Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: Bf0YoN/skNDqceVsK0lQot/ZDZBzZ4FHo/AdTNE4mPY=
Subject key identifier: 24:C4:98:7A:A2:F2:36:D4:01:27:4D:2B:4E:59:59:A3:A0:29:99:22
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 019655007DEFB2E54101C7A5A704347ADEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 0FD9
Signing time: Sun 20 Apr 2025 21:00:17 +0000
Manifest this update: Sun 20 Apr 2025 21:00:17 +0000
Manifest next update: Mon 21 Apr 2025 21:00:17 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: ismG2SzoBBLhIKE2CSzOhtiRiXste8UKfsa/SVh5Pv8=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:7d:ef:b2:e5:41:01:c7:a5:a7:04:34:7a:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Apr 20 21:00:17 2025 GMT
Not After : Apr 21 21:00:17 2025 GMT
Subject: CN=24c4987aa2f236d401274d2b4e5959a3a0299922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:2c:31:94:e7:b6:8f:6e:cd:e3:df:9c:16:
1d:51:c9:70:e7:56:21:fc:f5:ac:28:0e:40:e0:de:
d7:f8:0f:49:04:5d:61:08:94:2f:3f:b4:fc:92:0d:
5f:34:6e:0c:e7:c7:7d:3c:f8:ab:57:e8:f0:ec:0e:
ff:7a:ba:be:e9:7d:e5:71:7a:1e:9f:d9:93:fd:e7:
82:99:3c:1d:ec:3e:69:28:06:54:59:c5:69:0b:57:
44:72:00:ba:a4:25:c6:85:30:18:cc:69:1a:89:78:
50:18:20:b1:8c:53:eb:fc:6b:e2:78:76:df:ea:cf:
0b:f9:07:0a:af:d0:5f:3d:ff:b7:30:80:2f:fa:1c:
0e:24:3c:a5:ec:d8:87:c6:fd:f3:45:11:cb:2f:de:
d5:22:1c:a7:05:6f:39:d1:21:27:36:39:d2:1e:e2:
da:e0:47:c4:24:1c:98:6f:bf:fe:c0:88:ad:d9:8d:
bd:e0:f7:12:e9:e9:02:f8:d0:07:e5:95:f4:ec:39:
8e:9b:ef:f3:b5:cc:7b:3c:26:5f:2d:19:8b:49:41:
39:3f:dd:89:3e:7f:da:be:84:b6:36:ef:24:c0:9f:
30:b0:f4:4c:68:46:f6:8c:db:08:c7:72:4e:e7:ac:
4f:d1:f9:19:c8:c8:4e:d0:9e:d4:ec:cc:aa:a2:49:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:98:7A:A2:F2:36:D4:01:27:4D:2B:4E:59:59:A3:A0:29:99:22
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b4:ed:5d:89:c6:ec:55:bc:08:f5:b8:4e:c7:4a:b4:cd:0b:
44:87:0a:dc:46:a3:5b:ff:08:64:39:79:db:47:2e:21:ce:e7:
16:d9:c3:fb:98:a5:c6:cb:96:be:e1:83:43:6a:04:93:96:aa:
e5:f9:0b:1e:40:da:18:ae:82:43:74:26:46:6c:98:12:cb:1c:
27:14:93:72:6f:4d:e0:e1:0c:76:67:78:67:87:32:e7:75:97:
e6:ac:12:d7:4e:b2:05:37:9e:ed:e9:48:74:da:6a:51:ff:a4:
e5:a4:45:35:02:bc:74:fc:4b:2b:92:d5:fa:6f:53:f6:f1:27:
98:79:94:f7:7c:95:78:09:a9:af:60:a6:d7:0b:06:61:7f:1d:
2d:27:32:09:33:f5:ca:11:b1:70:7c:f7:ca:22:2e:14:0d:c4:
9b:31:87:d8:59:f1:2d:88:e2:03:e7:d6:3c:20:62:b9:63:3e:
5e:2e:a3:f2:9a:66:54:88:cf:ca:3a:8c:47:a9:87:22:29:c7:
c8:36:14:e5:94:ff:03:1f:f8:fc:1f:80:87:fc:55:78:43:68:
c6:dd:f7:42:bd:79:ab:df:ca:fd:9f:14:4a:b9:9c:ce:0b:bf:
ab:2c:94:0d:f9:12:f8:96:49:18:9d:a4:25:08:31:a8:53:e1:
0a:81:d1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAH3vsuVBAcelpwQ0et6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2YwM2JmMTQ1MWVlZTYyZWE3MjQwNWZhOGI2NGFiZmFl
M2M0ZTkwHhcNMjUwNDIwMjEwMDE3WhcNMjUwNDIxMjEwMDE3WjAzMTEwLwYDVQQD
EygyNGM0OTg3YWEyZjIzNmQ0MDEyNzRkMmI0ZTU5NTlhM2EwMjk5OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK4sMZTnto9uzePfnBYdUclw51Yh
/PWsKA5A4N7X+A9JBF1hCJQvP7T8kg1fNG4M58d9PPirV+jw7A7/erq+6X3lcXoe
n9mT/eeCmTwd7D5pKAZUWcVpC1dEcgC6pCXGhTAYzGkaiXhQGCCxjFPr/GvieHbf
6s8L+QcKr9BfPf+3MIAv+hwOJDyl7NiHxv3zRRHLL97VIhynBW850SEnNjnSHuLa
4EfEJByYb7/+wIit2Y294PcS6ekC+NAH5ZX07DmOm+/ztcx7PCZfLRmLSUE5P92J
Pn/avoS2Nu8kwJ8wsPRMaEb2jNsIx3JO56xP0fkZyMhO0J7U7MyqoklaIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTEmHqi8jbUASdNK05ZWaOgKZkiMB8GA1UdIwQY
MBaAFBE/A78UUe7mLqckBfqLZKv648TpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQt
ZGViZTU3NDdiMjkzLzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQtZGViZTU3NDdiMjkz
LzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLTtXYnG
7FW8CPW4TsdKtM0LRIcK3EajW/8IZDl520cuIc7nFtnD+5ilxsuWvuGDQ2oEk5aq
5fkLHkDaGK6CQ3QmRmyYEsscJxSTcm9N4OEMdmd4Z4cy53WX5qwS106yBTee7elI
dNpqUf+k5aRFNQK8dPxLK5LV+m9T9vEnmHmU93yVeAmpr2Cm1wsGYX8dLScyCTP1
yhGxcHz3yiIuFA3EmzGH2FnxLYjiA+fWPCBiuWM+Xi6j8ppmVIjPyjqMR6mHIinH
yDYU5ZT/Ax/4/B+Ah/xVeENoxt33Qr15q9/K/Z8USrmczgu/qyyUDfkS+JZJGJ2k
JQgxqFPhCoHRKw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:34 2025 by rpki-client