Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: lBRKndcJ5TrzVUAJfdUnwfnHSkDS+NdEirg23+WA2Lg=
Subject key identifier: F3:3C:C5:08:1E:AB:CA:97:E6:E6:3A:33:F7:C2:27:5D:53:F0:7F:2E
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 019653806D66EFF480DC91BD0C46DD39DF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0D09
Signing time: Sun 20 Apr 2025 14:00:47 +0000
Manifest this update: Sun 20 Apr 2025 14:00:47 +0000
Manifest next update: Mon 21 Apr 2025 14:00:47 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: /QFfxdn1MEOh7b+uV09rE+NhPtW290itz81zlLuCiC4=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:6d:66:ef:f4:80:dc:91:bd:0c:46:dd:39:df:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Apr 20 14:00:47 2025 GMT
Not After : Apr 21 14:00:47 2025 GMT
Subject: CN=f33cc5081eabca97e6e63a33f7c2275d53f07f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:eb:89:de:e1:dd:b1:63:f5:bc:02:0c:6c:
fd:e9:29:a8:ad:9a:d9:a0:3c:1d:59:9a:d4:e4:4b:
c1:a0:e9:e1:4e:01:f1:07:61:d7:36:71:c1:f4:4b:
48:f4:8c:d4:96:2c:4d:3b:47:ec:1a:ea:5c:47:c7:
34:a7:4d:84:ad:22:09:c0:f5:b3:f5:30:16:c5:f3:
98:64:c8:65:bb:11:19:3a:7a:80:b7:00:92:ef:8f:
1e:b2:3b:c3:44:c5:a8:f2:38:42:89:51:f5:38:5e:
fc:29:9a:5a:bb:52:84:00:41:9c:7e:af:5c:07:c0:
d9:40:a1:9a:04:a1:62:a7:ea:ff:32:de:83:a4:89:
76:cb:d8:66:d7:50:a2:fb:6e:a0:d0:54:cf:74:2e:
10:ed:25:cc:f1:83:90:66:99:8f:ea:00:d9:80:32:
09:63:c8:cc:c0:e0:4a:11:5c:04:b9:8e:86:6a:aa:
a9:82:71:bd:07:e3:08:12:c1:4e:d6:3e:6b:e3:c9:
46:9a:f1:e8:bd:a0:43:96:bd:9d:f4:92:35:ff:85:
1c:c9:43:93:d3:4e:ca:eb:0c:cc:62:32:eb:4a:cc:
af:c5:0b:91:44:8b:9c:1b:bc:0c:12:53:11:94:39:
32:f3:03:e4:24:e8:07:45:38:17:7e:26:21:80:b6:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:C5:08:1E:AB:CA:97:E6:E6:3A:33:F7:C2:27:5D:53:F0:7F:2E
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:db:38:1e:6a:25:06:18:9c:8a:37:03:1e:01:54:b2:0a:a7:
62:af:3f:39:f5:2d:cc:08:e7:d4:85:11:45:93:1d:af:93:6f:
86:e0:c9:49:43:ae:0c:f2:61:17:6b:4e:5e:ab:e8:d8:54:10:
70:a2:ce:85:c3:c4:c8:e6:25:3f:e9:3f:7b:f0:f2:9d:a5:82:
fe:ee:d0:8c:ee:6f:9a:61:01:99:5f:56:98:55:d3:99:9d:e7:
a8:42:ce:d2:d3:6a:95:df:de:20:45:83:5c:31:22:b7:ae:30:
d1:82:95:90:ce:1a:6a:3b:00:82:16:53:4a:41:fb:47:a4:ca:
a6:ed:66:3c:49:84:0c:85:75:e8:30:c0:34:59:f2:46:ef:93:
b9:04:b6:ef:a6:e4:32:28:ab:8c:20:69:f5:a4:d0:b9:db:24:
46:91:f5:55:ed:bd:53:28:bb:da:54:68:60:c4:3e:d7:70:cc:
ba:0c:c6:1a:c0:10:8e:e0:91:d6:ac:43:bc:8c:bb:e3:d0:e8:
d8:b9:b2:ec:7f:16:60:f3:18:f4:8c:de:d8:8b:7c:c9:56:8d:
86:a1:cf:9f:11:81:91:ef:22:27:6e:39:c9:a7:0a:43:46:38:
c6:1f:df:66:a1:2d:71:63:90:75:7a:0b:05:53:ad:94:0e:bb:
d4:b0:40:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgG1m7/SA3JG9DEbdOd9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz
MjUxOWYwHhcNMjUwNDIwMTQwMDQ3WhcNMjUwNDIxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhmMzNjYzUwODFlYWJjYTk3ZTZlNjNhMzNmN2MyMjc1ZDUzZjA3ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAvrid7h3bFj9bwCDGz96SmorZrZ
oDwdWZrU5EvBoOnhTgHxB2HXNnHB9EtI9IzUlixNO0fsGupcR8c0p02ErSIJwPWz
9TAWxfOYZMhluxEZOnqAtwCS748esjvDRMWo8jhCiVH1OF78KZpau1KEAEGcfq9c
B8DZQKGaBKFip+r/Mt6DpIl2y9hm11Ci+26g0FTPdC4Q7SXM8YOQZpmP6gDZgDIJ
Y8jMwOBKEVwEuY6GaqqpgnG9B+MIEsFO1j5r48lGmvHovaBDlr2d9JI1/4UcyUOT
007K6wzMYjLrSsyvxQuRRIucG7wMElMRlDky8wPkJOgHRTgXfiYhgLbUiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM8xQgeq8qX5uY6M/fCJ11T8H8uMB8GA1UdIwQY
MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt
Y2ViMDcxMGEwNzUxLzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx
LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNs4Hmol
BhicijcDHgFUsgqnYq8/OfUtzAjn1IURRZMdr5NvhuDJSUOuDPJhF2tOXqvo2FQQ
cKLOhcPEyOYlP+k/e/DynaWC/u7QjO5vmmEBmV9WmFXTmZ3nqELO0tNqld/eIEWD
XDEit64w0YKVkM4aajsAghZTSkH7R6TKpu1mPEmEDIV16DDANFnyRu+TuQS276bk
MiirjCBp9aTQudskRpH1Ve29Uyi72lRoYMQ+13DMugzGGsAQjuCR1qxDvIy749Do
2Lmy7H8WYPMY9Ize2It8yVaNhqHPnxGBke8iJ245yacKQ0Y4xh/fZqEtcWOQdXoL
BVOtlA671LBAeA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:40:41 2025 by rpki-client