76:12:28:0f:ee:9b:eb:74:67:78:b2:
a2:fd:58:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ8Zdlep0bvrPKI1wKDlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmQ0Y2E3ZjMzMWFhMmFkOTEyNDBhNjU4M2ExNzZjMDA1
ZThhNjMwHhcNMjUwNjA3MTIwMDQ1WhcNMjUwNjA4MTIwMDQ1WjAzMTEwLwYDVQQD
EygwMjQ5ZGEzZjIyZTk3OTFiNmIwYTAzMjhhZWY3MzlmNjVhODIyYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6bmF7GbPSrEj7IDa9FJbDhZH8YX
+MxAEvEC/egymFRWBeLPlhTJAq6nrsP9vC+r0htWf2tefPHGEhj8kEFLWz4+tsTJ
j2PgvvwPVKv2K6xaKQJS2YUknbC5D78KZP6mr2oX2HpkeSILSnflznG2XLR8y58L
3hU9qEWluiARPSWaqwmjaN1DNfv/jwr2vIp+ueJDO3OluQaRYo0i675Bkka3coUD
KF6FMqzLgb8J2sABK/qoUjm05pYpE/fs4yDDpRnPFDbJdw7DpscNl36OhkaC0Yr/
MHdVJ4T87EEbGaRPxYWDhBAr8AVA2MHrcZQ8u20rRgeTECigcuoLZD2K/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJJ2j8i6XkbawoDKK73OfZagiyZMB8GA1UdIwQY
MBaAFNC9TKfzMaoq2RJAplg6F2wAXopjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAt
ZTBiNWE5MmRmOTQwLzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAtZTBiNWE5MmRmOTQw
LzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3lGJDuq
URPdJnxgAwtrbmxXiwZSUIFUY6EFWgaJGpu/anh7WdiM6B1gYVOpfJTPHT3Zt8CN
aHnFFToQdyMLODwD1+3jnAl9/5ZIPk9cVJEx+Og15sEpIq+9gDsdkime45r9j1VF
ItKXgnwQwLogUso3Z7Jy6SkbkEK2znoRmB67rzmVPTzA9x0LQO0hxS8bzYaHB/Uj
7dmxM9j3JRuZ4ds2QhMWuZMHwysXVFgTiMVnEkXAygZWT9JAbCNdMLENU6ApKCyH
6jtGuEVB2MhS1dn7BYFjmPl4s+8YNjq5PUfq0L3BvPFiEpjnk4xKEFSDUXYSKA/u
m+t0Z3iyov1YPA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:32:10 2025 by rpki-client