Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File: L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier: GQ4RN/yEpPQ8N+TUj+zgUFM2/R58PlEeh2d4EMpJSwk=
Subject key identifier: B3:79:DF:41:D8:74:CC:F7:28:A5:EB:15:4D:81:16:F2:DB:E3:8B:6C
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer: /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial: 01964BC6639A2DC27328EA6B5F11349CA5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 02:00:14 +0000
Manifest this update: Sat 19 Apr 2025 02:00:14 +0000
Manifest next update: Sun 20 Apr 2025 02:00:14 +0000
Files and hashes: 1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: hUrIqTBaKzSgddSuzBd0MTaDAY2aYKMA41BjPBbXYlI=)
2: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (hash: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:63:9a:2d:c2:73:28:ea:6b:5f:11:34:9c:a5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Validity
Not Before: Apr 19 02:00:14 2025 GMT
Not After : Apr 20 02:00:14 2025 GMT
Subject: CN=b379df41d874ccf728a5eb154d8116f2dbe38b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:2e:d8:1a:10:5f:51:75:bf:2e:e6:f5:dd:
0f:1a:88:e0:eb:90:2d:c7:05:81:01:3c:36:c3:1e:
90:58:aa:f9:74:70:57:7b:3a:b3:b5:41:76:ee:30:
e3:f1:b2:8d:e6:e5:fa:e9:bc:84:d2:79:42:d0:9e:
82:26:c4:18:4d:83:5d:3e:bc:8e:39:90:e9:59:f7:
87:ac:2e:92:aa:ac:73:43:01:ba:60:01:36:4a:15:
f5:29:8f:50:ca:8e:d4:01:a7:85:a0:31:87:2d:c4:
9f:a9:6a:30:fa:ac:36:bd:cb:c7:73:38:4b:dd:4a:
e3:e3:f5:01:85:1e:d8:5e:4c:db:f1:b1:bd:6d:7b:
54:78:b7:7b:87:e4:60:1c:06:44:e2:a2:9b:98:f0:
ea:e5:63:21:dc:10:88:f7:3a:91:18:11:1a:bd:34:
e6:ce:ad:8e:36:8e:2e:78:e8:d9:41:09:51:f5:f9:
36:51:9e:d8:92:df:8a:49:95:cd:0c:b8:31:e5:f1:
5a:4d:da:e7:67:c1:b7:d3:13:62:50:8c:27:15:2e:
48:75:cb:81:7d:0c:b7:48:68:89:c8:19:1f:2d:20:
62:0a:b8:19:5a:78:9d:db:65:ee:1c:61:3d:6d:1a:
c3:18:18:3c:91:53:72:57:a9:7f:75:b7:a5:2e:e2:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:DF:41:D8:74:CC:F7:28:A5:EB:15:4D:81:16:F2:DB:E3:8B:6C
X509v3 Authority Key Identifier:
keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:f5:19:c3:f7:61:aa:c0:d7:34:e9:11:fc:e7:48:c5:1c:
f9:a8:23:07:a6:85:57:78:b9:98:9a:49:e9:b0:f4:09:8b:55:
af:d7:bc:32:fc:a6:da:6c:fe:07:76:54:d5:d3:e8:87:99:20:
10:db:09:c9:5a:6f:8f:c9:1b:e7:fb:52:37:7c:49:bd:2d:03:
7e:fc:bd:d3:fc:fb:e7:90:e4:b1:cb:bd:ac:4a:d8:a6:e5:f8:
29:57:02:d8:eb:bd:39:0c:b1:db:5e:e5:36:cf:31:35:f3:c4:
4e:a7:0d:4d:4a:2b:23:87:34:7d:4f:e9:08:be:3a:60:76:06:
83:7d:65:11:2c:51:ec:7e:d8:1b:b5:58:57:d3:b4:52:8f:d5:
85:8c:ee:44:89:69:7a:3e:63:a7:bc:89:c4:3c:58:47:cb:41:
68:85:d0:c5:14:8e:c3:6b:f2:2a:a3:78:73:43:ed:08:1a:2c:
e5:80:43:02:b2:35:8a:f2:15:ff:db:71:a9:0c:b7:71:1e:32:
00:cd:a1:e7:de:1b:f0:be:3c:1e:e9:80:ad:97:73:0f:31:10:
20:cf:00:b6:a9:8f:58:28:6c:73:e5:69:3b:15:35:f9:fc:8d:
3a:b6:68:0e:1f:8e:ea:bd:11:a6:d5:d6:7b:92:2f:fc:6e:c8:
49:00:f5:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLxmOaLcJzKOprXxE0nKWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYThlNjU3ZWVhZTA3ODNkYTE0YTNkYTJjYTc0ZGRlYzE1
ZGQzMDgwHhcNMjUwNDE5MDIwMDE0WhcNMjUwNDIwMDIwMDE0WjAzMTEwLwYDVQQD
EyhiMzc5ZGY0MWQ4NzRjY2Y3MjhhNWViMTU0ZDgxMTZmMmRiZTM4YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Iu2BoQX1F1vy7m9d0PGojg65At
xwWBATw2wx6QWKr5dHBXezqztUF27jDj8bKN5uX66byE0nlC0J6CJsQYTYNdPryO
OZDpWfeHrC6SqqxzQwG6YAE2ShX1KY9Qyo7UAaeFoDGHLcSfqWow+qw2vcvHczhL
3Urj4/UBhR7YXkzb8bG9bXtUeLd7h+RgHAZE4qKbmPDq5WMh3BCI9zqRGBEavTTm
zq2ONo4ueOjZQQlR9fk2UZ7Ykt+KSZXNDLgx5fFaTdrnZ8G30xNiUIwnFS5IdcuB
fQy3SGiJyBkfLSBiCrgZWnid22XuHGE9bRrDGBg8kVNyV6l/dbelLuJf+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN530HYdMz3KKXrFU2BFvLb44tsMB8GA1UdIwQY
MBaAFC+o5lfurgeD2hSj2iynTd7BXdMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYTRjM2QtZjI3Mi00N2Y2LWE5Y2Yt
ODRhMjMzMzY5Mzg2LzEvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hYTRjM2QtZjI3Mi00N2Y2LWE5Y2YtODRhMjMzMzY5Mzg2
LzEvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuv1GcP3
YarA1zTpEfznSMUc+agjB6aFV3i5mJpJ6bD0CYtVr9e8Mvym2mz+B3ZU1dPoh5kg
ENsJyVpvj8kb5/tSN3xJvS0Dfvy90/z755Dkscu9rErYpuX4KVcC2Ou9OQyx217l
Ns8xNfPETqcNTUorI4c0fU/pCL46YHYGg31lESxR7H7YG7VYV9O0Uo/VhYzuRIlp
ej5jp7yJxDxYR8tBaIXQxRSOw2vyKqN4c0PtCBos5YBDArI1ivIV/9txqQy3cR4y
AM2h594b8L48HumArZdzDzEQIM8AtqmPWChsc+VpOxU1+fyNOrZoDh+O6r0RptXW
e5Iv/G7ISQD1tg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:35:18 2025 by rpki-client