Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: Px1KizxszR2sLg/NDHefLjP2BCo2Z9R7nn6MLu6ahIw=
Subject key identifier: A2:28:FB:A7:9E:8E:B9:FD:2C:7C:83:AC:02:A1:83:31:AA:FA:66:2C
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 019679B1ED00B4D203023C68D89F431A20CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 1229
Signing time: Mon 28 Apr 2025 00:00:25 +0000
Manifest this update: Mon 28 Apr 2025 00:00:25 +0000
Manifest next update: Tue 29 Apr 2025 00:00:25 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: gcwM1wZ196ZQn0/eW/N+k+G+YcNwaECoszpC1gCpPUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:ed:00:b4:d2:03:02:3c:68:d8:9f:43:1a:20:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Apr 28 00:00:25 2025 GMT
Not After : Apr 29 00:00:25 2025 GMT
Subject: CN=a228fba79e8eb9fd2c7c83ac02a18331aafa662c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:60:37:03:75:a1:1d:bb:cf:c2:51:d7:57:
c4:1c:fa:32:af:9b:fb:73:97:16:ca:7c:88:8d:13:
d8:b9:b3:ee:43:f9:6f:47:05:3c:df:36:2b:13:51:
c5:88:70:c9:6e:59:c1:f8:4c:bb:6c:a5:8f:3d:5d:
e5:32:17:85:4a:c3:9c:29:31:ba:fb:77:6e:fa:3e:
40:65:8f:38:40:d2:52:54:0c:85:35:c3:b6:73:80:
78:d5:ae:31:cb:82:3c:70:f7:8d:9b:72:fb:6a:78:
b1:8a:94:5a:43:ba:bb:dd:76:46:28:ad:09:30:da:
26:fc:62:c9:d0:80:35:c1:51:31:57:63:a2:c3:ad:
db:2e:8b:ea:37:bc:f3:35:64:cb:bb:8a:c2:cd:99:
36:48:72:07:67:09:33:73:87:c3:e0:b2:87:01:ac:
3f:3b:6b:0c:28:44:d3:cf:88:2c:4e:95:c5:ca:66:
46:c8:af:39:e8:e1:45:2f:f4:83:b9:d4:a8:86:a2:
52:e4:31:60:4f:59:f7:b7:b9:d5:5d:0d:30:7a:b3:
f4:51:42:91:ab:15:99:f9:c3:86:68:14:87:a8:22:
b8:02:4e:8e:ac:f0:7b:6f:9f:a2:7e:2f:c2:96:be:
62:f8:24:8a:3f:c0:7e:4c:18:d1:4f:bb:a2:f9:63:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:FB:A7:9E:8E:B9:FD:2C:7C:83:AC:02:A1:83:31:AA:FA:66:2C
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:56:dc:be:e1:5d:52:53:cf:90:2a:25:22:c5:87:8c:93:3b:
7b:8e:de:b9:a3:95:af:2e:70:2c:e6:3f:26:93:19:9e:03:e5:
37:29:e3:11:c5:7d:b8:e4:00:0d:93:3f:e1:51:d4:59:5e:27:
ab:a4:5a:d5:9b:1f:a1:d9:5f:3e:10:4f:30:d0:60:7b:ef:3c:
a8:38:80:53:e6:e7:d1:0e:73:44:57:7a:a6:b6:88:09:1c:4a:
ee:cd:0a:b8:6d:2d:21:bc:ba:69:12:31:6d:1e:d4:3f:74:96:
e9:01:f2:bd:a7:da:c6:e8:af:98:9b:af:e8:30:c5:41:02:a5:
31:c8:e1:78:9a:32:c2:93:03:63:83:c5:c1:33:55:6f:80:30:
d8:bf:9f:a2:bc:86:3f:16:1e:6d:7d:30:ec:b7:91:a4:5d:a8:
07:4b:4a:54:d1:a5:77:da:91:be:cd:f4:5b:a0:bb:e8:da:62:
38:9a:72:03:e3:7c:b9:ad:44:e1:5a:94:23:4f:8e:a4:32:58:
08:1b:69:3c:38:7c:1f:2e:24:6e:d7:ec:ce:e0:1a:75:7c:a5:
db:f5:32:06:b1:5f:f4:7e:bc:2d:13:58:71:7a:d3:1f:f6:d1:
86:51:6b:09:cd:dc:06:6c:96:cb:76:80:53:23:55:a9:28:63:
a6:1a:d1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5se0AtNIDAjxo2J9DGiDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTk1MjlkZDMxNzA2NDVkNzZjZjZhYzA2NTk1MDZjYzY0
OWNhOTAwHhcNMjUwNDI4MDAwMDI1WhcNMjUwNDI5MDAwMDI1WjAzMTEwLwYDVQQD
EyhhMjI4ZmJhNzllOGViOWZkMmM3YzgzYWMwMmExODMzMWFhZmE2NjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC9gNwN1oR27z8JR11fEHPoyr5v7
c5cWynyIjRPYubPuQ/lvRwU83zYrE1HFiHDJblnB+Ey7bKWPPV3lMheFSsOcKTG6
+3du+j5AZY84QNJSVAyFNcO2c4B41a4xy4I8cPeNm3L7anixipRaQ7q73XZGKK0J
MNom/GLJ0IA1wVExV2Oiw63bLovqN7zzNWTLu4rCzZk2SHIHZwkzc4fD4LKHAaw/
O2sMKETTz4gsTpXFymZGyK856OFFL/SDudSohqJS5DFgT1n3t7nVXQ0werP0UUKR
qxWZ+cOGaBSHqCK4Ak6OrPB7b5+ifi/Clr5i+CSKP8B+TBjRT7ui+WMhWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIo+6eejrn9LHyDrAKhgzGq+mYsMB8GA1UdIwQY
MBaAFJdZUp3TFwZF12z2rAZZUGzGScqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYt
ZGU0YWNjYjAwZGQ3LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYtZGU0YWNjYjAwZGQ3
LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlbcvuFd
UlPPkColIsWHjJM7e47euaOVry5wLOY/JpMZngPlNynjEcV9uOQADZM/4VHUWV4n
q6Ra1ZsfodlfPhBPMNBge+88qDiAU+bn0Q5zRFd6praICRxK7s0KuG0tIby6aRIx
bR7UP3SW6QHyvafaxuivmJuv6DDFQQKlMcjheJoywpMDY4PFwTNVb4Aw2L+foryG
PxYebX0w7LeRpF2oB0tKVNGld9qRvs30W6C76NpiOJpyA+N8ua1E4VqUI0+OpDJY
CBtpPDh8Hy4kbtfszuAadXyl2/UyBrFf9H68LRNYcXrTH/bRhlFrCc3cBmyWy3aA
UyNVqShjphrRMA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:59 2025 by rpki-client