Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
File: 2xjQrivPZ9QUonXLOE8tOWCoN70.mft (raw, json)
Hash identifier: 4PElwU8V7LAGJU2l7LQjRWu0Y3STM4Dz2IzSalxmtpo=
Subject key identifier: 3A:FC:C7:DA:ED:41:44:A8:62:EA:6E:68:D7:3C:F3:1D:67:03:D8:FF
Authority key identifier: DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
Certificate issuer: /CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Certificate serial: 019685ED5A9F82DB6ABE0C452A055389366A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
Manifest number: 0C8F
Signing time: Wed 30 Apr 2025 09:00:47 +0000
Manifest this update: Wed 30 Apr 2025 09:00:47 +0000
Manifest next update: Thu 01 May 2025 09:00:47 +0000
Files and hashes: 1: 2xjQrivPZ9QUonXLOE8tOWCoN70.crl (hash: xTnXYs7ulnm+vFXRJjiodIWhVYql8uzexcR9cwROiiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:5a:9f:82:db:6a:be:0c:45:2a:05:53:89:36:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Validity
Not Before: Apr 30 09:00:47 2025 GMT
Not After : May 1 09:00:47 2025 GMT
Subject: CN=3afcc7daed4144a862ea6e68d73cf31d6703d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:a6:37:8d:10:a2:f9:e3:50:1f:ad:61:51:
63:ca:46:d9:b0:d3:1c:3a:9d:58:32:eb:86:43:4c:
bd:e4:7b:c5:a5:2e:cc:66:8c:da:12:fa:e2:6d:90:
02:c2:b9:1f:d6:bc:84:ed:0a:e8:e0:54:58:10:f3:
92:ff:5c:31:38:7e:e2:5d:4e:8f:31:3c:a9:f0:bf:
94:6c:3b:56:26:69:c1:72:71:b8:4d:54:e3:41:95:
14:58:47:3e:59:7f:56:be:5f:4d:b0:1d:59:16:14:
7c:19:eb:3e:f9:7f:a2:f8:d2:ab:6f:63:33:b6:96:
2e:f6:ee:e9:c8:1a:81:ff:be:72:1c:ab:ff:08:a2:
e0:90:e3:a7:a8:f0:25:8e:a8:af:21:5b:d2:4e:aa:
18:11:85:71:26:c5:aa:80:b3:78:1c:25:04:bc:28:
6a:78:08:37:6c:30:29:66:3d:42:96:4b:58:87:c3:
25:fa:86:ba:64:af:53:36:38:39:d9:47:91:ae:21:
28:55:38:fc:ee:1b:a9:c7:a1:ee:cd:b4:ea:83:77:
64:1f:dc:6d:e1:cf:09:c5:b8:47:fe:bd:0b:bc:f7:
07:41:44:c2:61:1e:a3:43:74:3a:f4:3b:1c:79:65:
05:53:13:ca:c8:ed:01:97:05:17:95:ea:48:df:13:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:C7:DA:ED:41:44:A8:62:EA:6E:68:D7:3C:F3:1D:67:03:D8:FF
X509v3 Authority Key Identifier:
keyid:DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ca:ac:eb:f5:18:7d:ed:92:2a:cb:c5:bf:fe:d5:e8:f2:30:
37:58:92:21:02:4d:a7:8c:94:43:46:ed:69:d0:37:29:a3:d1:
aa:65:2c:38:4f:a0:8e:ae:2d:0f:a2:69:e2:a2:22:4b:71:c0:
e3:e9:0b:e7:45:73:3e:fe:6e:90:99:34:fb:29:12:6d:d4:09:
f4:cb:57:24:75:62:52:68:e8:f0:df:07:b6:54:99:ec:7d:5c:
f5:ae:4a:ed:f0:ae:52:89:1c:32:f0:d7:c8:56:60:b9:95:6c:
31:7f:94:96:00:46:a0:60:6b:5e:eb:58:e2:11:14:82:1c:d8:
8b:40:5b:c0:e9:2b:42:da:46:5a:ea:01:8e:84:1b:64:ef:91:
18:b4:c7:a0:a8:8a:3c:4f:45:b3:c1:e2:c0:6d:32:ae:19:30:
17:1e:5d:96:f2:fd:8f:87:35:29:89:af:d8:7b:2d:4b:63:1a:
10:d0:04:d4:4e:33:3d:59:3e:f5:de:a4:ea:b9:ce:40:f3:04:
c7:3b:db:71:d2:65:fa:6c:fa:4c:fc:2f:93:10:60:ba:3f:cf:
21:ec:c5:1a:a0:c5:f8:ac:f2:41:f9:f4:1f:d4:39:54:9a:ec:
75:87:f3:99:46:ad:81:43:c4:d1:d2:8c:e9:df:4e:2e:f7:3f:
2d:af:3f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaF7VqfgttqvgxFKgVTiTZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMThkMGFlMmJjZjY3ZDQxNGEyNzVjYjM4NGYyZDM5NjBh
ODM3YmQwHhcNMjUwNDMwMDkwMDQ3WhcNMjUwNTAxMDkwMDQ3WjAzMTEwLwYDVQQD
EygzYWZjYzdkYWVkNDE0NGE4NjJlYTZlNjhkNzNjZjMxZDY3MDNkOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K2mN40QovnjUB+tYVFjykbZsNMc
Op1YMuuGQ0y95HvFpS7MZozaEvribZACwrkf1ryE7Qro4FRYEPOS/1wxOH7iXU6P
MTyp8L+UbDtWJmnBcnG4TVTjQZUUWEc+WX9Wvl9NsB1ZFhR8Ges++X+i+NKrb2Mz
tpYu9u7pyBqB/75yHKv/CKLgkOOnqPAljqivIVvSTqoYEYVxJsWqgLN4HCUEvChq
eAg3bDApZj1ClktYh8Ml+oa6ZK9TNjg52UeRriEoVTj87hupx6HuzbTqg3dkH9xt
4c8JxbhH/r0LvPcHQUTCYR6jQ3Q69DsceWUFUxPKyO0BlwUXlepI3xPmXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr8x9rtQUSoYupuaNc88x1nA9j/MB8GA1UdIwQY
MBaAFNsY0K4rz2fUFKJ1yzhPLTlgqDe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhqUXJpdlBaOVFVb25YTE9FOHRPV0NvTjcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jZWY4OTYtZjk2OC00YzJmLTgwYzQt
MGFjZWJhYTY3Yjc5LzEvMnhqUXJpdlBaOVFVb25YTE9FOHRPV0NvTjcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jZWY4OTYtZjk2OC00YzJmLTgwYzQtMGFjZWJhYTY3Yjc5
LzEvMnhqUXJpdlBaOVFVb25YTE9FOHRPV0NvTjcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsqs6/UY
fe2SKsvFv/7V6PIwN1iSIQJNp4yUQ0btadA3KaPRqmUsOE+gjq4tD6Jp4qIiS3HA
4+kL50VzPv5ukJk0+ykSbdQJ9MtXJHViUmjo8N8HtlSZ7H1c9a5K7fCuUokcMvDX
yFZguZVsMX+UlgBGoGBrXutY4hEUghzYi0BbwOkrQtpGWuoBjoQbZO+RGLTHoKiK
PE9Fs8HiwG0yrhkwFx5dlvL9j4c1KYmv2HstS2MaENAE1E4zPVk+9d6k6rnOQPME
xzvbcdJl+mz6TPwvkxBguj/PIezFGqDF+KzyQfn0H9Q5VJrsdYfzmUatgUPE0dKM
6d9OLvc/La8/SQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:56:16 2025 by rpki-client