Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: oTOXt35F6qWF6kuC9g4SJXfLUV8p2gMULBn5idJLdn4=
Subject key identifier: E3:9B:ED:BE:93:D7:81:28:AD:7F:FA:EB:2C:E0:0F:B3:B7:2C:65:9A
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 0196AF2010F956D763EC7EEA7BDB90F98FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 0F8A
Signing time: Thu 08 May 2025 09:00:36 +0000
Manifest this update: Thu 08 May 2025 09:00:36 +0000
Manifest next update: Fri 09 May 2025 09:00:36 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: 59+F6ylJi4Ao9vKMTaUb1mZCLNkkjXhEI5kY7a/Rc4s=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:10:f9:56:d7:63:ec:7e:ea:7b:db:90:f9:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: May 8 09:00:36 2025 GMT
Not After : May 9 09:00:36 2025 GMT
Subject: CN=e39bedbe93d78128ad7ffaeb2ce00fb3b72c659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:d4:4c:0c:67:39:49:92:51:7e:25:e0:62:
f4:f1:58:61:22:7d:67:e3:63:34:b7:ad:79:21:5f:
06:41:b0:b4:23:2e:8d:66:b5:11:5e:28:37:77:df:
09:33:2b:bf:a4:78:57:c1:94:75:48:e8:29:8d:bb:
56:45:bc:45:95:bd:65:d5:8f:25:b6:5f:ac:fe:6d:
76:39:79:80:73:06:42:2e:6b:88:33:15:76:c5:53:
65:4f:57:19:be:93:bd:d1:71:92:f5:9f:1d:32:c4:
d1:5d:d2:1b:bd:3c:bb:cf:e1:72:16:9e:c8:c9:1f:
1a:a6:7d:70:5a:e7:44:0d:6f:f8:24:e1:7d:68:1e:
e6:6b:a4:f0:9a:eb:bd:8e:6c:22:56:9a:e0:d0:61:
da:1e:16:39:b4:13:83:c0:f0:c1:5a:52:06:8f:1a:
9e:06:9d:5e:98:28:1a:ac:69:1d:8f:9a:7b:91:6d:
92:2b:a8:a3:06:a8:97:aa:cc:3f:15:5a:75:3b:30:
1a:cc:a2:b9:68:1e:23:68:c3:af:27:55:5f:5c:71:
d0:29:f0:6b:ba:14:25:e6:27:39:4a:c0:47:6b:e8:
d0:99:01:03:e7:1a:15:12:8f:e4:06:09:dd:33:17:
22:fe:38:5d:7b:a2:cd:db:80:dc:63:2b:0f:ed:72:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:ED:BE:93:D7:81:28:AD:7F:FA:EB:2C:E0:0F:B3:B7:2C:65:9A
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:82:7d:c1:fc:9b:46:18:58:00:7d:b2:63:ff:14:24:b4:f5:
5e:43:f0:d5:01:17:bd:33:01:28:bd:a5:b8:bb:e1:90:8d:e8:
22:36:f3:fe:69:44:27:0a:74:ca:f9:aa:83:94:3d:a1:a3:5e:
e8:0d:d0:74:cb:cc:32:dc:b9:86:21:7d:97:c1:bb:55:46:a0:
bc:1d:3a:25:3d:55:6c:c7:c4:36:28:3b:46:c1:4b:b6:7b:ee:
e5:b5:c3:a9:cb:34:08:5e:28:ff:d4:78:0b:19:0d:d4:c7:97:
50:4c:61:16:8b:de:b6:5d:4e:ab:ac:d9:69:00:5d:78:08:ad:
22:ae:1f:c6:51:56:83:cc:6d:97:9c:79:a7:8b:63:65:47:e3:
63:17:76:9c:a3:a5:17:74:b7:49:41:b0:56:49:6f:2d:47:4a:
a9:9f:73:f6:56:16:95:1a:fc:bd:73:6c:67:6d:c3:1b:c1:40:
b5:2c:b6:83:1a:36:ec:44:87:f5:03:05:eb:a9:bb:f9:58:ff:
04:7e:9f:71:9f:84:3d:05:79:d7:19:c2:41:bb:66:42:79:5d:
28:8e:ea:a9:b2:e6:92:e3:fb:07:b1:98:8e:37:80:ea:c8:1e:
6d:4a:d0:5a:c5:e4:37:e5:5e:77:55:3a:f2:84:f5:af:b2:91:
5b:5a:58:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavIBD5Vtdj7H7qe9uQ+Y+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NWUwNDZlN2QzOTNjMTRmY2JhZWU3ZjFjNDM5ODBlM2Rh
MTFmYjEwHhcNMjUwNTA4MDkwMDM2WhcNMjUwNTA5MDkwMDM2WjAzMTEwLwYDVQQD
EyhlMzliZWRiZTkzZDc4MTI4YWQ3ZmZhZWIyY2UwMGZiM2I3MmM2NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSTUTAxnOUmSUX4l4GL08VhhIn1n
42M0t615IV8GQbC0Iy6NZrURXig3d98JMyu/pHhXwZR1SOgpjbtWRbxFlb1l1Y8l
tl+s/m12OXmAcwZCLmuIMxV2xVNlT1cZvpO90XGS9Z8dMsTRXdIbvTy7z+FyFp7I
yR8apn1wWudEDW/4JOF9aB7ma6Twmuu9jmwiVprg0GHaHhY5tBODwPDBWlIGjxqe
Bp1emCgarGkdj5p7kW2SK6ijBqiXqsw/FVp1OzAazKK5aB4jaMOvJ1VfXHHQKfBr
uhQl5ic5SsBHa+jQmQED5xoVEo/kBgndMxci/jhde6LN24DcYysP7XKDbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOb7b6T14EorX/66yzgD7O3LGWaMB8GA1UdIwQY
MBaAFNleBG59OTwU/LrufxxDmA49oR+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAt
Nzg4YzViNzU3NTRiLzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAtNzg4YzViNzU3NTRi
LzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYJ9wfyb
RhhYAH2yY/8UJLT1XkPw1QEXvTMBKL2luLvhkI3oIjbz/mlEJwp0yvmqg5Q9oaNe
6A3QdMvMMty5hiF9l8G7VUagvB06JT1VbMfENig7RsFLtnvu5bXDqcs0CF4o/9R4
CxkN1MeXUExhFovetl1Oq6zZaQBdeAitIq4fxlFWg8xtl5x5p4tjZUfjYxd2nKOl
F3S3SUGwVklvLUdKqZ9z9lYWlRr8vXNsZ23DG8FAtSy2gxo27ESH9QMF66m7+Vj/
BH6fcZ+EPQV51xnCQbtmQnldKI7qqbLmkuP7B7GYjjeA6sgebUrQWsXkN+Ved1U6
8oT1r7KRW1pYwQ==
-----END CERTIFICATE-----
Generated at Thu May 8 13:13:52 2025 by rpki-client