Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: //i2ZfU/Win5+EhWDE/zF6oXFI4UbV/r4GysbrI+3j8=
Subject key identifier: 82:9D:56:A0:F0:C2:05:7D:37:67:91:A6:8D:D6:B8:42:57:AD:D4:59
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 01965801C9037D83C184BCCBD57A4972E5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 1240
Signing time: Mon 21 Apr 2025 11:00:34 +0000
Manifest this update: Mon 21 Apr 2025 11:00:34 +0000
Manifest next update: Tue 22 Apr 2025 11:00:34 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: OOlzscp1ggrFr47LZwObhdrLt7ZakagnNqTKIZoKf5w=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:c9:03:7d:83:c1:84:bc:cb:d5:7a:49:72:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Apr 21 11:00:34 2025 GMT
Not After : Apr 22 11:00:34 2025 GMT
Subject: CN=829d56a0f0c2057d376791a68dd6b84257add459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:fd:45:bf:f9:07:6f:12:38:12:84:8c:fe:
05:85:74:13:87:91:10:55:b4:7a:ea:05:4b:14:91:
a6:9b:69:f9:42:0e:4a:78:43:f7:26:83:9c:82:11:
16:e9:ae:b8:13:cd:8c:6a:96:de:26:d2:4f:f5:e6:
ef:32:d5:73:55:4f:57:42:0e:be:f0:9c:ce:b9:a1:
50:86:20:2e:29:9f:33:c2:17:57:2b:33:b8:a8:91:
25:d8:0f:68:ed:7f:0a:47:94:9d:e9:77:65:dc:61:
a0:87:f7:31:67:22:d4:81:e6:32:f0:e7:71:51:ba:
d3:dc:5f:a0:05:4b:a0:3d:63:ba:c1:f6:ec:3b:56:
6c:d2:2b:f7:8c:e6:ee:db:db:c2:a3:0a:84:3d:f8:
3e:2a:d6:45:4c:3d:d3:e0:86:fe:78:06:66:c4:50:
72:ad:ed:b5:dd:16:0d:ea:18:2e:c8:5b:ce:1b:47:
14:5c:f4:c9:c1:95:5b:4b:4a:2e:17:c6:6b:ee:21:
d6:8d:b8:09:f1:60:ef:43:25:99:91:e5:1b:db:4b:
1d:3f:d0:9f:cf:34:17:0d:71:db:85:27:c5:e7:a9:
7d:3b:aa:a8:4a:7c:e5:14:fa:53:76:c4:1c:b0:f6:
fd:93:0c:cb:41:fa:e9:49:ed:fa:77:49:ee:c0:ca:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:56:A0:F0:C2:05:7D:37:67:91:A6:8D:D6:B8:42:57:AD:D4:59
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:bc:3d:ba:b1:32:63:eb:98:e2:7f:95:bb:66:ab:f0:b3:
0e:92:5f:d8:5c:61:f3:57:a8:38:fc:47:e4:b6:bf:05:4b:d1:
65:a1:05:7b:d6:49:fd:19:a3:b3:07:a4:60:ca:41:02:98:d8:
f6:7d:df:9c:a8:56:c7:24:0a:3c:97:35:3d:80:f6:b7:c9:3e:
94:e5:43:4a:51:8f:d1:99:ab:85:ac:82:b7:70:62:e5:0c:b6:
32:ca:7f:95:ec:03:c4:a4:1e:04:05:59:6f:19:b9:91:8f:71:
b8:da:14:4d:58:68:39:09:ae:95:24:ab:4c:bc:ee:c4:85:11:
e4:a1:1b:b8:38:b8:49:50:4c:51:ec:1d:27:93:81:8f:d0:0f:
22:31:cd:21:61:0d:a3:df:6d:ed:dc:82:51:71:a9:b5:85:1b:
4a:42:6a:2a:a4:b8:f2:6d:78:d4:db:8b:6e:87:45:b7:26:d3:
f3:b1:8e:91:5d:a9:de:79:bd:72:2f:08:09:cc:07:70:a5:e7:
fd:2c:19:4a:74:35:0e:25:2c:7e:8d:74:dc:a5:b1:f9:b3:1b:
3d:37:c5:f3:9e:09:a4:91:93:9f:85:12:a3:16:1e:49:8e:76:
a0:c6:f2:ea:73:26:32:93:d7:bf:66:35:3d:24:bf:00:0d:70:
c4:e9:34:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAckDfYPBhLzL1XpJcuW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2FhYzcxZjE3ZWYwMzNjYjY1MzY3OTUzMzhmZGM3YmMw
ZjIyNjMwHhcNMjUwNDIxMTEwMDM0WhcNMjUwNDIyMTEwMDM0WjAzMTEwLwYDVQQD
Eyg4MjlkNTZhMGYwYzIwNTdkMzc2NzkxYTY4ZGQ2Yjg0MjU3YWRkNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncv9Rb/5B28SOBKEjP4FhXQTh5EQ
VbR66gVLFJGmm2n5Qg5KeEP3JoOcghEW6a64E82MapbeJtJP9ebvMtVzVU9XQg6+
8JzOuaFQhiAuKZ8zwhdXKzO4qJEl2A9o7X8KR5Sd6Xdl3GGgh/cxZyLUgeYy8Odx
UbrT3F+gBUugPWO6wfbsO1Zs0iv3jObu29vCowqEPfg+KtZFTD3T4Ib+eAZmxFBy
re213RYN6hguyFvOG0cUXPTJwZVbS0ouF8Zr7iHWjbgJ8WDvQyWZkeUb20sdP9Cf
zzQXDXHbhSfF56l9O6qoSnzlFPpTdsQcsPb9kwzLQfrpSe36d0nuwMr7owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKdVqDwwgV9N2eRpo3WuEJXrdRZMB8GA1UdIwQY
MBaAFHh6rHHxfvAzy2U2eVM4/ce8DyJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEt
ZDEyODY3YjQ2NzMzLzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEtZDEyODY3YjQ2NzMz
LzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5u8Pbqx
MmPrmOJ/lbtmq/CzDpJf2Fxh81eoOPxH5La/BUvRZaEFe9ZJ/RmjswekYMpBApjY
9n3fnKhWxyQKPJc1PYD2t8k+lOVDSlGP0ZmrhayCt3Bi5Qy2Msp/lewDxKQeBAVZ
bxm5kY9xuNoUTVhoOQmulSSrTLzuxIUR5KEbuDi4SVBMUewdJ5OBj9APIjHNIWEN
o99t7dyCUXGptYUbSkJqKqS48m141NuLbodFtybT87GOkV2p3nm9ci8ICcwHcKXn
/SwZSnQ1DiUsfo103KWx+bMbPTfF854JpJGTn4USoxYeSY52oMby6nMmMpPXv2Y1
PSS/AA1wxOk00w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:02:57 2025 by rpki-client