Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
File: L74q18xpqV46gHH7M9-a96N5kos.mft (raw, json)
Hash identifier: VToNMDVVI+vBxRJi+tjYYDMKFBYQCfk9109CdkLgkU8=
Subject key identifier: 19:D0:00:3C:71:A2:C6:9E:13:C3:4C:4A:99:58:D7:D5:E3:8F:9F:FE
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Certificate issuer: /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial: 0196AE7B3BA0B0759A07F03263DEB0F4C9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
Manifest number: 14CE
Signing time: Thu 08 May 2025 06:00:33 +0000
Manifest this update: Thu 08 May 2025 06:00:33 +0000
Manifest next update: Fri 09 May 2025 06:00:33 +0000
Files and hashes: 1: IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa (hash: 1Nd8bcLLvnAmE61D+G0tQnrMjss8Eoxbsm1iIYgXgB4=)
2: L74q18xpqV46gHH7M9-a96N5kos.crl (hash: u8EY9utPDesIjtCk7DtEd7Gq2MpeiwFXU8ae/20QZY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:3b:a0:b0:75:9a:07:f0:32:63:de:b0:f4:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Validity
Not Before: May 8 06:00:33 2025 GMT
Not After : May 9 06:00:33 2025 GMT
Subject: CN=19d0003c71a2c69e13c34c4a9958d7d5e38f9ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:0d:df:0a:e5:01:66:83:48:c6:f3:23:fb:
a2:e3:07:41:b5:33:fa:cb:1c:c2:41:8e:48:86:60:
f5:fb:35:e9:d5:a9:94:49:4a:fc:3c:50:d2:df:d8:
92:90:57:95:a3:ea:5b:09:ec:c2:e9:8c:e5:4f:04:
f0:ee:2d:ab:44:a4:95:77:99:0c:a2:4d:4c:78:d2:
24:f8:23:61:ca:86:84:9c:2d:28:7b:13:c4:cb:8a:
77:be:13:00:65:40:4b:d0:37:6f:ec:09:8d:a8:8a:
14:ed:76:ec:46:12:07:49:18:5e:85:ff:28:94:9a:
1b:ed:2f:eb:9b:ec:97:3b:91:dd:d6:e8:d8:ad:05:
49:d2:6c:68:a2:39:0c:c9:a6:85:a2:90:69:40:a1:
45:7f:c6:6e:33:93:68:21:a4:08:a0:db:f2:1f:71:
50:3d:69:82:f8:80:b3:43:cb:10:6f:ba:45:da:fd:
5c:83:2c:87:6e:62:cb:8a:7d:23:0f:d2:1e:29:0e:
c1:99:b2:4e:55:37:80:30:5d:56:30:f3:07:14:39:
a4:90:40:71:78:4a:ce:1c:1d:23:0b:2e:b6:fa:e0:
5f:77:71:a5:22:59:d5:be:cf:62:98:0e:c3:ec:ac:
9e:d2:f4:31:f4:b5:c7:68:64:47:62:d3:d7:fb:89:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:00:3C:71:A2:C6:9E:13:C3:4C:4A:99:58:D7:D5:E3:8F:9F:FE
X509v3 Authority Key Identifier:
keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:85:ed:d4:44:bf:d0:5e:1b:e0:a8:f9:f5:05:cd:44:70:58:
2a:6e:d5:b6:db:64:99:15:10:78:ab:b8:58:b6:2b:29:c4:17:
d1:5d:27:fd:97:20:76:99:fe:76:8d:b3:3b:7b:91:5b:04:f5:
