Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File: L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier: rPDR6o24yS2qxhsGCVDO2sFUHjWzhSqpIH1QPKN6mfE=
Subject key identifier: 9C:28:D9:33:1A:87:96:2C:ED:4F:26:C8:E9:1A:ED:E6:44:AA:26:06
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial: 0196771EE209AA017162064CC4304AC110A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number: 0333
Signing time: Sun 27 Apr 2025 12:00:34 +0000
Manifest this update: Sun 27 Apr 2025 12:00:34 +0000
Manifest next update: Mon 28 Apr 2025 12:00:34 +0000
Files and hashes: 1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: SN7ZuSmGefr14FPl8EvQZMTnwrNXzYvtDkxzBu5aG4I=)
2: V8k0n9rqEarIEgNITkDx8oQ4w44.roa (hash: BkPM7QHIpoN+47+MwN2OB6x0pADkUYwi5FlR1ZsHikQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:e2:09:aa:01:71:62:06:4c:c4:30:4a:c1:10:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Validity
Not Before: Apr 27 12:00:34 2025 GMT
Not After : Apr 28 12:00:34 2025 GMT
Subject: CN=9c28d9331a87962ced4f26c8e91aede644aa2606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:3a:bb:07:71:ec:77:f7:01:c9:6a:1b:6d:
0c:cc:b6:15:1a:87:85:17:69:fa:9d:d9:42:d4:62:
9d:a0:d0:4b:5c:81:d6:2c:48:16:55:02:d9:d0:0a:
fc:75:8e:7a:5b:99:62:19:0e:38:a1:38:37:3e:63:
5a:fc:70:0a:6d:c6:4a:34:c1:71:2f:87:11:dc:bf:
df:18:43:98:5e:15:69:5f:3f:b1:f0:bc:52:ab:d8:
fb:27:fa:23:80:4e:70:72:4a:25:39:8a:26:6e:48:
84:75:68:83:ee:e4:b2:2a:10:de:b1:e2:28:a2:0b:
c9:b4:fb:50:c4:a3:40:a3:0b:c7:1c:b6:a0:6b:9c:
d1:2d:71:54:f6:50:ac:c5:de:dd:ca:8e:f2:5b:5f:
15:cf:d4:f4:22:8d:f1:51:da:2b:62:eb:48:c1:1e:
11:6b:eb:5c:aa:fb:43:8f:a8:39:2e:f5:3b:5c:89:
03:85:91:0f:75:94:a9:7e:47:20:a6:e8:3e:f9:6b:
0d:e4:fd:ec:da:09:84:e7:a8:03:ac:aa:03:71:6e:
4e:39:ab:73:10:82:3a:56:b8:be:1c:90:0e:7e:ad:
d0:00:80:df:e4:2f:c3:d8:9a:bf:83:2d:e9:31:97:
c1:5f:88:d2:12:31:d4:25:8f:b5:ea:e3:73:8b:42:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:D9:33:1A:87:96:2C:ED:4F:26:C8:E9:1A:ED:E6:44:AA:26:06
X509v3 Authority Key Identifier:
keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:88:99:63:78:f9:0a:2d:c3:cb:e9:e1:75:02:af:e9:45:d4:
97:d4:64:72:6d:42:52:bc:78:60:30:f8:e8:c6:8b:25:05:ef:
03:6a:8a:b5:14:a7:86:fc:cd:a6:c6:e6:8d:c3:ef:86:59:6c:
5c:6e:27:d8:1b:09:ef:09:04:ad:18:0c:0b:56:f2:ce:ab:e5:
26:48:cb:35:01:f4:5c:a3:a1:0e:bf:92:e6:f1:08:4b:6c:e1:
05:93:f9:49:b9:05:a4:b9:ad:5c:e9:29:49:d9:33:08:39:5f:
91:5a:b6:5f:31:6f:45:0a:f9:fd:9f:27:11:37:47:98:13:23:
99:f5:f4:af:88:22:70:9c:b7:06:c6:79:88:32:c1:89:bd:4e:
38:3c:8a:a8:06:f4:01:d1:33:ce:a6:ae:4c:56:0b:14:c7:09:
08:a7:18:f0:34:e7:2b:4f:07:65:63:2d:cd:9b:12:a8:0b:77:
d8:9e:79:6f:1c:dc:fc:eb:3b:3f:7f:34:e9:2f:25:43:37:97:
29:98:0e:e5:38:ee:4d:ce:98:16:d1:f4:cc:ba:f9:ac:01:41:
e4:8e:ca:5a:f3:48:9e:f7:20:f3:f2:06:75:ae:59:b7:9a:8d:
4e:dc:11:ae:f4:8e:6a:8e:d3:dd:27:c5:63:b7:d5:74:9e:21:
bf:43:24:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HuIJqgFxYgZMxDBKwRCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmRiYzZhZTBiNThhMTE3MzFmMjE5ZWRhMDIyNDcxZDFl
MTFlZGIwHhcNMjUwNDI3MTIwMDM0WhcNMjUwNDI4MTIwMDM0WjAzMTEwLwYDVQQD
Eyg5YzI4ZDkzMzFhODc5NjJjZWQ0ZjI2YzhlOTFhZWRlNjQ0YWEyNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukg6uwdx7Hf3AclqG20MzLYVGoeF
F2n6ndlC1GKdoNBLXIHWLEgWVQLZ0Ar8dY56W5liGQ44oTg3PmNa/HAKbcZKNMFx
L4cR3L/fGEOYXhVpXz+x8LxSq9j7J/ojgE5wckolOYombkiEdWiD7uSyKhDeseIo
ogvJtPtQxKNAowvHHLaga5zRLXFU9lCsxd7dyo7yW18Vz9T0Io3xUdorYutIwR4R
a+tcqvtDj6g5LvU7XIkDhZEPdZSpfkcgpug++WsN5P3s2gmE56gDrKoDcW5OOatz
EII6Vri+HJAOfq3QAIDf5C/D2Jq/gy3pMZfBX4jSEjHUJY+16uNzi0K9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwo2TMah5Ys7U8myOka7eZEqiYGMB8GA1UdIwQY
MBaAFC9tvGrgtYoRcx8hntoCJHHR4R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEt
MjUxMGRhYzMyNDk2LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEtMjUxMGRhYzMyNDk2
LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoiZY3j5
Ci3Dy+nhdQKv6UXUl9Rkcm1CUrx4YDD46MaLJQXvA2qKtRSnhvzNpsbmjcPvhlls
XG4n2BsJ7wkErRgMC1byzqvlJkjLNQH0XKOhDr+S5vEIS2zhBZP5SbkFpLmtXOkp
SdkzCDlfkVq2XzFvRQr5/Z8nETdHmBMjmfX0r4gicJy3BsZ5iDLBib1OODyKqAb0
AdEzzqauTFYLFMcJCKcY8DTnK08HZWMtzZsSqAt32J55bxzc/Os7P3806S8lQzeX
KZgO5TjuTc6YFtH0zLr5rAFB5I7KWvNInvcg8/IGda5Zt5qNTtwRrvSOao7T3SfF
Y7fVdJ4hv0MkQQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:18 2025 by rpki-client