Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File: L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier: ZqvabSnAxdnC7q6k4ace+H6adzm5RaoVpTDYfJoCckY=
Subject key identifier: 34:87:1A:DF:54:D9:03:41:2C:2D:60:8C:A8:6D:AC:7F:0B:03:1C:49
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer: /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial: 01968210B783477D0DF0DB8F86092743B80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number: 0BF5
Signing time: Tue 29 Apr 2025 15:00:55 +0000
Manifest this update: Tue 29 Apr 2025 15:00:55 +0000
Manifest next update: Wed 30 Apr 2025 15:00:55 +0000
Files and hashes: 1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: 8YndriijlQDptpInyuMTcQR8IqPveexx0/pmmFtcRP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:b7:83:47:7d:0d:f0:db:8f:86:09:27:43:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Validity
Not Before: Apr 29 15:00:55 2025 GMT
Not After : Apr 30 15:00:55 2025 GMT
Subject: CN=34871adf54d903412c2d608ca86dac7f0b031c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:25:68:0f:d1:9f:72:83:a0:e5:50:db:21:93:
3a:86:37:6b:b2:41:30:22:6f:35:8e:3a:e3:1e:dc:
fa:5e:21:95:1a:f3:ed:75:4c:f8:25:88:71:3f:8d:
22:82:ea:11:d5:c3:aa:41:08:cf:5e:23:0d:57:aa:
06:d0:eb:12:88:00:d8:df:c5:f1:e0:4b:20:18:f6:
0d:b4:ee:4d:a8:41:4c:19:07:b2:9b:74:31:3e:48:
b0:ba:be:96:dc:9b:21:be:cd:73:b9:7d:ab:61:88:
ae:a1:a4:41:f0:c8:3e:23:d1:80:d4:8b:d5:8e:9f:
1e:14:3f:89:43:7a:a2:ba:39:b2:b4:e0:08:73:4b:
83:43:46:ab:34:ef:8e:e6:43:1b:9b:fc:60:4b:05:
c8:fc:7d:3f:ec:1a:80:ed:3a:a5:c4:99:91:69:3e:
73:3b:f1:0a:4e:75:3d:e1:be:fa:48:5f:26:db:64:
08:9e:97:4a:4e:ed:62:08:76:42:ec:05:76:79:37:
84:71:f7:c3:a6:98:db:b9:2a:0b:38:e2:6b:8b:59:
96:a9:ea:8b:ff:df:90:7e:75:09:0d:8f:9c:72:d9:
ef:bc:1b:3b:0c:e8:9f:e7:05:8b:2a:7d:92:e7:22:
19:11:99:47:c1:9c:16:29:8d:a2:fe:c7:1d:b4:46:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:1A:DF:54:D9:03:41:2C:2D:60:8C:A8:6D:AC:7F:0B:03:1C:49
X509v3 Authority Key Identifier:
keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f9:2b:f9:ec:57:05:1f:20:06:74:27:53:f1:61:c4:ae:63:
bd:77:f2:30:23:1e:7a:fb:77:19:11:ae:e7:a6:3b:e3:f7:27:
e2:a3:5c:56:e5:1b:b2:5a:c3:e7:bf:30:07:ff:4b:e5:c7:9b:
71:1d:47:0e:97:88:bc:06:9d:05:d4:9a:9e:94:f0:9f:da:da:
b7:3c:76:fc:17:e0:ac:be:ae:ee:54:0c:f4:31:09:8d:1a:c4:
50:93:f7:2c:09:69:cd:7f:f3:b2:ea:34:4d:76:48:9d:93:d3:
61:2e:57:d7:16:dc:f4:90:a2:6b:72:b3:28:a7:6b:bf:49:7c:
59:6e:07:07:ae:47:dc:d1:55:0f:49:81:44:90:f2:a9:96:a3:
aa:7e:24:f0:9b:17:24:71:bd:a7:b0:a7:c5:ae:9e:37:40:e4:
61:71:65:28:90:84:48:55:53:ac:7f:2a:aa:92:ac:d4:c4:3d:
6e:a3:2a:63:4f:68:22:50:2f:4e:d4:05:59:fe:8f:9f:31:0c:
32:db:af:e3:ff:85:b2:f7:53:b4:bf:a7:9e:f9:fd:2f:c0:2f:
cc:7f:45:76:ea:9d:64:64:35:41:3f:06:82:b6:27:68:a5:10:
e2:52:9c:db:cd:ee:b9:68:0c:6e:9e:4e:d2:88:22:17:d0:64:
20:47:a5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCELeDR30N8NuPhgknQ7gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZGVjNjcwYjc4MGMzYmY5NDAxZWYxYzExNWExZDg3ZmU4
ZjdjN2EwHhcNMjUwNDI5MTUwMDU1WhcNMjUwNDMwMTUwMDU1WjAzMTEwLwYDVQQD
EygzNDg3MWFkZjU0ZDkwMzQxMmMyZDYwOGNhODZkYWM3ZjBiMDMxYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SVoD9GfcoOg5VDbIZM6hjdrskEw
Im81jjrjHtz6XiGVGvPtdUz4JYhxP40iguoR1cOqQQjPXiMNV6oG0OsSiADY38Xx
4EsgGPYNtO5NqEFMGQeym3QxPkiwur6W3Jshvs1zuX2rYYiuoaRB8Mg+I9GA1IvV
jp8eFD+JQ3qiujmytOAIc0uDQ0arNO+O5kMbm/xgSwXI/H0/7BqA7TqlxJmRaT5z
O/EKTnU94b76SF8m22QInpdKTu1iCHZC7AV2eTeEcffDppjbuSoLOOJri1mWqeqL
/9+QfnUJDY+cctnvvBs7DOif5wWLKn2S5yIZEZlHwZwWKY2i/scdtEbJBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSHGt9U2QNBLC1gjKhtrH8LAxxJMB8GA1UdIwQY
MBaAFC/exnC3gMO/lAHvHBFaHYf+j3x6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQt
YWIxZDhlOTg0NGFmLzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQtYWIxZDhlOTg0NGFm
LzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/kr+exX
BR8gBnQnU/FhxK5jvXfyMCMeevt3GRGu56Y74/cn4qNcVuUbslrD578wB/9L5ceb
cR1HDpeIvAadBdSanpTwn9ratzx2/BfgrL6u7lQM9DEJjRrEUJP3LAlpzX/zsuo0
TXZInZPTYS5X1xbc9JCia3KzKKdrv0l8WW4HB65H3NFVD0mBRJDyqZajqn4k8JsX
JHG9p7Cnxa6eN0DkYXFlKJCESFVTrH8qqpKs1MQ9bqMqY09oIlAvTtQFWf6PnzEM
Mtuv4/+FsvdTtL+nnvn9L8AvzH9FduqdZGQ1QT8GgrYnaKUQ4lKc283uuWgMbp5O
0ogiF9BkIEelpA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:31 2025 by rpki-client