Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier: pQqLmceJImxNaJFccBkXXVe5FFYoG0Fl5ecuI8Ns8/U=
Subject key identifier: CE:29:1A:C3:84:2C:AF:CD:8F:80:7F:AC:A2:65:08:19:75:29:DB:D0
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial: 019680C728C4DA0163531B413FFCE56150E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number: 062C
Signing time: Tue 29 Apr 2025 09:00:57 +0000
Manifest this update: Tue 29 Apr 2025 09:00:57 +0000
Manifest next update: Wed 30 Apr 2025 09:00:57 +0000
Files and hashes: 1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: yy5hDW0ho/zMqvADC6E3fKExqXRtfjHnPXusZ1mL/rA=)
2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:28:c4:da:01:63:53:1b:41:3f:fc:e5:61:50:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Validity
Not Before: Apr 29 09:00:57 2025 GMT
Not After : Apr 30 09:00:57 2025 GMT
Subject: CN=ce291ac3842cafcd8f807faca26508197529dbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:61:93:80:80:dc:71:df:a4:15:3c:53:b6:
a5:2e:67:f2:25:6a:b7:50:06:93:c9:0f:68:97:f6:
10:55:ce:c7:a1:d2:7a:de:eb:8c:74:40:ac:3e:e9:
fb:e6:f2:27:73:86:f1:dc:c7:b6:50:c8:79:e3:d3:
09:e8:24:72:f7:66:35:e7:46:28:da:ea:a9:04:0e:
a9:eb:3b:05:79:98:4a:95:65:b2:d1:2d:74:82:94:
f8:72:3b:37:b9:45:e6:4e:24:ac:5e:c4:69:86:73:
29:5d:88:b7:04:f0:9b:4c:46:06:20:fc:45:f6:b4:
38:89:55:a4:1c:2e:30:ba:e9:49:b2:3b:3c:47:8c:
4d:49:b2:6d:3d:e6:2c:97:a4:5b:77:b8:06:58:97:
35:ed:f3:bb:b0:b5:a7:a9:ee:4a:1f:93:20:c8:34:
e3:40:0c:5c:08:12:4a:20:aa:70:30:6f:eb:59:84:
e7:d5:b5:af:24:cb:23:70:a9:89:e4:55:63:23:97:
91:c0:5d:aa:4a:ed:a2:c2:9a:21:df:c2:ac:1d:af:
57:f7:1e:41:7e:1c:7b:47:2e:c7:98:77:51:30:df:
81:82:4c:46:07:bd:e7:88:9a:a3:e3:e6:8d:51:1d:
c4:4b:47:05:93:f1:61:cb:28:9f:9b:9d:bd:a5:9f:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:1A:C3:84:2C:AF:CD:8F:80:7F:AC:A2:65:08:19:75:29:DB:D0
X509v3 Authority Key Identifier:
keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:a0:01:b3:61:5d:4d:48:7a:25:0d:13:be:47:6a:57:b3:
29:56:3c:cf:24:e0:3b:d4:79:a2:e6:c0:94:da:6e:db:83:05:
2e:3a:3c:f8:3c:1e:40:af:1b:24:46:ae:3e:f5:7c:11:6e:eb:
36:15:db:98:eb:37:53:2d:1b:80:70:81:52:38:72:3c:41:51:
c8:bd:02:30:66:cf:c3:48:4c:b1:a6:10:f2:ed:b0:96:6f:29:
26:20:a0:3c:98:d0:65:f2:cb:60:05:16:3d:5a:37:28:e9:ca:
63:33:4f:48:37:dd:b1:3d:3e:f9:31:0a:84:20:24:0b:52:f3:
ee:4d:22:83:8b:a6:bb:f5:54:13:b0:79:0a:e5:80:97:4a:1a:
44:71:27:89:d6:89:55:8f:e7:30:f5:fe:04:80:59:d3:0a:dd:
22:7e:5e:2c:a8:5d:13:c0:46:b2:80:a7:2f:f7:fa:21:96:7a:
03:70:3b:0b:7c:a9:ae:d9:dc:4b:21:ac:04:d2:9b:b5:2f:1e:
7a:07:b8:ab:0a:b8:80:78:6d:07:2a:3b:5d:83:c5:35:ab:e0:
8a:b9:66:ad:ce:08:bc:a5:2e:0b:c9:8b:4d:93:db:be:38:69:
18:5d:a5:4a:24:46:65:27:b6:e8:31:3e:5d:22:aa:43:cb:e0:
2b:45:33:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAxyjE2gFjUxtBP/zlYVDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZGZkY2E3M2NkNjRkNzVlNjU2ZGQwYTNhNDQyN2VkNjE5
ODJhM2QwHhcNMjUwNDI5MDkwMDU3WhcNMjUwNDMwMDkwMDU3WjAzMTEwLwYDVQQD
EyhjZTI5MWFjMzg0MmNhZmNkOGY4MDdmYWNhMjY1MDgxOTc1MjlkYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojJhk4CA3HHfpBU8U7alLmfyJWq3
UAaTyQ9ol/YQVc7HodJ63uuMdECsPun75vInc4bx3Me2UMh549MJ6CRy92Y150Yo
2uqpBA6p6zsFeZhKlWWy0S10gpT4cjs3uUXmTiSsXsRphnMpXYi3BPCbTEYGIPxF
9rQ4iVWkHC4wuulJsjs8R4xNSbJtPeYsl6Rbd7gGWJc17fO7sLWnqe5KH5MgyDTj
QAxcCBJKIKpwMG/rWYTn1bWvJMsjcKmJ5FVjI5eRwF2qSu2iwpoh38KsHa9X9x5B
fhx7Ry7HmHdRMN+BgkxGB73niJqj4+aNUR3ES0cFk/Fhyyifm529pZ+NAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4pGsOELK/Nj4B/rKJlCBl1KdvQMB8GA1UdIwQY
MBaAFC3f3Kc81k115lbdCjpEJ+1hmCo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEt
MDhmMTdjNDEwNzY1LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEtMDhmMTdjNDEwNzY1
LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp+gAbNh
XU1IeiUNE75HalezKVY8zyTgO9R5oubAlNpu24MFLjo8+DweQK8bJEauPvV8EW7r
NhXbmOs3Uy0bgHCBUjhyPEFRyL0CMGbPw0hMsaYQ8u2wlm8pJiCgPJjQZfLLYAUW
PVo3KOnKYzNPSDfdsT0++TEKhCAkC1Lz7k0ig4umu/VUE7B5CuWAl0oaRHEnidaJ
VY/nMPX+BIBZ0wrdIn5eLKhdE8BGsoCnL/f6IZZ6A3A7C3yprtncSyGsBNKbtS8e
ege4qwq4gHhtByo7XYPFNavgirlmrc4IvKUuC8mLTZPbvjhpGF2lSiRGZSe26DE+
XSKqQ8vgK0UzeA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:37:12 2025 by rpki-client