Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: wHIsARGd+DOx2VOgypXtm/IeS3Di0kALGkN1F8F8U1s=
Subject key identifier: F9:E3:6B:99:2C:D4:B8:A5:32:84:7C:92:93:26:30:C2:B3:C5:4F:0D
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 0196BC00030BE6A8D7F4E6E49E20DA46BE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 0501
Signing time: Sat 10 May 2025 21:00:39 +0000
Manifest this update: Sat 10 May 2025 21:00:39 +0000
Manifest next update: Sun 11 May 2025 21:00:39 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: pOEujRI5LT8XxzzT5+B3YYrmcwien1sOOplf1XaoJ6E=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:03:0b:e6:a8:d7:f4:e6:e4:9e:20:da:46:be:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: May 10 21:00:39 2025 GMT
Not After : May 11 21:00:39 2025 GMT
Subject: CN=f9e36b992cd4b8a532847c92932630c2b3c54f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:3a:42:65:92:29:a6:0f:33:49:1d:db:79:
8b:75:0e:3d:7c:0c:22:11:8d:97:68:fb:4f:3b:2d:
58:b6:39:46:b5:69:d2:7a:b3:6d:34:3f:43:ea:84:
a2:c3:2e:64:3b:24:ae:56:c7:a7:ee:a9:02:63:43:
78:f7:b8:65:09:aa:30:d3:d1:36:72:a5:c2:4d:b7:
ba:9b:2a:4d:b8:54:95:d2:2e:9c:32:f7:57:fc:06:
00:7b:fc:41:4b:12:a7:72:fe:d0:0f:fb:86:ea:b5:
f4:bb:d1:f9:3e:61:0f:d0:0b:3c:28:bd:be:e5:ed:
a5:45:37:9a:e7:0b:0f:fd:6b:b3:ef:5f:7c:f3:b7:
76:cf:be:27:6c:38:7b:bf:99:90:04:5e:ab:03:1d:
b8:37:15:90:ef:99:43:9e:78:70:5f:1c:6c:ef:af:
cc:f2:07:ff:7a:90:26:69:94:b9:27:f1:29:d7:06:
88:c5:e9:68:79:37:bb:06:af:e8:66:e8:36:3c:7d:
de:08:02:ad:23:6a:6d:8c:62:86:42:50:71:1e:a0:
f3:92:8a:be:19:2f:e5:03:71:22:ac:67:6a:57:06:
2f:8d:fc:18:a4:54:b6:f6:d0:67:f0:79:5a:6d:b3:
8e:96:72:c1:83:c3:6f:14:b5:e6:a3:1d:47:8d:41:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:6B:99:2C:D4:B8:A5:32:84:7C:92:93:26:30:C2:B3:C5:4F:0D
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2a:f8:6d:11:aa:67:95:37:2d:c0:e7:c0:b9:23:d7:5f:51:
76:0c:98:06:5a:40:fa:55:67:c9:10:b4:2d:27:5f:96:67:c9:
7d:5b:04:f9:71:62:76:0f:e7:24:3e:62:fc:8a:f6:19:fb:81:
4d:ba:cd:8e:42:27:3b:a4:db:48:a1:2c:d5:c2:b8:e1:8e:00:
15:68:92:0e:09:7c:ea:ca:99:4c:86:dd:2d:ca:9f:62:bd:55:
ec:6c:45:e4:b8:b5:cd:ba:07:61:1b:b6:cc:8f:18:4b:a8:cc:
78:97:8b:91:7c:f1:23:18:9d:d6:24:cf:65:6d:f5:51:91:99:
4d:e7:5c:23:04:04:30:0f:c6:7c:e4:e3:7d:6a:c9:e0:8e:e8:
84:ad:73:7c:7c:f8:cf:27:2b:56:8b:ed:b5:80:20:38:6f:5e:
1c:cf:1b:c9:9b:f8:64:f2:02:9a:7a:23:bc:07:f4:dd:e8:ee:
7c:6d:aa:4f:55:88:de:23:23:ef:03:5f:74:11:45:64:5f:6b:
7f:35:16:61:08:3d:17:ee:75:c8:39:48:04:e0:43:16:47:3a:
bf:81:59:dd:3c:62:55:51:19:2b:fe:52:64:57:9a:ad:b0:15:
d9:77:d7:48:8e:ca:10:6a:6e:d5:0b:30:92:f3:ce:aa:14:31:
99:75:00:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8AAML5qjX9ObkniDaRr4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi
OTczNDgwHhcNMjUwNTEwMjEwMDM5WhcNMjUwNTExMjEwMDM5WjAzMTEwLwYDVQQD
EyhmOWUzNmI5OTJjZDRiOGE1MzI4NDdjOTI5MzI2MzBjMmIzYzU0ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2c6QmWSKaYPM0kd23mLdQ49fAwi
EY2XaPtPOy1YtjlGtWnSerNtND9D6oSiwy5kOySuVsen7qkCY0N497hlCaow09E2
cqXCTbe6mypNuFSV0i6cMvdX/AYAe/xBSxKncv7QD/uG6rX0u9H5PmEP0As8KL2+
5e2lRTea5wsP/Wuz719887d2z74nbDh7v5mQBF6rAx24NxWQ75lDnnhwXxxs76/M
8gf/epAmaZS5J/Ep1waIxeloeTe7Bq/oZug2PH3eCAKtI2ptjGKGQlBxHqDzkoq+
GS/lA3EirGdqVwYvjfwYpFS29tBn8HlabbOOlnLBg8NvFLXmox1HjUElgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnja5ks1LilMoR8kpMmMMKzxU8NMB8GA1UdIwQY
MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt
YjJiNzk2MmMyZDgxLzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx
LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATir4bRGq
Z5U3LcDnwLkj119RdgyYBlpA+lVnyRC0LSdflmfJfVsE+XFidg/nJD5i/Ir2GfuB
TbrNjkInO6TbSKEs1cK44Y4AFWiSDgl86sqZTIbdLcqfYr1V7GxF5Li1zboHYRu2
zI8YS6jMeJeLkXzxIxid1iTPZW31UZGZTedcIwQEMA/GfOTjfWrJ4I7ohK1zfHz4
zycrVovttYAgOG9eHM8byZv4ZPICmnojvAf03ejufG2qT1WI3iMj7wNfdBFFZF9r
fzUWYQg9F+51yDlIBOBDFkc6v4FZ3TxiVVEZK/5SZFearbAV2XfXSI7KEGpu1Qsw
kvPOqhQxmXUArg==
-----END CERTIFICATE-----
Generated at Sat May 10 23:57:39 2025 by rpki-client