Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier: JlYfvRM6tP005UwbAO+V1B0RPMiKp9c3MCTK0OTmmy0=
Subject key identifier: 05:6E:25:75:C7:BE:89:37:A5:00:8E:7E:EC:71:71:60:61:EC:F3:45
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 0194C3BEB7C37A695853AD8ABCC1A2CFAE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number: 112E
Signing time: Sat 01 Feb 2025 23:00:43 +0000
Manifest this update: Sat 01 Feb 2025 23:00:43 +0000
Manifest next update: Sun 02 Feb 2025 23:00:43 +0000
Files and hashes: 1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=)
2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: usQ5BM1GUSwUy1I34rLUsZQgiyFaBOoUCpzW+W6UGOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:b7:c3:7a:69:58:53:ad:8a:bc:c1:a2:cf:ae:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Feb 1 23:00:43 2025 GMT
Not After : Feb 2 23:00:43 2025 GMT
Subject: CN=056e2575c7be8937a5008e7eec71716061ecf345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:66:ea:bb:bf:90:c4:cd:25:16:78:db:82:
1a:03:29:ef:1b:1f:05:9e:94:95:e2:d4:8e:c9:0b:
f3:33:87:aa:20:bd:33:52:33:be:97:be:d7:3c:71:
78:14:71:1f:b6:c8:2f:c5:b4:3e:43:15:42:9b:fd:
0c:b9:a2:32:2d:7a:85:ae:12:d3:0a:ea:a8:ad:a9:
77:98:23:6a:2d:93:c0:13:51:02:ac:56:1d:bb:57:
9c:8e:ac:61:7d:c5:60:0b:fb:c6:6c:cb:75:41:bf:
24:e5:21:1f:f9:34:71:b8:a3:5e:3a:a0:42:ad:b8:
a7:43:bd:a6:29:e7:f0:da:6a:1f:c6:8c:2f:73:e4:
34:57:a3:05:c6:93:86:ed:a5:a1:c4:ec:54:a2:9e:
37:07:9b:fc:aa:87:31:74:91:27:f6:22:16:a0:92:
50:dc:d0:e9:8b:87:de:eb:9c:69:e2:c4:45:6b:89:
1b:6d:72:a0:44:12:e7:6e:af:e6:9f:23:5f:9b:2f:
ff:bc:dc:86:c2:96:3f:3e:4f:60:6f:14:25:d1:5a:
9d:4f:9c:f7:b5:36:98:75:ad:fe:67:f9:2e:36:fb:
e0:69:c2:56:f9:a5:cc:1d:9e:49:51:52:95:ef:36:
dd:af:a5:1f:ef:a2:e4:c5:84:e3:53:13:94:8b:ab:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:25:75:C7:BE:89:37:A5:00:8E:7E:EC:71:71:60:61:EC:F3:45
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:89:df:2d:0b:d0:2e:3e:a4:fa:48:7e:70:cb:fe:96:e0:
62:a9:fa:b2:7d:de:c2:93:d1:53:57:a1:09:b3:cf:10:ad:8d:
a7:30:cd:c5:d1:9a:d5:6f:35:db:c5:88:87:2e:bb:86:3f:b1:
be:e6:78:bf:5a:db:6c:fd:d4:27:74:49:07:9e:16:6d:92:04:
a2:41:92:6e:fb:76:86:47:37:11:61:c8:b8:04:a0:7c:3c:d1:
0e:0c:f6:a1:3e:8c:7f:c9:39:6e:98:d4:1d:b5:5f:0e:99:ce:
b8:7a:39:80:74:60:f1:f7:57:73:f7:f5:69:eb:17:4e:e7:72:
00:35:65:85:be:03:b1:59:40:36:40:2a:5b:d8:09:3f:59:19:
f9:7d:c9:8e:99:87:a0:d0:ee:89:cd:00:38:1e:73:d1:97:12:
ba:58:ea:e5:49:fc:e8:77:8b:cc:24:92:fe:4c:04:98:e0:b6:
95:e4:35:ff:ae:b4:7e:d0:dc:95:89:15:f3:40:c5:74:00:6a:
71:d0:3a:3e:0a:95:83:1f:90:af:75:aa:ed:ea:1f:12:e6:00:
2c:24:dd:40:58:66:f7:1f:63:63:be:9e:76:42:22:99:9a:de:
e3:e7:d4:24:66:41:bb:fc:e9:c1:42:53:70:43:ae:ad:d5:78:
07:e3:a0:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvrfDemlYU62KvMGiz66TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNGY5NGU0MGM5OWUxOWEzMjIzYTI5MzVkOGVjOTRlM2Q5
MjcwYmIwHhcNMjUwMjAxMjMwMDQzWhcNMjUwMjAyMjMwMDQzWjAzMTEwLwYDVQQD
EygwNTZlMjU3NWM3YmU4OTM3YTUwMDhlN2VlYzcxNzE2MDYxZWNmMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI5m6ru/kMTNJRZ424IaAynvGx8F
npSV4tSOyQvzM4eqIL0zUjO+l77XPHF4FHEftsgvxbQ+QxVCm/0MuaIyLXqFrhLT
Cuqoral3mCNqLZPAE1ECrFYdu1ecjqxhfcVgC/vGbMt1Qb8k5SEf+TRxuKNeOqBC
rbinQ72mKefw2mofxowvc+Q0V6MFxpOG7aWhxOxUop43B5v8qocxdJEn9iIWoJJQ
3NDpi4fe65xp4sRFa4kbbXKgRBLnbq/mnyNfmy//vNyGwpY/Pk9gbxQl0VqdT5z3
tTaYda3+Z/kuNvvgacJW+aXMHZ5JUVKV7zbdr6Uf76LkxYTjUxOUi6sKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVuJXXHvok3pQCOfuxxcWBh7PNFMB8GA1UdIwQY
MBaAFC9PlOQMmeGaMiOik12OyU49knC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQt
MDhlMDBkYTQwNDQ0LzEvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQtMDhlMDBkYTQwNDQ0
LzEvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr6J3y0L
0C4+pPpIfnDL/pbgYqn6sn3ewpPRU1ehCbPPEK2NpzDNxdGa1W8128WIhy67hj+x
vuZ4v1rbbP3UJ3RJB54WbZIEokGSbvt2hkc3EWHIuASgfDzRDgz2oT6Mf8k5bpjU
HbVfDpnOuHo5gHRg8fdXc/f1aesXTudyADVlhb4DsVlANkAqW9gJP1kZ+X3JjpmH
oNDuic0AOB5z0ZcSuljq5Un86HeLzCSS/kwEmOC2leQ1/660ftDclYkV80DFdABq
cdA6PgqVgx+Qr3Wq7eofEuYALCTdQFhm9x9jY76edkIimZre4+fUJGZBu/zpwUJT
cEOurdV4B+Og3g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:15 2025 by rpki-client