Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: PhDB5dEYsIZYQmVO6lnMb5Sz66/y4HYdGrNqWoan7Fw=
Subject key identifier: C9:D2:D6:9F:EA:6E:6A:72:21:B0:30:33:A6:1D:34:34:D9:00:E2:5F
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01964D104B616A6C71140206D33908AC294E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0C32
Signing time: Sat 19 Apr 2025 08:00:35 +0000
Manifest this update: Sat 19 Apr 2025 08:00:35 +0000
Manifest next update: Sun 20 Apr 2025 08:00:35 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: jVmQXdpsIYq2MY6CKRSeC7hnU+9DNUBjBUOCBiTF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:4b:61:6a:6c:71:14:02:06:d3:39:08:ac:29:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Apr 19 08:00:35 2025 GMT
Not After : Apr 20 08:00:35 2025 GMT
Subject: CN=c9d2d69fea6e6a7221b03033a61d3434d900e25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:e5:43:c1:0d:11:00:b8:e3:73:f3:e3:04:
37:2b:03:ad:ca:1f:42:f6:cf:53:c2:46:8a:8d:3c:
0d:64:f8:71:0d:33:54:dd:2c:b7:2f:aa:3b:25:9e:
b7:86:01:fd:13:34:95:69:96:c2:a6:55:58:28:22:
94:a8:a5:1e:df:9c:fb:57:f5:fc:05:72:99:6f:00:
c2:0b:db:77:05:b3:86:82:27:90:dd:02:fe:ad:0e:
85:38:4f:ad:10:3d:d4:1e:4d:34:48:3b:52:85:55:
49:0a:8e:98:45:66:9d:33:eb:7c:b4:77:55:61:53:
4d:5c:e9:f4:7f:53:70:50:22:d4:59:c7:10:ad:d7:
a3:7f:2b:17:4d:20:63:d3:ee:f1:71:2e:92:bb:53:
dd:85:f2:b7:5f:f6:83:59:6d:70:10:f1:f0:ef:1f:
30:c2:bf:07:46:94:6f:2f:c4:1d:c6:48:e3:a1:19:
db:e5:88:26:a8:62:9f:58:04:53:33:44:64:8d:56:
0b:ef:f7:0b:2b:7f:47:6b:40:af:36:b0:c4:d3:60:
0f:cc:3b:d3:68:04:ff:ef:f4:b5:35:23:1d:70:4a:
e3:c2:73:68:de:89:14:b5:b3:4f:e9:ab:97:89:e8:
55:39:a1:02:d6:01:ed:26:25:b4:d1:64:43:54:54:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D2:D6:9F:EA:6E:6A:72:21:B0:30:33:A6:1D:34:34:D9:00:E2:5F
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:47:a7:e5:57:8d:37:8f:41:e5:22:d6:4b:3e:55:19:68:25:
ae:84:bd:aa:db:01:2c:37:a6:4e:51:6c:8f:11:a3:d7:19:0f:
8e:4d:78:1a:06:f7:e0:d5:40:18:d0:84:fb:31:d1:01:7e:13:
e5:ad:20:0b:94:00:85:da:80:e0:26:5c:c4:e6:61:3b:f1:4a:
94:77:e9:3c:c8:b6:06:07:46:81:24:5c:cf:42:69:90:2e:c0:
f5:76:d2:c9:8c:00:33:6d:22:c0:dc:51:18:1a:42:c4:5b:2b:
43:0c:2f:3f:00:d1:9b:ec:42:95:dc:d0:32:9b:02:a3:35:b6:
39:f2:9c:fe:d7:16:60:09:37:79:10:df:42:f1:d0:71:c9:6d:
b1:25:6e:cb:c9:39:b2:73:94:ef:b0:c1:be:e4:55:78:bf:72:
79:4e:46:58:50:82:b2:16:b3:6d:d0:1a:33:eb:56:5b:e2:f4:
cf:e0:fa:15:aa:32:b8:d4:a5:a9:0d:49:86:17:3f:24:be:f7:
c7:f1:9e:18:35:a6:c7:f1:c4:be:99:08:ea:ad:b7:39:93:b2:
c2:a3:a0:9e:5b:71:c6:1e:5d:ba:64:75:89:26:06:73:9e:5d:
03:a5:b1:d6:96:8c:32:14:c8:e6:da:17:15:43:7f:b5:bf:bf:
7c:11:fe:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNEEthamxxFAIG0zkIrClOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh
YzA4NTkwHhcNMjUwNDE5MDgwMDM1WhcNMjUwNDIwMDgwMDM1WjAzMTEwLwYDVQQD
EyhjOWQyZDY5ZmVhNmU2YTcyMjFiMDMwMzNhNjFkMzQzNGQ5MDBlMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbnlQ8ENEQC443Pz4wQ3KwOtyh9C
9s9TwkaKjTwNZPhxDTNU3Sy3L6o7JZ63hgH9EzSVaZbCplVYKCKUqKUe35z7V/X8
BXKZbwDCC9t3BbOGgieQ3QL+rQ6FOE+tED3UHk00SDtShVVJCo6YRWadM+t8tHdV
YVNNXOn0f1NwUCLUWccQrdejfysXTSBj0+7xcS6Su1PdhfK3X/aDWW1wEPHw7x8w
wr8HRpRvL8QdxkjjoRnb5YgmqGKfWARTM0RkjVYL7/cLK39Ha0CvNrDE02APzDvT
aAT/7/S1NSMdcErjwnNo3okUtbNP6auXiehVOaEC1gHtJiW00WRDVFQNFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnS1p/qbmpyIbAwM6YdNDTZAOJfMB8GA1UdIwQY
MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt
ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl
LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUen5VeN
N49B5SLWSz5VGWglroS9qtsBLDemTlFsjxGj1xkPjk14Ggb34NVAGNCE+zHRAX4T
5a0gC5QAhdqA4CZcxOZhO/FKlHfpPMi2BgdGgSRcz0JpkC7A9XbSyYwAM20iwNxR
GBpCxFsrQwwvPwDRm+xCldzQMpsCozW2OfKc/tcWYAk3eRDfQvHQccltsSVuy8k5
snOU77DBvuRVeL9yeU5GWFCCshazbdAaM+tWW+L0z+D6FaoyuNSlqQ1Jhhc/JL73
x/GeGDWmx/HEvpkI6q23OZOywqOgnltxxh5dumR1iSYGc55dA6Wx1paMMhTI5toX
FUN/tb+/fBH+OA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:28 2025 by rpki-client