Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: IgZPfrgAmdeJ8Az4H5oBOP54/GFFpX4v2lebGkLWdE0=
Subject key identifier: E5:34:A6:28:F6:D5:13:0F:E1:4C:A1:3A:B4:25:72:37:B1:E2:2C:9A
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 01967AC4B806DE4585E090D5E94432D6B805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0857
Signing time: Mon 28 Apr 2025 05:00:34 +0000
Manifest this update: Mon 28 Apr 2025 05:00:34 +0000
Manifest next update: Tue 29 Apr 2025 05:00:34 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: lVaIwWeH0CLdxhQyizeosEhz2oDvNvKZqdLpfXv6bKo=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:b8:06:de:45:85:e0:90:d5:e9:44:32:d6:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Apr 28 05:00:34 2025 GMT
Not After : Apr 29 05:00:34 2025 GMT
Subject: CN=e534a628f6d5130fe14ca13ab4257237b1e22c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:d5:5d:36:51:8c:2f:84:34:13:10:ce:56:
a6:86:a5:d0:4d:40:c7:01:b7:9c:75:8f:69:5a:e6:
de:d2:ca:02:e1:c8:62:b2:24:74:14:5c:18:1f:1e:
9e:d2:ec:a3:8f:d4:09:94:ab:81:84:c4:2d:ae:4e:
2a:8f:4f:fc:28:70:ac:d5:a2:0a:c4:93:a5:49:37:
6b:e7:9f:07:54:c9:98:c9:c0:d6:13:ed:c4:0f:9f:
bf:4f:cc:01:1e:06:ba:42:03:23:bb:e3:b9:4f:21:
4b:37:e6:46:c5:9b:ce:52:49:74:b1:5a:43:7c:cf:
b0:09:82:e9:63:c0:84:b1:5c:08:89:30:92:76:fb:
f7:51:36:c1:fa:75:de:51:87:b4:11:22:9c:4e:19:
07:5c:7b:6d:0a:62:11:21:c8:6e:1e:a8:aa:47:e0:
da:cf:b8:ad:dd:0f:30:23:f9:2e:5e:f5:8a:80:59:
6c:7b:d9:ec:99:b3:94:d8:fb:dc:3d:ef:4e:25:13:
4d:e9:4c:c6:aa:66:78:17:31:15:f1:84:70:8c:5f:
49:92:36:2f:5a:56:d2:d6:89:af:74:97:c0:8f:c3:
35:a6:91:87:5c:41:65:72:f7:e5:28:b9:bd:f8:ba:
72:f4:70:f1:4e:b9:40:3a:42:d3:88:4f:9d:6d:c0:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:A6:28:F6:D5:13:0F:E1:4C:A1:3A:B4:25:72:37:B1:E2:2C:9A
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:48:d1:dc:34:d6:11:0f:83:67:b4:e6:ae:01:44:35:b0:e1:
af:fc:1e:36:90:3c:00:11:76:20:df:00:82:9a:59:0f:63:e3:
a8:82:23:35:90:8f:1e:0e:3b:a7:4f:16:b6:59:ac:d9:95:91:
c3:86:5e:83:4e:6b:d0:67:d5:32:6b:29:1c:7a:76:a7:c2:44:
4e:4e:cb:9c:af:0a:6c:87:e5:72:fb:a9:a1:ab:a9:c8:c0:a6:
a0:27:b5:46:1c:2d:16:16:29:02:c8:48:34:2e:2d:1e:d3:50:
69:d9:bc:ac:50:35:9b:bc:66:63:4f:a9:06:61:07:cf:03:87:
c5:7a:ab:b4:85:ce:23:fd:32:a9:5b:a2:2b:67:02:fd:86:d0:
5d:ad:40:d8:4c:ed:16:cf:38:41:e8:43:22:cc:2d:d7:70:04:
06:b7:9a:6f:50:cf:79:e3:9c:13:fd:8c:ff:02:e3:91:7e:7d:
b1:37:b5:ea:cc:48:0b:6b:b1:76:71:3d:f6:96:57:6d:dc:3d:
30:83:39:a2:e5:89:79:a8:01:53:e8:46:67:71:c6:a0:e5:75:
10:36:f8:a0:a5:13:ec:9d:27:7a:fb:25:fa:0b:0c:c2:b1:75:
73:99:e7:5f:24:76:05:0e:d1:95:b8:6a:9f:91:37:17:a6:43:
9a:d9:47:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xLgG3kWF4JDV6UQy1rgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw
YWNkOTcwHhcNMjUwNDI4MDUwMDM0WhcNMjUwNDI5MDUwMDM0WjAzMTEwLwYDVQQD
EyhlNTM0YTYyOGY2ZDUxMzBmZTE0Y2ExM2FiNDI1NzIzN2IxZTIyYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMnVXTZRjC+ENBMQzlamhqXQTUDH
AbecdY9pWube0soC4chisiR0FFwYHx6e0uyjj9QJlKuBhMQtrk4qj0/8KHCs1aIK
xJOlSTdr558HVMmYycDWE+3ED5+/T8wBHga6QgMju+O5TyFLN+ZGxZvOUkl0sVpD
fM+wCYLpY8CEsVwIiTCSdvv3UTbB+nXeUYe0ESKcThkHXHttCmIRIchuHqiqR+Da
z7it3Q8wI/kuXvWKgFlse9nsmbOU2PvcPe9OJRNN6UzGqmZ4FzEV8YRwjF9JkjYv
WlbS1omvdJfAj8M1ppGHXEFlcvflKLm9+Lpy9HDxTrlAOkLTiE+dbcDRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOU0pij21RMP4UyhOrQlcjex4iyaMB8GA1UdIwQY
MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt
YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2
LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEjR3DTW
EQ+DZ7TmrgFENbDhr/weNpA8ABF2IN8AgppZD2PjqIIjNZCPHg47p08Wtlms2ZWR
w4Zeg05r0GfVMmspHHp2p8JETk7LnK8KbIflcvupoaupyMCmoCe1RhwtFhYpAshI
NC4tHtNQadm8rFA1m7xmY0+pBmEHzwOHxXqrtIXOI/0yqVuiK2cC/YbQXa1A2Ezt
Fs84QehDIswt13AEBreab1DPeeOcE/2M/wLjkX59sTe16sxIC2uxdnE99pZXbdw9
MIM5ouWJeagBU+hGZ3HGoOV1EDb4oKUT7J0nevsl+gsMwrF1c5nnXyR2BQ7Rlbhq
n5E3F6ZDmtlHQA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:21 2025 by rpki-client