Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: FhfLBldowtbuC6+nZfRX+KhC9vm1dwpVAKGFuuN3M9M=
Subject key identifier: A6:FE:F1:13:F5:E2:96:D7:99:B0:3E:09:4C:B9:C8:DA:2B:74:0D:0E
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 0196C3F07EE0DCB758895C36F0ED1CE81EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 05E5
Signing time: Mon 12 May 2025 10:00:40 +0000
Manifest this update: Mon 12 May 2025 10:00:40 +0000
Manifest next update: Tue 13 May 2025 10:00:40 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: RaLRFrglhZk083qSNuWgWwfnR6bFCFbos/Xi+uti3A4=)
2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:7e:e0:dc:b7:58:89:5c:36:f0:ed:1c:e8:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: May 12 10:00:40 2025 GMT
Not After : May 13 10:00:40 2025 GMT
Subject: CN=a6fef113f5e296d799b03e094cb9c8da2b740d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:c1:9f:79:b1:12:7f:7f:91:e5:92:d9:54:
de:fb:64:8b:4b:a6:2f:2c:a6:63:51:25:06:6d:b5:
5b:7c:d9:39:cd:4b:63:04:56:ab:7d:59:e4:21:5b:
e7:fa:75:d6:70:36:66:d8:43:d5:8f:f1:d5:50:88:
09:d4:5b:44:8c:a0:56:38:27:62:be:13:f3:05:d0:
65:4b:dc:9f:99:fd:80:e0:6b:5d:c4:8e:f6:c2:bd:
68:d1:e7:f1:12:76:89:a6:14:f1:3d:42:01:e2:41:
ad:24:9f:e4:b1:67:25:5a:7f:9e:b4:6c:bb:2d:20:
e4:54:6c:97:11:c2:47:f4:46:69:a0:e1:39:5c:21:
ce:aa:1b:3f:7e:36:47:b8:85:b0:5f:e1:4e:65:e7:
28:21:d8:96:21:b5:f9:d6:dc:d5:9e:f8:6c:94:0d:
5a:25:4f:44:f9:c6:21:4b:17:0e:d9:c4:ff:1f:9c:
81:54:b3:99:4c:88:a8:f2:c8:80:18:d0:f4:b5:27:
e9:f7:05:94:bf:2c:85:5c:c5:a9:39:46:f9:2e:98:
89:c6:89:98:50:b2:7b:da:30:c0:3a:bf:40:a0:92:
c8:99:af:5d:a3:fc:cc:18:e0:75:76:83:21:3a:68:
0a:c6:8a:b5:7e:2f:d2:ed:64:d8:91:56:35:76:04:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:F1:13:F5:E2:96:D7:99:B0:3E:09:4C:B9:C8:DA:2B:74:0D:0E
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:a0:ce:11:cd:c5:6f:74:bf:da:da:5e:98:85:64:a2:3e:
8b:1d:84:96:40:e6:31:de:7f:37:a2:f3:de:38:46:33:d5:e5:
a4:8f:20:8c:3f:3a:b8:fe:59:ef:3c:d1:47:cc:a1:05:99:97:
a9:8c:66:2e:68:f8:f8:c4:17:5b:c1:27:47:82:30:c1:ad:8e:
4b:02:ed:a3:5e:c7:12:6d:33:f0:e0:02:8b:23:5e:45:e3:63:
fc:56:dd:4c:77:67:d7:6c:32:59:92:22:c4:0e:c5:c4:79:32:
a5:61:fb:50:dd:0f:f4:40:54:65:71:ff:0c:8c:d3:29:6f:3f:
74:92:d8:39:cc:f5:20:e4:be:71:8f:de:ae:41:1a:97:50:d3:
da:2e:c7:79:e2:91:ba:2c:7f:a1:bb:0f:6e:03:de:f6:32:ac:
64:be:06:d9:17:2c:98:ea:e3:85:b4:c2:3e:95:dc:99:18:8f:
18:6b:a1:3b:8d:55:25:9f:79:2b:eb:31:ee:4d:e1:d6:8b:fe:
48:b0:1d:94:88:7f:cf:77:41:70:48:3e:27:f6:a6:55:9f:f4:
85:50:ac:0c:7f:ea:f4:d2:94:78:18:76:b5:83:db:28:db:31:
98:ec:d8:b5:1d:51:f6:bf:15:ee:8c:25:3e:8d:25:61:2c:a9:
99:92:79:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbD8H7g3LdYiVw28O0c6B72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1
ZjI5YTQwHhcNMjUwNTEyMTAwMDQwWhcNMjUwNTEzMTAwMDQwWjAzMTEwLwYDVQQD
EyhhNmZlZjExM2Y1ZTI5NmQ3OTliMDNlMDk0Y2I5YzhkYTJiNzQwZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSXBn3mxEn9/keWS2VTe+2SLS6Yv
LKZjUSUGbbVbfNk5zUtjBFarfVnkIVvn+nXWcDZm2EPVj/HVUIgJ1FtEjKBWOCdi
vhPzBdBlS9yfmf2A4GtdxI72wr1o0efxEnaJphTxPUIB4kGtJJ/ksWclWn+etGy7
LSDkVGyXEcJH9EZpoOE5XCHOqhs/fjZHuIWwX+FOZecoIdiWIbX51tzVnvhslA1a
JU9E+cYhSxcO2cT/H5yBVLOZTIio8siAGND0tSfp9wWUvyyFXMWpOUb5LpiJxomY
ULJ72jDAOr9AoJLIma9do/zMGOB1doMhOmgKxoq1fi/S7WTYkVY1dgTTBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb+8RP14pbXmbA+CUy5yNordA0OMB8GA1UdIwQY
MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt
MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm
LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvegzhHN
xW90v9raXpiFZKI+ix2ElkDmMd5/N6Lz3jhGM9XlpI8gjD86uP5Z7zzRR8yhBZmX
qYxmLmj4+MQXW8EnR4Iwwa2OSwLto17HEm0z8OACiyNeReNj/FbdTHdn12wyWZIi
xA7FxHkypWH7UN0P9EBUZXH/DIzTKW8/dJLYOcz1IOS+cY/erkEal1DT2i7HeeKR
uix/obsPbgPe9jKsZL4G2RcsmOrjhbTCPpXcmRiPGGuhO41VJZ95K+sx7k3h1ov+
SLAdlIh/z3dBcEg+J/amVZ/0hVCsDH/q9NKUeBh2tYPbKNsxmOzYtR1R9r8V7owl
Po0lYSypmZJ5dQ==
-----END CERTIFICATE-----
Generated at Mon May 12 18:17:36 2025 by rpki-client