Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
File: _e3ZOtbKqmCtSfD5N32Kq_h34ts.mft (raw, json)
Hash identifier: yxFMYjmWYIV71RZ23ixXqFbrmjy6k/IDiiyq6OpScy4=
Subject key identifier: A7:57:EE:5C:E3:45:C3:EE:C7:97:7C:B8:39:51:98:7A:C4:F1:82:A7
Authority key identifier: FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
Certificate issuer: /CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Certificate serial: 0196572674F311BC3306E49A1BF9E96035EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
Manifest number: 067E
Signing time: Mon 21 Apr 2025 07:01:00 +0000
Manifest this update: Mon 21 Apr 2025 07:01:00 +0000
Manifest next update: Tue 22 Apr 2025 07:01:00 +0000
Files and hashes: 1: _e3ZOtbKqmCtSfD5N32Kq_h34ts.crl (hash: HQ/SO9RhxC00eXABXbdqlJ93jn8+SxHxOTCk85p4yLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:74:f3:11:bc:33:06:e4:9a:1b:f9:e9:60:35:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Validity
Not Before: Apr 21 07:01:00 2025 GMT
Not After : Apr 22 07:01:00 2025 GMT
Subject: CN=a757ee5ce345c3eec7977cb83951987ac4f182a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:ae:f2:5e:49:64:8f:17:59:4d:13:03:20:
5f:bf:63:4c:2d:b8:04:84:a3:07:a2:ab:2d:d8:28:
01:b4:1d:91:4f:63:80:d6:a7:ee:92:8b:e1:95:05:
38:69:69:50:3b:a1:c2:6a:1c:4d:08:45:04:dc:8c:
5d:a2:79:19:4e:93:75:32:68:90:3b:e3:73:3a:aa:
1a:13:ff:aa:f9:bf:07:cf:f5:8c:e6:f8:8a:ec:17:
91:78:6c:69:7b:a9:ea:3f:90:8e:06:37:cf:55:8e:
d0:cd:53:4b:39:6f:d3:53:b8:cf:2c:c6:69:37:3a:
e1:22:63:9a:1a:32:c9:4f:c2:1a:87:74:be:84:1c:
ea:1b:1f:89:44:b5:5a:c6:37:33:2a:2d:77:c7:de:
f5:d8:96:6c:a4:a6:55:99:ba:2b:ee:94:c5:a7:10:
50:08:d6:d3:0c:fe:ca:eb:6f:37:b3:3c:ea:1d:ef:
b8:9d:00:44:94:71:1f:44:4c:c4:5a:5f:3e:c6:46:
e1:f2:73:d4:d0:74:3c:eb:57:e9:23:1a:06:b3:bd:
03:1d:c3:55:f7:03:9e:77:56:bb:f1:85:88:95:48:
34:45:7c:2e:e5:de:01:85:23:c7:96:33:3e:5c:9e:
f9:1a:a4:52:94:9d:83:d8:ef:ae:a0:14:de:a1:e4:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:EE:5C:E3:45:C3:EE:C7:97:7C:B8:39:51:98:7A:C4:F1:82:A7
X509v3 Authority Key Identifier:
keyid:FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:86:be:cc:63:3e:ae:6c:00:6b:a6:71:59:d1:50:7b:e8:f2:
93:14:b8:75:70:b5:e8:b2:81:0e:20:32:21:84:b4:dc:dd:99:
ae:ca:16:30:94:3d:95:2a:ac:54:9f:e8:09:34:c5:f5:be:bb:
3d:11:c8:bc:16:37:de:bf:ae:86:94:94:7a:ee:a3:c8:11:08:
29:2a:2d:98:1e:f6:41:fd:d0:17:3a:33:c2:12:62:9b:f8:48:
11:1c:75:8f:de:0e:b3:d9:27:57:58:34:0d:48:b9:df:e3:3f:
de:95:63:6e:97:1a:2d:8a:08:9a:b8:2a:c0:6e:04:8c:27:f7:
67:ab:92:32:8f:32:cf:23:99:0c:03:79:ac:79:a9:87:aa:54:
55:e4:fb:57:ca:99:ea:12:ce:26:5f:b2:06:e4:e6:a6:03:38:
19:1a:a5:9b:ab:f1:0c:d3:e6:08:58:57:c7:df:15:b7:c1:88:
c5:bb:e0:da:a7:47:97:09:64:d3:c3:2a:b6:53:7e:17:4c:13:
bb:d3:b5:b2:2b:7c:04:64:7a:99:77:d4:d1:39:fa:4a:2d:aa:
8c:2f:26:c2:2c:63:ec:e9:b5:35:2a:0d:4a:d6:f1:61:a2:22:
c4:d8:1a:2d:45:a7:46:19:47:2f:9f:11:b2:0f:c4:c4:b4:fd:
78:a8:84:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJnTzEbwzBuSaG/npYDXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZWRkOTNhZDZjYWFhNjBhZDQ5ZjBmOTM3N2Q4YWFiZjg3
N2UyZGIwHhcNMjUwNDIxMDcwMTAwWhcNMjUwNDIyMDcwMTAwWjAzMTEwLwYDVQQD
EyhhNzU3ZWU1Y2UzNDVjM2VlYzc5NzdjYjgzOTUxOTg3YWM0ZjE4MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn2u8l5JZI8XWU0TAyBfv2NMLbgE
hKMHoqst2CgBtB2RT2OA1qfukovhlQU4aWlQO6HCahxNCEUE3IxdonkZTpN1MmiQ
O+NzOqoaE/+q+b8Hz/WM5viK7BeReGxpe6nqP5COBjfPVY7QzVNLOW/TU7jPLMZp
NzrhImOaGjLJT8Iah3S+hBzqGx+JRLVaxjczKi13x9712JZspKZVmbor7pTFpxBQ
CNbTDP7K6283szzqHe+4nQBElHEfREzEWl8+xkbh8nPU0HQ861fpIxoGs70DHcNV
9wOed1a78YWIlUg0RXwu5d4BhSPHljM+XJ75GqRSlJ2D2O+uoBTeoeTNIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdX7lzjRcPux5d8uDlRmHrE8YKnMB8GA1UdIwQY
MBaAFP3t2TrWyqpgrUnw+Td9iqv4d+LbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2UzWk90YktxbUN0U2ZENU4zMktxX2gzNHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wMGI0MjYtMTI4Yi00ZjljLWEzYWYt
YmRiNWYxNmQ0NmYwLzEvX2UzWk90YktxbUN0U2ZENU4zMktxX2gzNHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wMGI0MjYtMTI4Yi00ZjljLWEzYWYtYmRiNWYxNmQ0NmYw
LzEvX2UzWk90YktxbUN0U2ZENU4zMktxX2gzNHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYa+zGM+
rmwAa6ZxWdFQe+jykxS4dXC16LKBDiAyIYS03N2ZrsoWMJQ9lSqsVJ/oCTTF9b67
PRHIvBY33r+uhpSUeu6jyBEIKSotmB72Qf3QFzozwhJim/hIERx1j94Os9knV1g0
DUi53+M/3pVjbpcaLYoImrgqwG4EjCf3Z6uSMo8yzyOZDAN5rHmph6pUVeT7V8qZ
6hLOJl+yBuTmpgM4GRqlm6vxDNPmCFhXx98Vt8GIxbvg2qdHlwlk08MqtlN+F0wT
u9O1sit8BGR6mXfU0Tn6Si2qjC8mwixj7Om1NSoNStbxYaIixNgaLUWnRhlHL58R
sg/ExLT9eKiEtQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:07 2025 by rpki-client