Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: lqamhsZw8W5tiipfsdQCRLcfxPOCjZhZNUqCWB5TVA4=
Subject key identifier: E4:71:31:53:B2:E1:AE:F9:F2:F6:BF:73:FF:A0:4B:36:F1:98:C3:B1
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019674FA26AD1AC975337B46A0E402FA4E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 151D
Signing time: Sun 27 Apr 2025 02:01:12 +0000
Manifest this update: Sun 27 Apr 2025 02:01:12 +0000
Manifest next update: Mon 28 Apr 2025 02:01:12 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: L98i8RCETvAZmQMdOcuNCCefe5cZ+HhoYJ493Y19/4o=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:26:ad:1a:c9:75:33:7b:46:a0:e4:02:fa:4e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Apr 27 02:01:12 2025 GMT
Not After : Apr 28 02:01:12 2025 GMT
Subject: CN=e4713153b2e1aef9f2f6bf73ffa04b36f198c3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:3f:51:e6:a3:da:e5:35:65:3f:79:ad:51:
de:62:1f:c1:c6:fa:db:c0:3c:7c:f8:b0:f7:ea:c8:
b6:27:2e:30:7b:2e:75:f1:74:ff:c1:8f:dd:7a:5f:
47:34:2c:05:38:a6:39:e4:01:08:dd:53:52:92:a9:
47:ab:e0:64:47:d6:2c:84:d3:b7:4f:90:dd:f4:be:
3d:84:fd:53:58:3c:29:97:33:16:fa:ea:9f:a2:21:
8b:8e:61:a2:63:b2:06:55:23:77:d7:c4:c9:8b:3f:
72:49:67:12:f6:be:bc:00:1c:ab:9a:e5:84:c2:13:
ba:fa:12:25:b2:09:2e:33:fc:b8:c0:ea:d9:eb:9f:
ea:3a:68:53:40:b1:ba:f6:21:81:45:fa:d0:4c:b6:
8d:48:cc:e8:91:59:54:16:d3:4f:1a:82:4a:af:88:
e9:1d:0f:5f:35:4c:94:20:f7:9b:ee:09:0e:97:b5:
77:80:79:7b:4b:c2:74:38:8f:da:0a:c4:dc:22:21:
49:5f:f7:4a:31:26:af:d8:b3:72:7b:77:03:e7:00:
c6:91:6f:0c:1f:5d:63:9d:9a:62:32:46:bf:62:24:
0e:00:87:63:e0:5e:2d:f1:bb:84:92:33:b4:3f:7e:
3f:47:ca:e9:9c:a0:44:68:ec:30:ed:49:ad:1e:b9:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:71:31:53:B2:E1:AE:F9:F2:F6:BF:73:FF:A0:4B:36:F1:98:C3:B1
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:59:86:60:1b:80:08:22:2b:90:91:4d:6f:08:9d:78:a7:43:
93:90:cd:12:df:85:06:fc:db:3b:ed:ad:d3:08:c6:2d:73:8e:
42:8c:91:e1:5a:e4:7e:11:03:6f:77:4c:19:e2:57:be:63:78:
20:66:7b:17:de:1c:a1:30:37:4b:13:be:c4:bc:88:35:4a:a4:
ef:ba:27:1e:7d:4c:57:dd:7f:75:75:2f:cf:ee:1f:45:b9:4d:
5c:09:2d:a5:37:b7:67:c0:c6:99:ec:a0:9c:0b:96:d1:e2:e3:
e0:f5:75:02:c0:a4:bd:9a:07:4f:0a:d8:3f:af:09:3a:6e:cf:
06:89:6f:43:f5:fa:11:68:f2:9e:50:f5:07:37:c9:f6:52:56:
7e:c5:95:35:55:a2:d2:d0:8c:74:f3:5b:9c:bb:cb:a2:e5:16:
6b:34:85:8a:7a:04:26:d9:b5:9f:98:9d:d9:46:42:d1:8b:63:
10:49:18:98:d1:99:bc:45:41:5a:ec:91:39:8d:d6:89:fb:bb:
6c:6e:d2:aa:6d:30:c9:03:50:50:91:17:c4:48:d4:a2:b3:da:
27:12:5a:64:41:25:ed:7a:48:f3:90:df:3a:aa:73:15:1f:6f:
b5:bf:85:b2:d7:1e:1b:40:38:f5:d9:69:7c:bc:12:b3:0c:3f:
a2:dc:0a:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+iatGsl1M3tGoOQC+k57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjUwNDI3MDIwMTEyWhcNMjUwNDI4MDIwMTEyWjAzMTEwLwYDVQQD
EyhlNDcxMzE1M2IyZTFhZWY5ZjJmNmJmNzNmZmEwNGIzNmYxOThjM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5s/Ueaj2uU1ZT95rVHeYh/Bxvrb
wDx8+LD36si2Jy4wey518XT/wY/del9HNCwFOKY55AEI3VNSkqlHq+BkR9YshNO3
T5Dd9L49hP1TWDwplzMW+uqfoiGLjmGiY7IGVSN318TJiz9ySWcS9r68AByrmuWE
whO6+hIlsgkuM/y4wOrZ65/qOmhTQLG69iGBRfrQTLaNSMzokVlUFtNPGoJKr4jp
HQ9fNUyUIPeb7gkOl7V3gHl7S8J0OI/aCsTcIiFJX/dKMSav2LNye3cD5wDGkW8M
H11jnZpiMka/YiQOAIdj4F4t8buEkjO0P34/R8rpnKBEaOww7UmtHrnmJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORxMVOy4a758va/c/+gSzbxmMOxMB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVmGYBuA
CCIrkJFNbwideKdDk5DNEt+FBvzbO+2t0wjGLXOOQoyR4VrkfhEDb3dMGeJXvmN4
IGZ7F94coTA3SxO+xLyINUqk77onHn1MV91/dXUvz+4fRblNXAktpTe3Z8DGmeyg
nAuW0eLj4PV1AsCkvZoHTwrYP68JOm7PBolvQ/X6EWjynlD1BzfJ9lJWfsWVNVWi
0tCMdPNbnLvLouUWazSFinoEJtm1n5id2UZC0YtjEEkYmNGZvEVBWuyROY3Wifu7
bG7Sqm0wyQNQUJEXxEjUorPaJxJaZEEl7XpI85DfOqpzFR9vtb+FstceG0A49dlp
fLwSsww/otwKfw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:21:13 2025 by rpki-client