Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: rbiW2RGUlnAQ0zQVJCeP8dIEwxDDy2l0/+6u6nY3lxo=
Subject key identifier: EB:96:D1:69:02:63:0E:F3:DD:36:1E:34:85:31:8D:BF:C6:2D:D2:65
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 01965D280BE7B43B29336296E952D6ABCF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 09B5
Signing time: Tue 22 Apr 2025 11:00:27 +0000
Manifest this update: Tue 22 Apr 2025 11:00:27 +0000
Manifest next update: Wed 23 Apr 2025 11:00:27 +0000
Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: dsHBh9kQyhPP/vwUufVkVTAfrc4/2L3ruUI//vh488Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:0b:e7:b4:3b:29:33:62:96:e9:52:d6:ab:cf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Apr 22 11:00:27 2025 GMT
Not After : Apr 23 11:00:27 2025 GMT
Subject: CN=eb96d16902630ef3dd361e3485318dbfc62dd265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:f3:00:73:45:05:69:f9:eb:e9:aa:9a:43:
f8:c2:ff:7d:e3:a5:b6:c6:7d:5a:ab:44:a2:5f:33:
43:f4:21:69:c6:6a:43:3c:c3:9f:ad:20:4c:f4:7d:
53:b5:a9:62:9c:ca:bb:9f:78:ec:2d:c5:5c:00:ca:
21:3a:93:03:1c:b0:91:28:84:5b:fd:1c:0a:de:e7:
19:71:30:6b:11:33:ff:a4:c0:54:50:f5:48:3e:13:
27:2b:cd:50:8d:4b:fe:09:15:2e:f8:af:47:aa:f3:
9d:97:bd:06:f2:89:82:80:b8:ff:db:df:af:b0:51:
3e:d8:00:00:03:44:b3:fd:42:d1:c2:75:a5:b3:2a:
90:02:08:ae:a1:f6:9c:a8:d5:80:50:30:b0:22:94:
6a:45:c1:27:e6:1f:18:0c:c8:70:fa:14:9e:e9:a4:
eb:c0:57:f8:9e:e5:83:06:b0:0a:11:b2:92:24:ae:
82:9f:9f:93:c5:a5:93:23:57:a4:e8:1e:fd:1d:94:
98:47:00:d0:4f:30:c1:90:ac:bb:97:42:42:c9:ca:
7f:67:d7:a2:dc:a3:f6:33:52:83:3e:08:86:a2:7f:
54:94:44:3f:05:e3:fd:5f:e7:9e:94:23:89:72:a8:
72:e2:9a:b2:3d:fd:f1:61:df:54:12:97:23:da:c9:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:96:D1:69:02:63:0E:F3:DD:36:1E:34:85:31:8D:BF:C6:2D:D2:65
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a4:8e:0d:9f:cd:2d:3b:c8:53:7a:d2:b3:56:c3:b7:ba:13:
cc:70:e4:08:3a:00:d9:72:b6:1d:1c:5a:6c:b1:0b:58:7d:e4:
77:5a:2b:ef:23:8c:6f:f6:4e:55:3b:33:15:ea:7c:19:8c:b9:
bb:9b:95:e0:95:b5:23:da:13:7f:6f:c9:ec:9f:83:a4:bb:78:
98:24:c3:80:e8:f7:f8:d0:37:df:18:06:6e:38:67:48:34:44:
17:47:47:0d:4f:56:60:b0:0f:ba:ee:16:01:bc:a4:ec:d6:6d:
9d:fc:54:23:6b:e5:ab:7a:9a:5e:f6:48:e6:21:fd:80:18:ae:
56:40:a0:3e:2d:9e:14:a4:9b:ab:04:47:85:27:75:e0:80:d6:
78:77:2a:a3:d6:04:24:53:92:88:8d:b6:dd:a6:79:15:50:6f:
34:21:83:74:f2:4f:09:e0:56:89:86:c8:2d:fc:cc:ea:de:96:
d2:a0:b1:27:9d:06:a8:23:98:54:ee:17:ed:f4:0b:61:21:b4:
e0:d3:b6:ef:49:ad:0d:df:2a:17:ba:fe:e2:97:43:d2:06:84:
5c:8c:2b:7e:14:48:c1:b3:51:09:00:0f:21:97:52:7a:1f:5b:
40:bd:a1:f4:78:d6:ce:ab:1e:9c:21:18:ca:57:2d:70:be:69:
2d:e7:b7:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdKAvntDspM2KW6VLWq8+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0
MzVlY2UwHhcNMjUwNDIyMTEwMDI3WhcNMjUwNDIzMTEwMDI3WjAzMTEwLwYDVQQD
EyhlYjk2ZDE2OTAyNjMwZWYzZGQzNjFlMzQ4NTMxOGRiZmM2MmRkMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjzzAHNFBWn56+mqmkP4wv9946W2
xn1aq0SiXzND9CFpxmpDPMOfrSBM9H1TtalinMq7n3jsLcVcAMohOpMDHLCRKIRb
/RwK3ucZcTBrETP/pMBUUPVIPhMnK81QjUv+CRUu+K9HqvOdl70G8omCgLj/29+v
sFE+2AAAA0Sz/ULRwnWlsyqQAgiuofacqNWAUDCwIpRqRcEn5h8YDMhw+hSe6aTr
wFf4nuWDBrAKEbKSJK6Cn5+TxaWTI1ek6B79HZSYRwDQTzDBkKy7l0JCycp/Z9ei
3KP2M1KDPgiGon9UlEQ/BeP9X+eelCOJcqhy4pqyPf3xYd9UEpcj2snJwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuW0WkCYw7z3TYeNIUxjb/GLdJlMB8GA1UdIwQY
MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt
OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl
LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqSODZ/N
LTvIU3rSs1bDt7oTzHDkCDoA2XK2HRxabLELWH3kd1or7yOMb/ZOVTszFep8GYy5
u5uV4JW1I9oTf2/J7J+DpLt4mCTDgOj3+NA33xgGbjhnSDREF0dHDU9WYLAPuu4W
Abyk7NZtnfxUI2vlq3qaXvZI5iH9gBiuVkCgPi2eFKSbqwRHhSd14IDWeHcqo9YE
JFOSiI223aZ5FVBvNCGDdPJPCeBWiYbILfzM6t6W0qCxJ50GqCOYVO4X7fQLYSG0
4NO270mtDd8qF7r+4pdD0gaEXIwrfhRIwbNRCQAPIZdSeh9bQL2h9HjWzqsenCEY
ylctcL5pLee3Dw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:06:27 2025 by rpki-client