Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier: rA6FqyP71r/x9tJYtasAJj4RTxmmGFvEMdndfRdwWpI=
Subject key identifier: 8D:47:5F:95:4C:ED:4B:51:71:48:39:AC:C7:EB:01:BD:B3:0E:2E:D3
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 0196760C89390B12180CCC85DDC043E00D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number: 0568
Signing time: Sun 27 Apr 2025 07:00:55 +0000
Manifest this update: Sun 27 Apr 2025 07:00:55 +0000
Manifest next update: Mon 28 Apr 2025 07:00:55 +0000
Files and hashes: 1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: UNsvmLw7m+7yl7FURe45+UCZej6giUQ4ys+hygVQWFo=)
2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:89:39:0b:12:18:0c:cc:85:dd:c0:43:e0:0d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Apr 27 07:00:55 2025 GMT
Not After : Apr 28 07:00:55 2025 GMT
Subject: CN=8d475f954ced4b51714839acc7eb01bdb30e2ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:bd:76:6b:44:69:b1:84:65:81:fd:40:71:
9e:ce:61:38:06:4f:e1:55:84:33:ea:80:16:3d:99:
73:b0:20:62:ed:6c:16:86:3b:7a:f3:23:18:96:8e:
83:ea:f7:a9:01:34:e6:f7:a7:b8:69:06:7d:f5:09:
f3:3b:6b:d7:4c:ea:36:c1:a2:6d:d9:99:e8:0b:40:
f0:42:f0:61:44:5e:ff:e4:c0:c9:ef:c3:b2:7e:db:
3c:bc:35:67:ce:d2:95:7e:3b:eb:d4:4a:ee:d5:4f:
22:79:b5:86:59:50:5f:05:27:13:36:06:bf:78:18:
fb:f2:ce:c9:75:f9:79:f2:5f:21:5e:54:3c:dc:5e:
97:ac:13:6d:2c:f9:82:84:27:4f:93:be:89:3c:d3:
af:9b:a2:da:be:d7:ed:36:c7:a1:5d:7c:4a:75:52:
41:3b:f1:fe:f3:cf:77:c0:b5:e3:97:0d:d9:a9:c2:
67:8b:4c:3e:4c:8b:34:86:48:26:bd:59:ce:05:84:
a1:fa:3a:81:81:f7:9e:d8:e9:c1:33:7b:a0:cb:5b:
f5:e2:51:e9:19:4a:40:47:1c:64:4c:da:ea:86:32:
8e:7d:ec:78:bf:3b:cc:20:d9:2b:fa:58:5a:5d:f9:
4b:fc:7d:12:2a:a5:d9:2d:dd:66:d9:d4:c2:08:40:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:47:5F:95:4C:ED:4B:51:71:48:39:AC:C7:EB:01:BD:B3:0E:2E:D3
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:36:03:ab:6b:9c:d6:af:2d:f7:2d:7c:a6:72:25:0b:b2:79:
b3:fa:a8:b5:7d:17:1f:02:d7:18:76:d9:36:b4:b2:9f:8d:ab:
c4:4a:be:0a:95:73:e3:58:7f:a7:b7:84:f8:90:de:c7:20:49:
fa:bf:97:44:bb:e4:1a:25:c8:a1:64:72:0f:4a:17:2b:5c:26:
13:90:50:8b:a9:91:b9:29:9c:3d:b2:cf:44:0c:76:9c:e3:d5:
bd:3c:68:1c:d8:bb:10:74:95:f3:fc:a1:3a:13:b4:55:37:6f:
ec:fe:fd:1e:ef:bf:61:6f:97:cd:57:d9:ee:62:ad:7e:76:86:
9b:01:c1:a3:08:02:ab:86:0f:a8:b5:3e:cb:9b:7d:74:53:ac:
ab:82:30:2e:fd:bb:62:e6:7f:41:58:67:f3:61:1b:19:cf:28:
10:43:18:e6:8a:46:63:03:6f:a5:a3:82:c8:d5:20:05:88:c3:
06:18:66:6d:cd:7e:35:85:b4:f1:0c:0f:f0:d0:91:27:d2:5d:
69:b7:a1:dc:b6:7f:25:f7:1d:12:c3:f6:cf:95:d9:e9:32:33:
49:bc:3d:53:b0:8a:42:79:ef:1c:cc:15:ec:6c:f0:ef:c3:c5:
6b:89:1b:69:c0:19:c2:b4:08:55:0f:42:83:da:2b:62:11:27:
d4:36:89:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DIk5CxIYDMyF3cBD4A2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWQ0Y2RlMDk4ZDFjYTg3ZjRlMGE5ZWViODU1OTI4ZTgz
ZDI5M2UwHhcNMjUwNDI3MDcwMDU1WhcNMjUwNDI4MDcwMDU1WjAzMTEwLwYDVQQD
Eyg4ZDQ3NWY5NTRjZWQ0YjUxNzE0ODM5YWNjN2ViMDFiZGIzMGUyZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQG9dmtEabGEZYH9QHGezmE4Bk/h
VYQz6oAWPZlzsCBi7WwWhjt68yMYlo6D6vepATTm96e4aQZ99QnzO2vXTOo2waJt
2ZnoC0DwQvBhRF7/5MDJ78Oyfts8vDVnztKVfjvr1Eru1U8iebWGWVBfBScTNga/
eBj78s7Jdfl58l8hXlQ83F6XrBNtLPmChCdPk76JPNOvm6LavtftNsehXXxKdVJB
O/H+8893wLXjlw3ZqcJni0w+TIs0hkgmvVnOBYSh+jqBgfee2OnBM3ugy1v14lHp
GUpARxxkTNrqhjKOfex4vzvMINkr+lhaXflL/H0SKqXZLd1m2dTCCEBmbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1HX5VM7UtRcUg5rMfrAb2zDi7TMB8GA1UdIwQY
MBaAFP5dTN4JjRyof04KnuuFWSjoPSk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMt
YjAzZWYzZjAzMjI4LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMtYjAzZWYzZjAzMjI4
LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjYDq2uc
1q8t9y18pnIlC7J5s/qotX0XHwLXGHbZNrSyn42rxEq+CpVz41h/p7eE+JDexyBJ
+r+XRLvkGiXIoWRyD0oXK1wmE5BQi6mRuSmcPbLPRAx2nOPVvTxoHNi7EHSV8/yh
OhO0VTdv7P79Hu+/YW+XzVfZ7mKtfnaGmwHBowgCq4YPqLU+y5t9dFOsq4IwLv27
YuZ/QVhn82EbGc8oEEMY5opGYwNvpaOCyNUgBYjDBhhmbc1+NYW08QwP8NCRJ9Jd
abeh3LZ/JfcdEsP2z5XZ6TIzSbw9U7CKQnnvHMwV7Gzw78PFa4kbacAZwrQIVQ9C
g9orYhEn1DaJIg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:13 2025 by rpki-client