Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: ncX1RR/HuW6rIeM6WstSjUZaL33dLQytfTS/QntSad8=
Subject key identifier: 29:DF:3B:31:42:E5:8F:6E:15:B9:E9:EA:99:D7:5D:1B:DA:FC:54:05
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019511355A52DA7995A521CB3DE929C1EA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 0F28
Signing time: Mon 17 Feb 2025 00:01:03 +0000
Manifest this update: Mon 17 Feb 2025 00:01:03 +0000
Manifest next update: Tue 18 Feb 2025 00:01:03 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: OZ8/xO5Y4yvX0fVYST8uG37inCgTISA7vpqF3/6lT5s=)
2: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (hash: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:5a:52:da:79:95:a5:21:cb:3d:e9:29:c1:ea:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Feb 17 00:01:03 2025 GMT
Not After : Feb 18 00:01:03 2025 GMT
Subject: CN=29df3b3142e58f6e15b9e9ea99d75d1bdafc5405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:fa:9a:a0:cd:0a:85:bf:c8:c3:b1:30:ba:
1f:05:b4:d9:f0:6d:4b:ec:7a:67:84:62:31:1a:83:
54:8b:e0:93:58:fe:60:40:e4:af:89:a3:cc:fb:ad:
2a:39:fb:33:c9:59:e7:cf:56:55:18:e8:c6:86:93:
1b:7a:77:fe:0d:b9:f3:0f:98:84:d4:c0:37:1f:de:
2a:58:2a:4e:af:82:c2:3c:fa:3e:fd:93:d5:df:82:
71:cc:5c:d6:3b:47:11:a9:d6:30:c3:7b:09:d5:65:
a9:f3:6c:0a:8f:7f:48:db:68:30:a6:87:ca:0b:30:
c1:66:df:d5:bd:fb:f5:d2:8b:bf:5f:0e:f5:c3:d6:
ec:8f:16:bd:a3:de:36:d9:cc:13:9a:31:a9:9d:84:
23:3b:5a:d6:eb:16:7e:cc:b6:b8:0b:83:00:d0:83:
97:b7:3a:96:0c:dd:e7:ba:90:f5:7b:c7:74:33:b8:
3f:11:f5:1e:56:72:d0:84:57:07:9c:cc:af:12:3a:
09:59:3a:83:c0:ae:32:10:85:cd:93:08:56:98:ef:
b4:b3:61:4c:5d:5f:0c:77:3b:0a:34:6f:f5:bc:4b:
cf:e1:be:f9:90:5d:55:47:50:5b:0c:0d:fd:f5:6d:
38:bd:64:d3:77:f2:93:53:60:b5:bf:96:cc:9e:05:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:3B:31:42:E5:8F:6E:15:B9:E9:EA:99:D7:5D:1B:DA:FC:54:05
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:69:72:d9:60:6a:db:d7:61:46:10:e3:5f:2b:37:d5:93:
f0:56:55:dc:ad:1a:97:f4:5a:00:20:19:ca:6c:dd:34:4a:4d:
8d:5c:20:45:1f:f1:b5:c5:f3:e8:10:97:bc:9c:53:cf:9f:d3:
42:ae:55:54:5f:05:d2:ec:74:ef:02:89:6c:3d:ae:35:7c:aa:
88:ee:88:45:d0:5d:f7:27:c6:74:51:9a:27:f6:c5:82:d3:59:
54:29:37:a5:dd:9b:86:90:9f:f6:3a:28:7b:94:fc:b3:6e:45:
70:bc:ef:65:87:2f:08:2a:87:c8:02:20:11:64:87:6f:83:de:
22:00:51:de:66:1b:f7:45:bd:7e:02:7b:38:94:1e:04:c3:b6:
82:9b:91:b8:d5:a0:7d:4a:68:c1:2b:52:2a:58:75:68:f2:8b:
7d:89:b3:fd:0e:80:87:f8:3e:d3:83:f8:ec:13:a9:6d:36:28:
55:20:12:f0:8a:cf:e0:41:55:58:d0:3b:4f:28:d8:85:19:ff:
f9:18:74:fb:2a:a3:f8:79:3b:99:6d:42:80:b9:14:40:40:8d:
dd:04:72:e8:44:f4:1d:bc:9f:88:32:a8:a2:a2:93:79:42:38:
e6:0e:88:e6:51:60:f0:11:32:22:74:57:eb:77:c2:82:e4:84:
e2:34:f2:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNVpS2nmVpSHLPekpwepYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh
ODkwMmUwHhcNMjUwMjE3MDAwMTAzWhcNMjUwMjE4MDAwMTAzWjAzMTEwLwYDVQQD
EygyOWRmM2IzMTQyZTU4ZjZlMTViOWU5ZWE5OWQ3NWQxYmRhZmM1NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRH6mqDNCoW/yMOxMLofBbTZ8G1L
7HpnhGIxGoNUi+CTWP5gQOSviaPM+60qOfszyVnnz1ZVGOjGhpMbenf+DbnzD5iE
1MA3H94qWCpOr4LCPPo+/ZPV34JxzFzWO0cRqdYww3sJ1WWp82wKj39I22gwpofK
CzDBZt/Vvfv10ou/Xw71w9bsjxa9o9422cwTmjGpnYQjO1rW6xZ+zLa4C4MA0IOX
tzqWDN3nupD1e8d0M7g/EfUeVnLQhFcHnMyvEjoJWTqDwK4yEIXNkwhWmO+0s2FM
XV8MdzsKNG/1vEvP4b75kF1VR1BbDA399W04vWTTd/KTU2C1v5bMngVSUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnfOzFC5Y9uFbnp6pnXXRva/FQFMB8GA1UdIwQY
MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt
ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm
LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZdpctlg
atvXYUYQ418rN9WT8FZV3K0al/RaACAZymzdNEpNjVwgRR/xtcXz6BCXvJxTz5/T
Qq5VVF8F0ux07wKJbD2uNXyqiO6IRdBd9yfGdFGaJ/bFgtNZVCk3pd2bhpCf9joo
e5T8s25FcLzvZYcvCCqHyAIgEWSHb4PeIgBR3mYb90W9fgJ7OJQeBMO2gpuRuNWg
fUpowStSKlh1aPKLfYmz/Q6Ah/g+04P47BOpbTYoVSAS8IrP4EFVWNA7TyjYhRn/
+Rh0+yqj+Hk7mW1CgLkUQECN3QRy6ET0HbyfiDKooqKTeUI45g6I5lFg8BEyInRX
63fCguSE4jTyDQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:56 2025 by rpki-client