Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: IhS4AK/v31+0VsUtk6deX7OGSgXwIxA1DNNlf39qg9w=
Subject key identifier: 67:EE:93:E8:D0:84:DF:58:1F:6F:69:30:3D:48:16:6F:EE:A1:0C:C5
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 01965C837EA91B7E390574E4AA5DEC491231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 07
Signing time: Tue 22 Apr 2025 08:00:43 +0000
Manifest this update: Tue 22 Apr 2025 08:00:43 +0000
Manifest next update: Wed 23 Apr 2025 08:00:43 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: ZeDaqzsS19cTEC89YU8lDQp8cuxMUEjq2F3wBYd6qaQ=)
2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:7e:a9:1b:7e:39:05:74:e4:aa:5d:ec:49:12:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Apr 22 08:00:43 2025 GMT
Not After : Apr 23 08:00:43 2025 GMT
Subject: CN=67ee93e8d084df581f6f69303d48166feea10cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:a8:ab:95:bb:ea:1b:69:e0:de:a4:a7:ce:
87:b1:f3:8c:7e:88:c9:a3:19:85:4b:b4:54:44:d8:
61:e2:9b:c2:e3:78:15:4b:7c:e4:40:6c:75:49:19:
e3:1c:00:5e:85:52:9e:38:4b:b8:08:e4:d5:04:e0:
65:3d:49:8c:9d:2a:82:1d:7d:fc:54:35:7c:60:b9:
51:3c:f1:33:45:dd:71:e3:a9:c5:d3:d1:42:67:1e:
8a:99:41:75:07:c4:de:5c:09:91:0f:77:e3:5f:3b:
53:a7:56:d6:9c:e0:95:32:a7:76:1b:14:e4:df:78:
3c:4f:7f:f0:48:c2:12:f6:6d:ad:32:7e:22:43:05:
61:cf:23:c6:c7:a7:98:63:26:6d:a7:fb:08:73:9f:
75:8b:53:1e:72:d2:d0:77:bd:fb:67:e5:5a:a3:77:
95:e8:1c:eb:ae:3b:8e:18:b6:53:30:16:f7:66:b4:
2c:18:f6:bb:a2:65:7e:b5:23:16:09:19:90:4e:d4:
53:d1:d1:be:b0:77:0a:e1:aa:65:76:fa:bf:16:87:
74:1d:7d:0f:c7:eb:c9:4c:e3:5d:9c:0c:ea:f4:56:
81:75:67:30:6b:12:22:8b:72:8e:98:d7:67:7b:bc:
38:2e:cf:7e:12:e2:0f:e4:0f:58:9c:0e:08:98:dd:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:93:E8:D0:84:DF:58:1F:6F:69:30:3D:48:16:6F:EE:A1:0C:C5
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:1f:1e:93:3d:a4:24:33:99:98:9b:2b:cc:7f:26:9c:d4:
8e:be:02:01:a2:f4:c7:fa:8c:73:f3:81:09:bb:56:41:c5:4b:
cb:22:93:bf:15:3c:e9:10:f2:8d:52:eb:58:1b:cc:96:76:c8:
80:73:2c:1b:9a:6f:c1:17:ee:9e:64:99:3a:5c:60:d2:e2:40:
19:4d:03:bb:0f:65:e3:a1:51:ff:34:b2:81:8b:04:fd:04:bd:
6b:f6:1a:9d:ec:e4:93:f6:ec:2e:c4:e9:77:84:4a:66:51:6d:
a3:82:ee:82:31:40:ed:b3:3f:47:04:08:9a:cb:af:0c:7b:0c:
b3:92:a1:62:80:d3:87:de:27:32:a4:0f:0a:09:84:f5:93:e1:
52:4f:5d:59:55:a0:e6:55:36:52:ea:6c:0b:60:53:86:5f:0e:
35:16:b7:fe:22:5f:1c:cd:05:55:4d:3b:0a:88:03:ea:8e:68:
0f:e6:81:dc:50:0a:6a:f8:55:2f:76:ec:46:6f:a3:08:d5:9e:
7d:11:27:c5:dd:66:e1:67:6e:c7:36:15:27:63:f2:cd:65:27:
1a:cc:d0:89:47:83:50:b2:b0:34:6e:41:20:85:cd:4d:6d:aa:
44:69:7a:1a:23:e4:67:03:02:58:7d:07:65:5b:48:eb:aa:69:
73:92:89:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcg36pG345BXTkql3sSRIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5
MDc0NTYwHhcNMjUwNDIyMDgwMDQzWhcNMjUwNDIzMDgwMDQzWjAzMTEwLwYDVQQD
Eyg2N2VlOTNlOGQwODRkZjU4MWY2ZjY5MzAzZDQ4MTY2ZmVlYTEwY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu72oq5W76htp4N6kp86HsfOMfojJ
oxmFS7RURNhh4pvC43gVS3zkQGx1SRnjHABehVKeOEu4COTVBOBlPUmMnSqCHX38
VDV8YLlRPPEzRd1x46nF09FCZx6KmUF1B8TeXAmRD3fjXztTp1bWnOCVMqd2GxTk
33g8T3/wSMIS9m2tMn4iQwVhzyPGx6eYYyZtp/sIc591i1MectLQd737Z+Vao3eV
6BzrrjuOGLZTMBb3ZrQsGPa7omV+tSMWCRmQTtRT0dG+sHcK4apldvq/Fod0HX0P
x+vJTONdnAzq9FaBdWcwaxIii3KOmNdne7w4Ls9+EuIP5A9YnA4ImN0WdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfuk+jQhN9YH29pMD1IFm/uoQzFMB8GA1UdIwQY
MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt
Mzg1N2VjNWNiMWRiLzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi
LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtIfHpM9
pCQzmZibK8x/JpzUjr4CAaL0x/qMc/OBCbtWQcVLyyKTvxU86RDyjVLrWBvMlnbI
gHMsG5pvwRfunmSZOlxg0uJAGU0Duw9l46FR/zSygYsE/QS9a/Yanezkk/bsLsTp
d4RKZlFto4LugjFA7bM/RwQImsuvDHsMs5KhYoDTh94nMqQPCgmE9ZPhUk9dWVWg
5lU2UupsC2BThl8ONRa3/iJfHM0FVU07CogD6o5oD+aB3FAKavhVL3bsRm+jCNWe
fREnxd1m4WduxzYVJ2PyzWUnGszQiUeDULKwNG5BIIXNTW2qRGl6GiPkZwMCWH0H
ZVtI66ppc5KJow==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:48 2025 by rpki-client