Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: Eij4HdWncWb6gyjAdGekku6NWNcsPAgQup8e6VyowYg=
Subject key identifier: 16:E3:74:EF:D0:03:B7:B9:EF:90:13:F3:76:9A:7D:09:F7:F5:3C:99
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 01969528FD59B8131803D02A69C7FE006944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0C72
Signing time: Sat 03 May 2025 08:00:13 +0000
Manifest this update: Sat 03 May 2025 08:00:13 +0000
Manifest next update: Sun 04 May 2025 08:00:13 +0000
Files and hashes: 1: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=)
2: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: +lDr9ThbEiCkjhNEaXMBCbEtL7OdTJB4GksIEwE0I6k=)
3: 8P6Z9Cx8SWSZTkyVumdiUHtewDA.roa (hash: TjOKj4a+PWeCDJb76vAZsC0563BFTc5omsFst4XIgOg=)
4: E0pkIzW9n-bHG2zbp1MoMQVm048.roa (hash: B3BqiJI6fxLnY50JHLDClRKLpgrtgt/Wjoy5/3OG5qU=)
5: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=)
6: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=)
7: TAvnbGlGOHQkn1H4mmfTjMAonig.roa (hash: 5j2f3QIcoZ3w0v7OOhYxuDlG33ihkkRcN0bfLfGC5dU=)
8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:28:fd:59:b8:13:18:03:d0:2a:69:c7:fe:00:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: May 3 08:00:13 2025 GMT
Not After : May 4 08:00:13 2025 GMT
Subject: CN=16e374efd003b7b9ef9013f3769a7d09f7f53c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:85:bd:06:5c:d3:07:3b:fb:69:ac:bd:fd:
b9:e2:c5:57:37:49:f8:3d:18:2d:bc:14:5a:cb:30:
d5:58:9d:3a:4e:33:32:f8:a2:b0:46:0b:ca:fd:27:
f7:30:58:39:51:65:61:7e:3e:41:fa:d6:4e:69:76:
04:9b:1c:a9:8e:d2:ca:18:2b:ba:fd:f4:50:61:ef:
1c:6e:66:6c:ce:43:6c:23:a3:8e:7e:de:ab:bc:82:
d4:de:03:79:b8:ac:04:5b:23:4b:39:12:1c:13:69:
46:6a:5c:3e:c4:16:c3:70:af:8e:dc:a7:1d:e2:c7:
11:69:c2:69:4e:99:23:e0:07:56:00:39:25:f4:18:
91:d0:d9:9c:d2:28:49:04:17:5e:a1:06:96:91:65:
a8:9f:05:11:2f:83:98:a1:b2:41:e6:3b:de:32:56:
82:5b:84:47:e1:85:0e:70:30:41:8d:49:88:ac:d8:
a9:e5:1d:45:54:ac:b8:12:34:d4:5c:64:e5:3f:9d:
7e:88:c9:f8:92:77:1a:9f:c8:82:c8:5a:02:84:e7:
27:49:f0:58:ce:35:5b:9e:01:35:00:43:4e:6b:5e:
79:33:96:75:1d:f1:99:18:3d:6e:81:7b:6c:ff:85:
03:af:29:6b:02:95:ee:fa:65:29:d9:e1:76:92:86:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:74:EF:D0:03:B7:B9:EF:90:13:F3:76:9A:7D:09:F7:F5:3C:99
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:da:97:ef:d1:94:58:48:09:98:8d:fd:ea:99:4d:6d:97:45:
8a:7c:20:7c:b5:c6:c7:a2:c2:72:2f:7d:d0:22:c4:18:9f:ce:
c4:6e:86:2e:8d:cb:f3:24:a2:54:45:76:cc:38:1c:85:68:d5:
50:f5:4e:a9:2f:0d:c8:cc:2f:20:40:b4:5f:bf:44:90:3d:33:
21:b8:4e:54:7c:d5:54:c2:0d:2b:20:96:62:1b:13:65:bc:d9:
87:99:72:5e:ec:ff:2f:b6:f0:bb:28:8a:54:5a:2d:f5:bb:35:
f7:77:a6:df:07:61:99:0d:66:f8:b8:8a:39:13:d7:50:a8:9e:
49:a4:e9:63:0d:5c:b5:1d:19:ad:d1:52:f2:2c:e1:44:7a:7e:
02:e1:d3:a7:b9:c3:94:16:d7:42:dc:0a:13:cd:86:4b:35:75:
8e:51:ad:d0:28:95:af:48:e6:2d:ed:e1:7f:25:60:7d:3a:13:
42:27:63:a2:d5:88:e7:47:87:4d:d8:48:b2:34:2a:12:40:91:
3d:58:dd:5b:2f:59:34:6a:c8:6f:7d:b7:a8:ed:e8:9e:08:53:
e3:49:aa:ad:97:a2:49:08:cf:c2:04:f4:0c:45:6b:73:0b:dc:
e7:25:32:af:1b:6d:7e:1f:0a:29:93:bd:4b:e1:e0:0f:83:06:
55:c1:0d:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaVKP1ZuBMYA9Aqacf+AGlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw
YWI3NzAwHhcNMjUwNTAzMDgwMDEzWhcNMjUwNTA0MDgwMDEzWjAzMTEwLwYDVQQD
EygxNmUzNzRlZmQwMDNiN2I5ZWY5MDEzZjM3NjlhN2QwOWY3ZjUzYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsmFvQZc0wc7+2msvf254sVXN0n4
PRgtvBRayzDVWJ06TjMy+KKwRgvK/Sf3MFg5UWVhfj5B+tZOaXYEmxypjtLKGCu6
/fRQYe8cbmZszkNsI6OOft6rvILU3gN5uKwEWyNLORIcE2lGalw+xBbDcK+O3Kcd
4scRacJpTpkj4AdWADkl9BiR0Nmc0ihJBBdeoQaWkWWonwURL4OYobJB5jveMlaC
W4RH4YUOcDBBjUmIrNip5R1FVKy4EjTUXGTlP51+iMn4kncan8iCyFoChOcnSfBY
zjVbngE1AENOa155M5Z1HfGZGD1ugXts/4UDrylrApXu+mUp2eF2koYydwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbjdO/QA7e575AT83aafQn39TyZMB8GA1UdIwQY
MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt
MzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4
LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNqX79GU
WEgJmI396plNbZdFinwgfLXGx6LCci990CLEGJ/OxG6GLo3L8ySiVEV2zDgchWjV
UPVOqS8NyMwvIEC0X79EkD0zIbhOVHzVVMINKyCWYhsTZbzZh5lyXuz/L7bwuyiK
VFot9bs193em3wdhmQ1m+LiKORPXUKieSaTpYw1ctR0ZrdFS8izhRHp+AuHTp7nD
lBbXQtwKE82GSzV1jlGt0CiVr0jmLe3hfyVgfToTQidjotWI50eHTdhIsjQqEkCR
PVjdWy9ZNGrIb323qO3onghT40mqrZeiSQjPwgT0DEVrcwvc5yUyrxttfh8KKZO9
S+HgD4MGVcEN/w==
-----END CERTIFICATE-----
Generated at Sat May 3 14:46:25 2025 by rpki-client