c4:1c:c7:68:fe:dd:23:5d:41:ae:19:90:b4:e8:82:6d:74:6c:
53:94:86:b3:58:ae:ab:0d:a4:4a:22:f7:fa:ce:44:d6:aa:ae:
09:99:04:8a:2b:b8:08:0f:18:04:0f:a3:3e:9d:4f:ea:6c:3d:
d4:82:e5:dc:c2:de:fd:bd:68:4f:dd:f8:84:08:31:ad:8e:f2:
6b:be:7d:0b:a4:ac:29:42:d0:14:60:6a:9a:a2:3d:e5:b5:7f:
7b:76:4a:d6:2a:d4:41:a5:c5:37:99:7a:45:11:d1:52:00:a9:
2e:df:36:c3:b8:7f:05:e1:19:04:e3:42:6f:b6:59:8b:e1:a9:
54:4c:fd:5f:f1:24:64:5d:94:40:87:fe:6e:23:7c:bc:06:6a:
16:62:08:7c:ae:02:a3:8a:30:f0:7f:66:ef:90:de:0b:93:8a:
e1:d5:4e:3e:2f:2f:55:e2:d7:1e:c1:87:46:f7:6f:dd:65:8e:
36:f8:e2:59:df:23:bc:33:a8:8f:11:c9:40:20:f7:62:26:71:
fb:3a:22:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauezugsHWaB/AyY96w9MnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmUyYWQ3Y2M2OWE5NWUzYTgwNzFmYjMzZGY5YWY3YTM3
OTkyOGIwHhcNMjUwNTA4MDYwMDMzWhcNMjUwNTA5MDYwMDMzWjAzMTEwLwYDVQQD
EygxOWQwMDAzYzcxYTJjNjllMTNjMzRjNGE5OTU4ZDdkNWUzOGY5ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse0N3wrlAWaDSMbzI/ui4wdBtTP6
yxzCQY5IhmD1+zXp1amUSUr8PFDS39iSkFeVo+pbCezC6YzlTwTw7i2rRKSVd5kM
ok1MeNIk+CNhyoaEnC0oexPEy4p3vhMAZUBL0Ddv7AmNqIoU7XbsRhIHSRhehf8o
lJob7S/rm+yXO5Hd1ujYrQVJ0mxoojkMyaaFopBpQKFFf8ZuM5NoIaQIoNvyH3FQ
PWmC+ICzQ8sQb7pF2v1cgyyHbmLLin0jD9IeKQ7BmbJOVTeAMF1WMPMHFDmkkEBx
eErOHB0jCy62+uBfd3GlIlnVvs9imA7D7Kye0vQx9LXHaGRHYtPX+4l+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnQADxxosaeE8NMSplY19Xjj5/+MB8GA1UdIwQY
MBaAFC++KtfMaaleOoBx+zPfmvejeZKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDc0cTE4eHBxVjQ2Z0hIN005LWE5Nk41a29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hZDY5NTQtYWYzMi00OTk2LWJiNjkt
MmVkOWYxY2MyYjBkLzEvTDc0cTE4eHBxVjQ2Z0hIN005LWE5Nk41a29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hZDY5NTQtYWYzMi00OTk2LWJiNjktMmVkOWYxY2MyYjBk
LzEvTDc0cTE4eHBxVjQ2Z0hIN005LWE5Nk41a29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYXt1ES/
0F4b4Kj59QXNRHBYKm7VtttkmRUQeKu4WLYrKcQX0V0n/Zcgdpn+do2zO3uRWwT1
xBzHaP7dI11BrhmQtOiCbXRsU5SGs1iuqw2kSiL3+s5E1qquCZkEiiu4CA8YBA+j
Pp1P6mw91ILl3MLe/b1oT934hAgxrY7ya759C6SsKULQFGBqmqI95bV/e3ZK1irU
QaXFN5l6RRHRUgCpLt82w7h/BeEZBONCb7ZZi+GpVEz9X/EkZF2UQIf+biN8vAZq
FmIIfK4Co4ow8H9m75DeC5OK4dVOPi8vVeLXHsGHRvdv3WWONvjiWd8jvDOojxHJ
QCD3YiZx+zoiog==
-----END CERTIFICATE-----
Generated at Thu May 8 09:20:52 2025 by rpki-client