Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: x1qvaNWnNsUNt4I9MmWv2oXVqlAavUP6IHoRyrr/Nro=
Subject key identifier: 34:0F:FA:9B:FF:E1:FC:DB:1D:00:83:13:D6:60:69:88:F3:60:B2:F4
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 01965801F8F25A21B52A48FEFA5D89509907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: DA
Signing time: Mon 21 Apr 2025 11:00:46 +0000
Manifest this update: Mon 21 Apr 2025 11:00:46 +0000
Manifest next update: Tue 22 Apr 2025 11:00:46 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: mfEv4nXMiEjBGhFx0SDrmTXqlQhLE/pQAdUFyMtRr4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:f8:f2:5a:21:b5:2a:48:fe:fa:5d:89:50:99:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Apr 21 11:00:46 2025 GMT
Not After : Apr 22 11:00:46 2025 GMT
Subject: CN=340ffa9bffe1fcdb1d008313d6606988f360b2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:9b:9c:0c:fd:b6:0e:77:6b:8f:de:0c:76:
54:f4:6c:ee:4e:63:b5:8e:4d:c2:5e:77:01:91:28:
13:47:d7:d5:27:8e:ca:4e:c1:e8:17:e5:c1:ce:99:
8b:a4:db:5d:49:e2:50:fe:c5:38:ca:91:c2:c3:0a:
2b:7a:4f:54:59:51:ad:aa:a1:d6:a1:bd:a1:e5:33:
20:dd:8b:2d:1f:8a:41:94:5a:1a:90:07:79:04:f1:
30:bc:bf:ef:1f:81:93:f7:75:0f:3a:d4:64:60:22:
86:e2:74:10:76:95:99:a8:a1:d2:81:a8:96:f5:52:
a1:b5:85:54:b3:0f:01:2e:9b:3c:99:14:9c:f6:27:
1b:97:d9:20:ec:e0:e7:a3:2b:31:89:ca:80:20:d5:
48:4d:23:57:95:8b:c9:fb:b3:31:cd:23:97:8e:d9:
d9:3e:14:bc:a9:5f:03:02:1d:9e:b1:1c:c3:f1:1c:
e0:13:51:ec:74:6c:71:4b:3a:4b:6b:05:a2:38:2a:
0f:c6:5c:a7:a7:9e:cb:4e:78:5a:a9:a6:76:ce:d8:
2d:91:41:b0:ff:d1:2f:15:01:f7:9d:56:5d:a6:c1:
30:21:ca:a0:92:49:83:76:13:91:95:a5:08:29:13:
4e:8a:18:b7:87:bd:26:da:70:61:23:7b:a1:5f:6e:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:FA:9B:FF:E1:FC:DB:1D:00:83:13:D6:60:69:88:F3:60:B2:F4
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:96:fd:f0:2e:aa:6c:e6:a7:28:98:3b:52:76:34:65:4e:83:
e4:2d:e0:de:de:f7:ef:a0:a3:b2:10:18:2f:01:5c:7c:15:73:
af:23:1b:29:17:61:e4:98:53:dd:21:ca:a8:ee:28:ad:f3:6c:
5a:55:aa:7d:c8:d2:fa:8d:bf:07:37:6e:02:18:06:f0:29:a4:
dc:3b:6c:2f:05:1a:53:ab:24:f5:61:51:e5:23:5d:e2:07:4f:
1a:fb:eb:00:85:db:77:f8:23:89:e4:d4:47:4e:2b:20:1e:bf:
7b:35:53:57:8d:75:54:47:bb:28:60:73:f7:ef:eb:a0:a0:f7:
42:48:35:4c:68:51:8c:65:5f:7b:df:dd:9b:c8:57:06:c6:ad:
21:fd:f0:29:be:2b:00:e9:18:2a:bb:e0:5d:db:ee:59:ad:9d:
e3:15:9f:15:ad:75:1e:fd:6c:c9:79:60:cc:95:1b:97:3c:99:
bb:86:cf:8f:62:3f:e4:ef:5f:56:75:1b:cb:12:b5:8a:90:d5:
7a:41:0a:40:5d:2b:d1:a6:85:9e:6c:be:29:48:fd:23:dc:eb:
1f:4d:04:c1:08:b1:f2:cc:ed:b5:36:f7:41:e8:22:df:ca:9b:
5d:99:03:c9:8b:96:11:f0:1b:0b:9e:1f:e1:26:68:f8:15:bb:
fb:32:c2:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAfjyWiG1Kkj++l2JUJkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YjE5NWI2NTEyZWM4Nzg3ZDk5YTFiMmU0ZWJkODA4ODRm
OTgwYjIwHhcNMjUwNDIxMTEwMDQ2WhcNMjUwNDIyMTEwMDQ2WjAzMTEwLwYDVQQD
EygzNDBmZmE5YmZmZTFmY2RiMWQwMDgzMTNkNjYwNjk4OGYzNjBiMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIObnAz9tg53a4/eDHZU9GzuTmO1
jk3CXncBkSgTR9fVJ47KTsHoF+XBzpmLpNtdSeJQ/sU4ypHCwworek9UWVGtqqHW
ob2h5TMg3YstH4pBlFoakAd5BPEwvL/vH4GT93UPOtRkYCKG4nQQdpWZqKHSgaiW
9VKhtYVUsw8BLps8mRSc9icbl9kg7ODnoysxicqAINVITSNXlYvJ+7MxzSOXjtnZ
PhS8qV8DAh2esRzD8RzgE1HsdGxxSzpLawWiOCoPxlynp57LTnhaqaZ2ztgtkUGw
/9EvFQH3nVZdpsEwIcqgkkmDdhORlaUIKRNOihi3h70m2nBhI3uhX24b7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQP+pv/4fzbHQCDE9ZgaYjzYLL0MB8GA1UdIwQY
MBaAFLexlbZRLsh4fZmhsuTr2AiE+YCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mY2ZkMjctMTRjOC00ODQ0LTlmZmYt
YjM4ODExMGEzMDc4LzEvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9mY2ZkMjctMTRjOC00ODQ0LTlmZmYtYjM4ODExMGEzMDc4
LzEvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJb98C6q
bOanKJg7UnY0ZU6D5C3g3t7376CjshAYLwFcfBVzryMbKRdh5JhT3SHKqO4orfNs
WlWqfcjS+o2/BzduAhgG8Cmk3DtsLwUaU6sk9WFR5SNd4gdPGvvrAIXbd/gjieTU
R04rIB6/ezVTV411VEe7KGBz9+/roKD3Qkg1TGhRjGVfe9/dm8hXBsatIf3wKb4r
AOkYKrvgXdvuWa2d4xWfFa11Hv1syXlgzJUblzyZu4bPj2I/5O9fVnUbyxK1ipDV
ekEKQF0r0aaFnmy+KUj9I9zrH00EwQix8szttTb3Qegi38qbXZkDyYuWEfAbC54f
4SZo+BW7+zLCNg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:27 2025 by rpki-client