Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: +D5ROkzZInzfZOq30sr4YpDte1yyc6f8FVMf/fqWyKo=
Subject key identifier: B4:09:4C:DF:2F:A4:5F:BF:A6:5F:74:E0:7A:B7:FD:CA:1B:04:51:D8
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 0196741DDD5A5B1814CDD3567AEA690FD80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 22:00:36 +0000
Manifest this update: Sat 26 Apr 2025 22:00:36 +0000
Manifest next update: Sun 27 Apr 2025 22:00:36 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: NTR8c88iuKunFq79mPgeKiaPNxDons1UqNEf9PKJezQ=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:dd:5a:5b:18:14:cd:d3:56:7a:ea:69:0f:d8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Apr 26 22:00:36 2025 GMT
Not After : Apr 27 22:00:36 2025 GMT
Subject: CN=b4094cdf2fa45fbfa65f74e07ab7fdca1b0451d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:25:6a:29:dc:e8:8a:6d:67:d4:cc:06:49:
0d:f4:b1:c7:50:8e:5c:41:68:e9:54:66:03:b3:c0:
9a:6c:2e:c2:94:ce:9c:1c:27:37:ad:de:d9:f6:db:
e2:d0:a0:33:c3:aa:cb:09:bc:97:d9:6a:51:3d:ab:
4d:4c:4c:5d:be:d4:dd:4e:40:53:d3:59:8d:0c:ac:
6d:f7:d2:6e:dc:32:9e:5d:17:83:81:f8:ef:df:55:
a6:9d:14:64:32:57:1e:da:5b:82:8b:bc:df:ea:b0:
0f:96:7d:49:6c:d6:66:9a:b5:fc:df:dd:a6:52:ed:
10:19:e6:f7:8b:17:e0:92:e4:76:30:20:00:8d:ca:
c2:f5:38:24:ca:c5:ff:9b:34:35:18:27:b7:7c:d0:
82:27:5d:b2:db:c8:34:34:80:ef:87:0d:f2:b5:18:
73:99:37:af:0d:33:c8:85:18:04:df:f3:ab:6d:e2:
0a:44:3b:10:09:2f:6f:6f:46:bd:97:fe:e5:41:53:
f6:94:bd:c4:a7:81:79:b9:83:2e:4c:68:9d:94:c3:
6b:59:76:42:72:58:67:6d:1b:0f:e9:e2:6e:c7:64:
00:29:2c:e2:c1:c6:2c:64:e3:e6:7d:a9:5c:01:e1:
17:c3:fa:fc:88:2f:e0:c0:fa:d4:d4:82:20:c4:d9:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:4C:DF:2F:A4:5F:BF:A6:5F:74:E0:7A:B7:FD:CA:1B:04:51:D8
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:13:bd:6f:7c:93:0a:97:52:42:35:8d:02:cb:a9:19:f0:8a:
cb:da:2c:88:5f:d5:2c:e5:a7:6c:64:4a:19:bc:6e:93:80:7a:
76:3e:b1:2c:fa:fd:fb:32:14:3f:38:1c:71:28:f7:64:1f:fc:
6b:0d:c2:01:d1:92:78:d9:75:38:7f:52:44:1c:24:af:7a:f5:
93:87:e0:9b:5b:b3:23:a4:4c:bb:62:be:d6:d8:b4:c7:ae:46:
32:76:c1:01:06:fc:a9:67:ac:07:e6:20:8c:4e:a7:62:5d:31:
1a:5c:43:b3:36:60:bb:1f:51:ea:47:c6:52:1d:5f:1a:3c:83:
f4:8f:7b:11:cc:d3:85:f1:18:22:f1:b2:8f:dd:1f:44:ea:6f:
6f:72:53:18:b0:4b:64:90:b7:de:f5:cf:ec:71:d8:9e:01:3d:
b5:eb:bb:7b:af:26:d7:65:f1:60:ea:66:03:b6:71:59:36:12:
d8:65:3a:af:5d:1f:1b:1c:2d:c6:f8:9c:ef:72:c4:78:76:7e:
11:3c:1b:25:30:e0:c7:df:36:9d:ed:37:17:73:c7:4d:2d:5f:
9f:e9:9d:44:b2:3e:7c:c1:63:2c:6c:59:01:5f:b1:7c:98:24:
d8:db:20:06:7a:72:b2:f9:58:57:b6:7c:51:c3:77:5c:80:05:
e9:fa:97:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0Hd1aWxgUzdNWeuppD9gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTcwNTIwNzU5NjFlOWQ5MGMyN2QwNzEyNWE0YjQ0NmNh
ZmQ3OTAwHhcNMjUwNDI2MjIwMDM2WhcNMjUwNDI3MjIwMDM2WjAzMTEwLwYDVQQD
EyhiNDA5NGNkZjJmYTQ1ZmJmYTY1Zjc0ZTA3YWI3ZmRjYTFiMDQ1MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCQlainc6IptZ9TMBkkN9LHHUI5c
QWjpVGYDs8CabC7ClM6cHCc3rd7Z9tvi0KAzw6rLCbyX2WpRPatNTExdvtTdTkBT
01mNDKxt99Ju3DKeXReDgfjv31WmnRRkMlce2luCi7zf6rAPln1JbNZmmrX8392m
Uu0QGeb3ixfgkuR2MCAAjcrC9TgkysX/mzQ1GCe3fNCCJ12y28g0NIDvhw3ytRhz
mTevDTPIhRgE3/OrbeIKRDsQCS9vb0a9l/7lQVP2lL3Ep4F5uYMuTGidlMNrWXZC
clhnbRsP6eJux2QAKSziwcYsZOPmfalcAeEXw/r8iC/gwPrU1IIgxNl7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQJTN8vpF+/pl904Hq3/cobBFHYMB8GA1UdIwQY
MBaAFJdXBSB1lh6dkMJ9BxJaS0Rsr9eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEt
YmVhZmUwZWZjMDljLzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEtYmVhZmUwZWZjMDlj
LzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxO9b3yT
CpdSQjWNAsupGfCKy9osiF/VLOWnbGRKGbxuk4B6dj6xLPr9+zIUPzgccSj3ZB/8
aw3CAdGSeNl1OH9SRBwkr3r1k4fgm1uzI6RMu2K+1ti0x65GMnbBAQb8qWesB+Yg
jE6nYl0xGlxDszZgux9R6kfGUh1fGjyD9I97EczThfEYIvGyj90fROpvb3JTGLBL
ZJC33vXP7HHYngE9teu7e68m12XxYOpmA7ZxWTYS2GU6r10fGxwtxvic73LEeHZ+
ETwbJTDgx982ne03F3PHTS1fn+mdRLI+fMFjLGxZAV+xfJgk2NsgBnpysvlYV7Z8
UcN3XIAF6fqXAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:04:19 2025 by rpki-client