Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: ICt+FSXhbti6HbCaOnPi+Cz1eF8Ddz+Sdot0DOTlNPU=
Subject key identifier: 22:5D:80:8A:E0:05:03:65:1B:8A:11:46:F0:A5:F8:E6:44:98:81:B2
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 01967AC4C07D7FD09ADCAF1F83B13BC47BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 08FA
Signing time: Mon 28 Apr 2025 05:00:36 +0000
Manifest this update: Mon 28 Apr 2025 05:00:36 +0000
Manifest next update: Tue 29 Apr 2025 05:00:36 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: ok+sra5APgpC600NNe79hsMg9q5PSZi84Bj8PDyUM58=)
2: nxhi5-9uC3Z2GcyVtgN0XH2e-AY.roa (hash: TCpb7ZM9/5X8OkM3MtmPCms5hmL6B1GslczU1sVSQk4=)
3: tTnc9Ad6JQOwjtbe1qMkIXZeOKs.roa (hash: kZVYztMlLb2WdXu0JA5CW12HKzbSxV0vVIBzzUUHcG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:c0:7d:7f:d0:9a:dc:af:1f:83:b1:3b:c4:7b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Apr 28 05:00:36 2025 GMT
Not After : Apr 29 05:00:36 2025 GMT
Subject: CN=225d808ae00503651b8a1146f0a5f8e6449881b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:0d:5d:5c:04:64:c8:db:ba:09:8e:21:3f:
86:63:76:6e:49:ad:c5:20:c0:e8:09:89:18:56:6d:
bb:9f:3a:a9:bf:17:51:b8:c7:89:24:6c:1b:82:bf:
7d:04:9b:ab:14:db:83:6f:97:a8:50:98:ed:75:84:
9e:c4:f1:64:f2:e6:ea:eb:19:50:80:40:c0:0f:49:
e6:fa:66:61:1a:21:8b:fa:d4:c2:96:1b:87:da:65:
e3:06:db:d8:74:95:98:a7:ce:e0:6c:19:13:08:13:
bd:3f:17:e5:b2:94:09:98:2c:fb:24:b3:16:1f:fb:
ed:41:6e:d5:44:a6:21:fb:63:13:b2:6a:f5:38:40:
11:fa:f9:32:b2:fd:50:c3:6d:2d:4e:1d:f8:51:4a:
86:fc:bf:87:85:4e:5c:f6:54:4d:33:f9:df:85:ea:
c8:17:3d:d9:40:b2:55:fe:23:6b:d8:ec:b0:0f:e6:
95:bd:c3:87:a4:c5:3b:e6:7a:c7:14:44:ae:da:54:
59:51:ef:ec:d6:fb:40:ef:10:af:13:1d:fc:06:b8:
24:f9:7d:90:e8:2b:cb:c5:ef:e8:8a:4d:7c:9f:a5:
43:d4:51:47:32:81:d2:2b:be:3f:82:b8:85:5a:59:
02:c9:28:97:78:03:b0:20:7e:fa:94:aa:bd:07:02:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:80:8A:E0:05:03:65:1B:8A:11:46:F0:A5:F8:E6:44:98:81:B2
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:0a:88:16:d2:99:b7:60:0a:e0:f7:62:9c:48:33:5c:6d:
36:cd:aa:30:75:de:d3:05:f1:c3:09:e9:d2:46:1a:83:b3:7f:
09:8d:9c:3c:15:5d:35:46:09:67:5f:9b:7e:1c:04:96:41:fb:
a0:e6:28:4c:b5:a8:0b:22:31:8c:4b:7d:ed:44:fc:4e:48:76:
94:d0:3e:95:9a:ee:56:87:7d:a2:cd:fc:2b:5b:a7:bd:91:ef:
b3:9b:d0:f4:78:5f:6c:ab:8a:a1:fa:8e:0f:a6:49:ea:15:e2:
ff:d9:d3:51:e6:03:cf:0a:62:ce:31:00:57:3a:87:21:e9:30:
f2:2b:ff:af:51:bc:27:68:1f:47:f1:7c:49:ef:b2:7e:6f:50:
08:b2:23:4e:00:f4:4c:09:55:97:ee:82:d9:48:c0:1e:4c:49:
23:b0:19:b3:60:46:76:a2:e0:ab:80:44:93:0a:e1:c0:de:2d:
88:75:63:5a:47:19:2e:d2:1a:64:ae:5a:37:40:c5:23:10:24:
f4:68:6b:69:da:ee:aa:e9:00:7b:2b:35:e0:0d:b1:ac:e9:21:
8a:a9:ae:83:99:4c:37:1f:74:b7:27:97:2c:22:ce:b2:db:25:
13:cb:3d:8f:2e:32:4d:6e:48:8d:8a:2b:a0:36:85:23:67:dd:
21:1f:e3:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xMB9f9Ca3K8fg7E7xHujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjJjZjhjZDkwYjY5ZjkzNmU4MmI1NzgwMWNkNzc5ZDcy
ZTNmM2UwHhcNMjUwNDI4MDUwMDM2WhcNMjUwNDI5MDUwMDM2WjAzMTEwLwYDVQQD
EygyMjVkODA4YWUwMDUwMzY1MWI4YTExNDZmMGE1ZjhlNjQ0OTg4MWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbQNXVwEZMjbugmOIT+GY3ZuSa3F
IMDoCYkYVm27nzqpvxdRuMeJJGwbgr99BJurFNuDb5eoUJjtdYSexPFk8ubq6xlQ
gEDAD0nm+mZhGiGL+tTClhuH2mXjBtvYdJWYp87gbBkTCBO9PxflspQJmCz7JLMW
H/vtQW7VRKYh+2MTsmr1OEAR+vkysv1Qw20tTh34UUqG/L+HhU5c9lRNM/nfherI
Fz3ZQLJV/iNr2OywD+aVvcOHpMU75nrHFESu2lRZUe/s1vtA7xCvEx38Brgk+X2Q
6CvLxe/oik18n6VD1FFHMoHSK74/griFWlkCySiXeAOwIH76lKq9BwIVdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJdgIrgBQNlG4oRRvCl+OZEmIGyMB8GA1UdIwQY
MBaAFAtiz4zZC2n5NugrV4Ac13nXLj8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJMUGpOa0xhZmsyNkN0WGdCelhlZGN1UHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84MmNjNWQtZDZhOC00NjY3LWIwNDkt
OTY3YzU3ZDVhMzYxLzEvQzJMUGpOa0xhZmsyNkN0WGdCelhlZGN1UHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84MmNjNWQtZDZhOC00NjY3LWIwNDktOTY3YzU3ZDVhMzYx
LzEvQzJMUGpOa0xhZmsyNkN0WGdCelhlZGN1UHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVIKiBbS
mbdgCuD3YpxIM1xtNs2qMHXe0wXxwwnp0kYag7N/CY2cPBVdNUYJZ1+bfhwElkH7
oOYoTLWoCyIxjEt97UT8Tkh2lNA+lZruVod9os38K1unvZHvs5vQ9HhfbKuKofqO
D6ZJ6hXi/9nTUeYDzwpizjEAVzqHIekw8iv/r1G8J2gfR/F8Se+yfm9QCLIjTgD0
TAlVl+6C2UjAHkxJI7AZs2BGdqLgq4BEkwrhwN4tiHVjWkcZLtIaZK5aN0DFIxAk
9GhradruqukAeys14A2xrOkhiqmug5lMNx90tyeXLCLOstslE8s9jy4yTW5IjYor
oDaFI2fdIR/j8w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:13:33 2025 by rpki-client