Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: eGtMmiqFOm1hq5OxIk/4eaMISG9jZENMTytW9t2GuwU=
Subject key identifier: 81:2A:57:1F:6F:2A:E2:9D:40:62:A3:BB:50:7A:8D:0E:46:2A:8A:72
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 0196C1CB71FDB0303ADF0BDD0CDCAC853544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 0F90
Signing time: Mon 12 May 2025 00:00:57 +0000
Manifest this update: Mon 12 May 2025 00:00:57 +0000
Manifest next update: Tue 13 May 2025 00:00:57 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: 7bs4JyoLbtR+AvxTpZhg60JZxHBowvo7SyuZPkvRROc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:71:fd:b0:30:3a:df:0b:dd:0c:dc:ac:85:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: May 12 00:00:57 2025 GMT
Not After : May 13 00:00:57 2025 GMT
Subject: CN=812a571f6f2ae29d4062a3bb507a8d0e462a8a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:0b:ba:09:ce:56:0a:67:86:96:9a:09:9b:
e8:ac:8a:93:66:28:e6:cb:63:83:9c:7b:ee:ce:71:
49:1c:6a:24:63:8d:45:76:d9:66:b1:b5:21:23:9a:
37:86:a2:9e:cb:83:f5:66:e5:fc:3e:9a:69:fd:b2:
76:7d:94:94:c5:70:d7:b1:e2:f6:ea:51:a3:9f:da:
cc:25:32:32:79:99:f7:59:e8:7b:ac:04:5f:a5:ef:
5c:5a:3d:49:fc:22:0a:cc:c8:fd:62:f0:b3:52:a5:
96:0b:56:59:95:ee:e0:e6:8d:99:14:0d:c3:a2:e6:
70:2f:ad:98:00:fc:5b:d6:7d:cc:47:54:b4:ca:89:
ff:7b:9d:8c:c4:c4:a6:e5:0d:0b:4f:c4:5e:3a:c7:
86:86:21:87:ad:43:33:8a:76:93:33:c9:6a:43:1f:
a0:c9:c5:b7:5b:4b:24:e2:29:da:ea:9b:68:1f:50:
f1:69:77:9d:75:ee:36:bc:b7:1f:a1:6c:38:1b:b2:
d1:3d:7a:07:53:1c:ad:2f:3b:26:44:67:f9:ea:e5:
ad:b4:c3:d7:61:32:e1:21:6e:2a:c0:ea:03:f6:5c:
0c:ec:df:83:a6:01:ec:75:62:8c:99:b3:9c:a8:14:
cf:9a:01:42:03:7e:d9:63:32:a5:57:7b:20:cd:3d:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:57:1F:6F:2A:E2:9D:40:62:A3:BB:50:7A:8D:0E:46:2A:8A:72
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d6:9b:8f:f7:59:b8:ff:36:88:64:7a:9a:9b:fc:20:1d:63:
06:46:90:2e:36:bf:bd:15:10:cc:82:45:fb:79:09:16:80:ab:
1a:0e:7c:fe:c2:63:0b:be:08:84:4d:32:22:4c:f3:bd:fa:ef:
4b:61:47:04:e2:22:8e:5a:3d:f9:18:09:9d:7c:96:47:41:e6:
7c:4f:c0:7e:a9:cf:d4:f2:df:c7:f4:c0:b6:47:ec:49:9a:02:
88:2d:25:44:ec:43:4a:84:77:59:10:c8:56:69:bd:a7:8a:06:
f2:2b:3a:39:14:2d:b2:94:1f:91:a3:f2:d3:84:b1:eb:5c:2f:
11:d5:bb:09:ea:c4:c6:d7:d2:fe:dd:88:76:62:8d:c7:c5:14:
53:04:68:1d:ed:cf:87:fa:df:a0:41:3c:fa:6b:ff:87:15:e1:
04:a1:cd:31:4b:05:39:1f:42:bf:09:2f:f5:d6:4a:84:e0:3a:
a2:c9:fb:a0:1b:97:dc:a4:1c:fb:83:fe:c1:9d:22:0c:ee:7f:
04:35:78:7c:0a:4c:66:72:71:d6:a2:0b:aa:75:1e:7e:e1:7b:
0a:bd:40:96:fd:b9:7d:eb:f1:b7:8b:66:f0:d8:0d:87:3f:2e:
6d:1c:8d:60:c8:d2:8f:58:1d:85:81:d7:92:20:6b:31:f3:83:
76:85:60:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy3H9sDA63wvdDNyshTVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNjJmZTZiN2YzZDM2NDMzMmJjZDZlMGRhZjc5MjI2Y2Nm
ODA5ZTIwHhcNMjUwNTEyMDAwMDU3WhcNMjUwNTEzMDAwMDU3WjAzMTEwLwYDVQQD
Eyg4MTJhNTcxZjZmMmFlMjlkNDA2MmEzYmI1MDdhOGQwZTQ2MmE4YTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tELugnOVgpnhpaaCZvorIqTZijm
y2ODnHvuznFJHGokY41FdtlmsbUhI5o3hqKey4P1ZuX8Pppp/bJ2fZSUxXDXseL2
6lGjn9rMJTIyeZn3Weh7rARfpe9cWj1J/CIKzMj9YvCzUqWWC1ZZle7g5o2ZFA3D
ouZwL62YAPxb1n3MR1S0yon/e52MxMSm5Q0LT8ReOseGhiGHrUMzinaTM8lqQx+g
ycW3W0sk4ina6ptoH1DxaXedde42vLcfoWw4G7LRPXoHUxytLzsmRGf56uWttMPX
YTLhIW4qwOoD9lwM7N+DpgHsdWKMmbOcqBTPmgFCA37ZYzKlV3sgzT3xwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEqVx9vKuKdQGKju1B6jQ5GKopyMB8GA1UdIwQY
MBaAFLti/mt/PTZDMrzW4Nr3kibM+AniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQt
MTQxNDUwZjEwYTg1LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQtMTQxNDUwZjEwYTg1
LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9abj/dZ
uP82iGR6mpv8IB1jBkaQLja/vRUQzIJF+3kJFoCrGg58/sJjC74IhE0yIkzzvfrv
S2FHBOIijlo9+RgJnXyWR0HmfE/AfqnP1PLfx/TAtkfsSZoCiC0lROxDSoR3WRDI
Vmm9p4oG8is6ORQtspQfkaPy04Sx61wvEdW7CerExtfS/t2IdmKNx8UUUwRoHe3P
h/rfoEE8+mv/hxXhBKHNMUsFOR9Cvwkv9dZKhOA6osn7oBuX3KQc+4P+wZ0iDO5/
BDV4fApMZnJx1qILqnUefuF7Cr1Alv25fevxt4tm8NgNhz8ubRyNYMjSj1gdhYHX
kiBrMfODdoVg8Q==
-----END CERTIFICATE-----
Generated at Mon May 12 05:25:48 2025 by rpki-client