Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: r7xJ4bW/C4bGcuyF0JsCr8FmXw2N+6olqpcZRLVMsVU=
Subject key identifier: 95:FC:CB:21:34:7B:1C:28:EF:34:BF:E1:7D:7B:00:46:1B:F5:1E:D2
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 01963FFA521F643EA39B833435CA0C2D95BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 19:01:31 +0000
Manifest this update: Wed 16 Apr 2025 19:01:31 +0000
Manifest next update: Thu 17 Apr 2025 19:01:31 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: UuoKGrZkUC6yq4bkOcsXKNouA/KyRyADw+v5D993ujE=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:52:1f:64:3e:a3:9b:83:34:35:ca:0c:2d:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Apr 16 19:01:31 2025 GMT
Not After : Apr 17 19:01:31 2025 GMT
Subject: CN=95fccb21347b1c28ef34bfe17d7b00461bf51ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:5b:4a:ff:3e:56:99:cd:a7:b3:67:3f:8a:
f3:b7:2b:8a:1c:d9:79:23:45:ad:f5:98:f1:3a:b7:
fa:ba:70:a9:da:ee:1d:6b:4b:2d:b6:06:1d:db:78:
53:8a:14:98:43:e5:51:ba:60:65:4a:a8:6b:85:75:
48:9a:77:bd:f1:91:46:78:6e:f9:5b:d4:4b:99:32:
f5:84:22:7a:3c:48:cc:47:40:9e:96:5b:da:4e:f5:
37:87:0d:e5:eb:d8:ec:b9:bf:09:5f:c9:dc:4b:3a:
ca:8e:17:23:c1:7a:ac:1a:50:6c:17:4a:95:15:8b:
05:90:88:30:f4:ca:47:7c:cf:6b:17:22:30:71:95:
07:fa:12:f4:64:a0:66:96:fb:07:35:00:8d:22:dc:
f6:4e:0b:17:8b:31:c6:5a:47:be:18:c4:ae:c8:e2:
34:6e:0d:a8:08:55:b6:3e:62:ff:3a:ce:15:c2:86:
d9:0a:dc:3f:db:a3:9c:57:b2:ef:be:cc:9e:f5:5c:
8c:ff:76:4e:00:60:bd:b6:38:1c:16:9b:5f:11:51:
96:fd:80:d6:7a:17:22:56:01:bd:83:d9:45:8f:5e:
a6:e2:ad:b6:83:1f:2d:c2:8e:f9:f0:1c:aa:7a:5e:
a7:7b:ea:89:8f:22:20:18:27:21:d1:bc:f9:1a:63:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:CB:21:34:7B:1C:28:EF:34:BF:E1:7D:7B:00:46:1B:F5:1E:D2
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f5:48:39:09:75:13:1b:07:b8:dc:35:87:c3:90:0a:c4:03:
cc:86:1b:7e:e9:75:ce:12:4e:da:15:7c:a0:ac:ed:91:42:e8:
8e:86:d7:ff:c6:3e:21:a2:12:5c:4a:a8:f4:b5:09:7b:81:34:
78:a5:7c:8d:be:42:52:6f:f9:5a:2f:a5:17:f5:57:f1:04:e3:
4c:36:fc:1c:66:1f:5f:d7:cb:b5:35:72:90:9e:1a:ba:28:12:
ea:01:ea:66:cf:a4:95:fc:32:bd:74:af:d7:c0:70:2e:0a:98:
90:ff:f0:4e:02:98:7f:90:fb:d5:62:fb:4c:49:b6:13:a1:76:
38:f5:e4:79:d6:2b:50:0a:20:30:3a:b2:5c:8c:52:e0:e4:02:
43:65:9e:f7:21:3c:bb:dd:30:68:7b:fe:84:9c:1d:e6:1c:8d:
1a:c1:44:a7:9e:b7:fd:7f:bb:26:f2:b6:80:63:7e:cb:4e:a0:
aa:11:72:cf:1a:b7:27:0f:75:16:9f:05:11:97:f5:9a:5f:3d:
ec:db:92:a4:b3:fa:74:16:7d:c5:6e:85:fb:5d:36:98:9a:45:
12:be:f3:de:6d:e1:85:13:9c:d5:73:43:5c:f8:bf:71:3e:27:
55:b7:6b:e5:f1:6a:d9:f9:22:f9:98:94:4f:38:9b:b6:8a:65:
6a:3c:0c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+lIfZD6jm4M0NcoMLZW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2
ZjlhNGIwHhcNMjUwNDE2MTkwMTMxWhcNMjUwNDE3MTkwMTMxWjAzMTEwLwYDVQQD
Eyg5NWZjY2IyMTM0N2IxYzI4ZWYzNGJmZTE3ZDdiMDA0NjFiZjUxZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyhbSv8+VpnNp7NnP4rztyuKHNl5
I0Wt9ZjxOrf6unCp2u4da0sttgYd23hTihSYQ+VRumBlSqhrhXVImne98ZFGeG75
W9RLmTL1hCJ6PEjMR0CellvaTvU3hw3l69jsub8JX8ncSzrKjhcjwXqsGlBsF0qV
FYsFkIgw9MpHfM9rFyIwcZUH+hL0ZKBmlvsHNQCNItz2TgsXizHGWke+GMSuyOI0
bg2oCFW2PmL/Os4VwobZCtw/26OcV7Lvvsye9VyM/3ZOAGC9tjgcFptfEVGW/YDW
ehciVgG9g9lFj16m4q22gx8two758Byqel6ne+qJjyIgGCch0bz5GmPZKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX8yyE0exwo7zS/4X17AEYb9R7SMB8GA1UdIwQY
MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt
YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex
LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/VIOQl1
ExsHuNw1h8OQCsQDzIYbful1zhJO2hV8oKztkULojobX/8Y+IaISXEqo9LUJe4E0
eKV8jb5CUm/5Wi+lF/VX8QTjTDb8HGYfX9fLtTVykJ4auigS6gHqZs+klfwyvXSv
18BwLgqYkP/wTgKYf5D71WL7TEm2E6F2OPXkedYrUAogMDqyXIxS4OQCQ2We9yE8
u90waHv+hJwd5hyNGsFEp563/X+7JvK2gGN+y06gqhFyzxq3Jw91Fp8FEZf1ml89
7NuSpLP6dBZ9xW6F+102mJpFEr7z3m3hhROc1XNDXPi/cT4nVbdr5fFq2fki+ZiU
TzibtoplajwMhg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:18:51 2025 by rpki-client