Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: kJpAv8PDhPqLVvqU3KEJsWnz0YJlFAHEgaVPvShZZXs=
Subject key identifier: 7C:D3:5B:68:24:8B:68:2D:01:83:5E:42:2B:98:01:F7:CD:33:B3:AC
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 01962181F747D2A0FAF5BEA0F9D25EAEFBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 0DD9
Signing time: Thu 10 Apr 2025 21:01:27 +0000
Manifest this update: Thu 10 Apr 2025 21:01:27 +0000
Manifest next update: Fri 11 Apr 2025 21:01:27 +0000
Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: xLtqDXToDVWdte+VYeTE0ta1SKwHh+B8fhzXRT38hB4=)
3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:81:f7:47:d2:a0:fa:f5:be:a0:f9:d2:5e:ae:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Apr 10 21:01:27 2025 GMT
Not After : Apr 11 21:01:27 2025 GMT
Subject: CN=7cd35b68248b682d01835e422b9801f7cd33b3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:68:86:e4:d3:b0:b5:6b:05:4b:17:2a:d8:
6c:d1:d6:ed:85:b0:23:4b:fc:b5:44:57:59:d1:26:
0d:97:3f:24:39:50:f2:0b:eb:c5:8f:8d:ff:06:3f:
20:e6:bb:89:50:59:22:6f:8c:ca:37:13:1b:91:b9:
cd:a9:4d:5a:ec:84:ea:70:ab:bd:f2:d4:34:bf:cb:
c6:6e:43:4f:d0:be:28:80:6a:1a:f2:20:66:dd:6a:
8b:b5:cb:15:1b:77:ca:14:56:26:a9:93:d8:ad:b0:
be:42:74:04:c0:b7:80:7c:a2:dc:c4:6c:31:48:1c:
af:30:6e:e0:4b:4e:8d:21:07:95:a1:45:0a:eb:e7:
7c:a5:dd:25:2e:d3:e1:d7:7f:a2:0d:cd:85:35:a9:
b8:51:e9:75:0b:99:ae:2e:be:1c:ab:66:48:67:d3:
5c:3d:04:a1:70:6b:de:9a:7d:c6:19:0b:c7:f0:25:
e4:ae:b0:a5:e6:91:83:a9:03:97:55:26:03:78:6e:
d2:b6:3c:a6:c0:c2:ab:05:62:bb:e2:46:f8:ac:31:
19:1b:fa:92:9b:37:5e:5a:5f:6d:11:e3:bf:8e:83:
17:3d:7b:e6:80:c3:af:94:8f:f0:f1:55:1e:ae:86:
4e:44:ca:33:3d:df:57:b7:ab:6b:a5:e5:16:f2:03:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D3:5B:68:24:8B:68:2D:01:83:5E:42:2B:98:01:F7:CD:33:B3:AC
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5e:ea:52:ce:23:fb:00:24:88:86:69:5f:bb:c8:60:c7:62:
ee:a4:82:9b:7b:72:ee:69:c5:fa:55:48:88:f0:aa:63:b7:4e:
e5:21:58:ef:f0:e6:3f:f4:3f:90:19:3f:56:62:5b:5a:c7:e9:
8f:ac:0a:8f:2d:a0:22:62:28:8e:17:42:6e:04:bf:42:a9:74:
1a:68:08:9e:db:83:74:8a:cf:68:01:40:11:b4:f1:b7:45:c3:
4e:3b:e5:52:64:20:14:92:3e:9c:67:ae:d3:51:07:ae:52:f8:
f3:2f:08:0d:30:e4:5b:24:3d:2f:3d:2c:6a:bd:f9:f1:ce:fc:
17:1d:a2:c0:e8:fe:fb:5b:05:7e:3a:55:21:24:14:42:ba:12:
8b:d1:41:b2:b9:80:76:92:cd:25:b9:f4:4c:10:f7:0d:70:62:
5b:05:d4:1b:4f:b3:09:ed:e5:3e:1d:a9:d0:dd:5c:01:b4:3e:
5d:3b:26:49:e0:63:ab:81:4c:19:ba:ee:2d:32:c3:51:05:db:
be:48:a2:37:9c:a6:40:f6:44:41:37:b7:57:47:b3:a5:30:48:
06:12:2a:d4:40:5c:8a:a4:20:80:13:ab:9e:d8:08:42:15:d8:
3d:07:26:64:34:49:eb:b0:f8:43:4a:8c:e8:9b:80:ef:21:cf:
8c:c9:15:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYhgfdH0qD69b6g+dJervvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh
OWM4ODEwHhcNMjUwNDEwMjEwMTI3WhcNMjUwNDExMjEwMTI3WjAzMTEwLwYDVQQD
Eyg3Y2QzNWI2ODI0OGI2ODJkMDE4MzVlNDIyYjk4MDFmN2NkMzNiM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6JohuTTsLVrBUsXKths0dbthbAj
S/y1RFdZ0SYNlz8kOVDyC+vFj43/Bj8g5ruJUFkib4zKNxMbkbnNqU1a7ITqcKu9
8tQ0v8vGbkNP0L4ogGoa8iBm3WqLtcsVG3fKFFYmqZPYrbC+QnQEwLeAfKLcxGwx
SByvMG7gS06NIQeVoUUK6+d8pd0lLtPh13+iDc2FNam4Uel1C5muLr4cq2ZIZ9Nc
PQShcGvemn3GGQvH8CXkrrCl5pGDqQOXVSYDeG7StjymwMKrBWK74kb4rDEZG/qS
mzdeWl9tEeO/joMXPXvmgMOvlI/w8VUeroZORMozPd9Xt6trpeUW8gOPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzTW2gki2gtAYNeQiuYAffNM7OsMB8GA1UdIwQY
MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt
YTg1ODU4NDliZTE0LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0
LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATV7qUs4j
+wAkiIZpX7vIYMdi7qSCm3ty7mnF+lVIiPCqY7dO5SFY7/DmP/Q/kBk/VmJbWsfp
j6wKjy2gImIojhdCbgS/Qql0GmgIntuDdIrPaAFAEbTxt0XDTjvlUmQgFJI+nGeu
01EHrlL48y8IDTDkWyQ9Lz0sar358c78Fx2iwOj++1sFfjpVISQUQroSi9FBsrmA
dpLNJbn0TBD3DXBiWwXUG0+zCe3lPh2p0N1cAbQ+XTsmSeBjq4FMGbruLTLDUQXb
vkiiN5ymQPZEQTe3V0ezpTBIBhIq1EBciqQggBOrntgIQhXYPQcmZDRJ67D4Q0qM
6JuA7yHPjMkV7g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:58:40 2025 by rpki-client