Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
File: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft (raw, json)
Hash identifier: x8ULWuS0SKjSNl2rrOrnz6gH9dunu1LYGT+9kzDeHdg=
Subject key identifier: 2D:53:49:D0:18:0A:28:22:D2:ED:60:1A:1E:41:BA:B1:DD:AB:53:1C
Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Certificate issuer: /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Certificate serial: 01967530A535536BA8BB380F92EA51CC32D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
Manifest number: 0F09
Signing time: Sun 27 Apr 2025 03:00:44 +0000
Manifest this update: Sun 27 Apr 2025 03:00:44 +0000
Manifest next update: Mon 28 Apr 2025 03:00:44 +0000
Files and hashes: 1: 8lcVMAvDHKFVWpkIvW003vZxmno.roa (hash: b9AoL9a4Iwp34m1O6gUmOqwjFvFHDHYDPCqNWBeuTCY=)
2: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl (hash: MRyqmOkJTtBaZXwlbnZ5Sp/CAhTLjeFp6JzHdx8OQ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:a5:35:53:6b:a8:bb:38:0f:92:ea:51:cc:32:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Validity
Not Before: Apr 27 03:00:44 2025 GMT
Not After : Apr 28 03:00:44 2025 GMT
Subject: CN=2d5349d0180a2822d2ed601a1e41bab1ddab531c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:0c:34:b6:85:61:cd:48:c1:77:d7:ae:97:
26:4f:c1:17:25:d0:a7:4e:8f:69:71:7e:a2:85:3c:
7c:d2:dd:1f:71:64:2f:51:ea:0b:cf:b8:6e:3b:b4:
bb:dc:43:cf:33:bb:4a:84:7c:6f:b4:7d:7b:e1:e0:
7b:fe:24:f2:66:d2:75:78:99:da:ba:9a:b3:62:9d:
f9:a2:09:6c:0c:3d:73:a5:86:e7:3e:ab:ae:fc:47:
71:33:07:ff:cb:0b:81:b4:73:f9:c9:18:8b:74:56:
95:35:de:73:a4:c8:aa:86:71:64:c4:0c:30:36:ab:
8d:2e:57:93:a3:e9:dd:88:57:2b:b5:4f:2d:c0:15:
7b:17:10:8d:c3:2e:34:21:62:63:fc:e4:b0:01:7d:
e4:da:88:fd:6c:27:23:0b:7c:35:a9:51:72:23:c7:
a0:f3:4d:70:52:f8:e1:7f:ee:79:ad:12:cb:57:9f:
07:73:ef:1f:81:21:b8:3d:79:81:37:39:f0:c0:29:
87:c4:b0:3a:50:4c:a2:0e:96:ce:ef:7a:28:b0:a9:
ec:af:0c:23:50:3a:5d:67:88:e4:5f:41:02:21:9c:
96:79:95:33:82:d2:9a:3e:8a:5d:3b:8a:04:bc:ef:
e2:d2:6f:ea:ff:9f:a1:f9:2c:2e:b9:6b:88:ff:43:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:49:D0:18:0A:28:22:D2:ED:60:1A:1E:41:BA:B1:DD:AB:53:1C
X509v3 Authority Key Identifier:
keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:76:4c:d3:87:c3:c3:f6:df:f1:8c:b7:e9:50:b5:67:85:30:
af:1c:53:2f:7e:67:e8:77:a2:5f:a4:8c:d6:7a:09:29:ff:1c:
f7:57:1b:f8:56:a9:ed:37:6f:03:ea:f8:ff:9b:6a:a6:0b:22:
d7:99:70:86:cb:a2:32:54:ee:0d:3e:cd:08:0b:ac:32:07:42:
9f:82:17:2e:a8:82:b9:c4:b0:47:8a:0d:93:1a:59:97:c5:f0:
c7:cd:90:f9:ed:95:08:07:bb:ff:56:5a:dc:be:e5:ad:6b:24:
1c:ad:e8:bf:2d:74:60:8a:cd:27:33:e4:d5:ed:1f:80:c1:53:
10:89:bc:0d:8d:26:7a:23:f2:1a:a1:09:b5:20:58:1c:b6:a1:
c6:a0:96:25:7b:ff:f5:44:af:f4:53:1c:8e:83:7c:d5:5f:83:
e8:02:22:5c:1b:d4:9a:eb:70:c6:81:e9:19:41:c3:b6:76:ba:
1f:b8:f5:66:e8:06:4b:7a:8e:64:b0:e4:1a:b2:b0:b6:8f:52:
eb:80:41:42:8d:e2:b5:84:30:8e:07:ba:6e:68:15:19:92:ce:
53:1c:61:dc:51:78:32:0d:ac:42:8a:ad:5d:09:ba:8d:58:3e:
c1:02:f4:ab:01:e0:e6:b8:0a:e2:66:b4:b1:7f:2b:c3:f4:e1:
9a:ee:75:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MKU1U2uouzgPkupRzDLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3N2I4YWEwNjNmYzRmMmJiODRhOWY1NmEzYmZhMzhiMmFi
ZWRmOWIwHhcNMjUwNDI3MDMwMDQ0WhcNMjUwNDI4MDMwMDQ0WjAzMTEwLwYDVQQD
EygyZDUzNDlkMDE4MGEyODIyZDJlZDYwMWExZTQxYmFiMWRkYWI1MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl4MNLaFYc1IwXfXrpcmT8EXJdCn
To9pcX6ihTx80t0fcWQvUeoLz7huO7S73EPPM7tKhHxvtH174eB7/iTyZtJ1eJna
upqzYp35oglsDD1zpYbnPquu/EdxMwf/ywuBtHP5yRiLdFaVNd5zpMiqhnFkxAww
NquNLleTo+ndiFcrtU8twBV7FxCNwy40IWJj/OSwAX3k2oj9bCcjC3w1qVFyI8eg
801wUvjhf+55rRLLV58Hc+8fgSG4PXmBNznwwCmHxLA6UEyiDpbO73oosKnsrwwj
UDpdZ4jkX0ECIZyWeZUzgtKaPopdO4oEvO/i0m/q/5+h+SwuuWuI/0NjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1TSdAYCigi0u1gGh5BurHdq1McMB8GA1UdIwQY
MBaAFJd7iqBj/E8ruEqfVqO/o4sqvt+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZDU5ZDktNjkwYS00ZmUyLWIyOTUt
N2VjNTEyM2JlMTYyLzEvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iZDU5ZDktNjkwYS00ZmUyLWIyOTUtN2VjNTEyM2JlMTYy
LzEvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnZM04fD
w/bf8Yy36VC1Z4UwrxxTL35n6HeiX6SM1noJKf8c91cb+Fap7TdvA+r4/5tqpgsi
15lwhsuiMlTuDT7NCAusMgdCn4IXLqiCucSwR4oNkxpZl8Xwx82Q+e2VCAe7/1Za
3L7lrWskHK3ovy10YIrNJzPk1e0fgMFTEIm8DY0meiPyGqEJtSBYHLahxqCWJXv/
9USv9FMcjoN81V+D6AIiXBvUmutwxoHpGUHDtna6H7j1ZugGS3qOZLDkGrKwto9S
64BBQo3itYQwjge6bmgVGZLOUxxh3FF4Mg2sQoqtXQm6jVg+wQL0qwHg5rgK4ma0
sX8rw/Thmu51Mw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:45:59 2025 by rpki-client