Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: IH9EWVzs3r61gpzoa/j9XErvpyvrTMIQzPxD+EwbbGo=
Subject key identifier: 99:5B:20:B0:76:59:DE:59:08:77:2E:92:0A:6B:01:A3:89:FF:CE:37
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 019656131E15186E10897E7F1C12539358FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 02:00:15 +0000
Manifest this update: Mon 21 Apr 2025 02:00:15 +0000
Manifest next update: Tue 22 Apr 2025 02:00:15 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: R87fmRR4nIoP11WOIOIjpvpwHv4iftrJ+b8Sr7V/ASo=)
2: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (hash: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=)
3: mGTK3wTvfhonNVwr6seWi2ASIP8.roa (hash: aYF3ywz/BlGpMX8QkbZOivZvZOPC3l60CNt4ow7w3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:1e:15:18:6e:10:89:7e:7f:1c:12:53:93:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Apr 21 02:00:15 2025 GMT
Not After : Apr 22 02:00:15 2025 GMT
Subject: CN=995b20b07659de5908772e920a6b01a389ffce37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:33:14:a4:84:d7:67:1f:39:82:51:fe:3b:
92:f2:0d:d9:9f:58:18:83:de:a3:6b:fb:3e:c3:be:
96:4f:0b:08:28:cc:06:61:c5:84:25:74:88:d7:cc:
c9:3a:e0:7f:6b:4d:2b:37:05:90:74:9e:a4:fc:41:
a3:48:18:94:f7:77:5c:76:03:20:c1:74:5e:70:1a:
af:82:19:eb:4b:2b:a2:bc:99:e5:83:75:6f:c4:42:
be:30:7b:4a:14:8d:61:ac:42:a1:e6:9d:e4:11:5a:
c8:33:6e:d3:e9:48:bb:ed:87:55:9b:8b:dc:7a:c9:
87:8d:9a:ff:f2:31:54:be:3f:cf:83:cb:dd:b1:2c:
9f:a3:d7:f2:07:ae:48:dd:fc:64:56:15:6c:f1:15:
2b:87:79:e4:28:6b:c3:52:ac:22:59:b9:69:0e:26:
5d:c5:a7:d8:2b:8d:d8:d0:11:e9:4a:4c:6e:cf:5e:
80:64:07:02:92:a2:df:4d:ab:b4:1a:59:fd:53:89:
44:fe:0b:d0:99:24:b0:7f:45:e6:ec:22:c0:45:2b:
17:dd:60:93:62:a4:37:67:0d:ac:3e:c6:8e:41:31:
30:dd:32:2f:f0:8c:be:e1:32:f9:9a:d5:11:f8:61:
e6:c9:1f:b0:f7:d4:df:56:d4:00:7a:8b:64:ce:06:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:20:B0:76:59:DE:59:08:77:2E:92:0A:6B:01:A3:89:FF:CE:37
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:e8:a5:60:73:b0:a9:14:31:40:ec:bb:c2:59:29:42:cc:
db:86:e1:8f:2c:ee:01:c0:b6:2a:46:40:fb:30:b0:ef:de:c2:
79:d2:3d:bc:4a:76:2c:e9:21:60:d9:8d:5f:95:a9:90:c1:a3:
fe:a9:2c:cc:00:74:0b:bc:ba:61:b9:41:e3:72:e9:6a:13:89:
a3:dc:d0:63:55:9c:83:74:d9:1b:24:33:f8:cc:ef:73:d4:e6:
74:9d:30:ad:95:51:80:81:1e:83:c9:5f:2f:6a:d5:9a:d7:b8:
84:b6:26:93:a7:30:e5:fc:e4:f4:2c:77:ef:86:8c:22:ca:33:
63:66:cc:ac:96:7a:cc:d4:64:53:11:17:c9:ba:6d:36:8c:1b:
f2:02:dd:9b:e1:04:23:c1:fd:be:57:17:8e:21:c9:fd:14:66:
10:70:c3:57:65:48:59:47:c7:cf:c3:65:b5:de:aa:8f:c2:36:
dd:0c:ec:ed:95:36:9e:4a:c6:b6:0d:6c:87:5a:dd:64:20:77:
52:09:20:46:30:51:c6:4d:e1:1e:38:79:03:e0:61:28:42:d8:
a4:6a:ed:2c:0c:51:0b:63:3a:0e:7b:3b:b2:18:e0:6d:47:95:
d6:52:c5:c2:8f:43:ad:8e:9b:1d:5f:f3:dd:c5:2a:56:bf:62:
a6:97:52:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWEx4VGG4QiX5/HBJTk1j+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTkwMmJkZmJkNzRjMzNlYTc2NDUzZDE0NWU3NmY2YWE4
NTdjNDEwHhcNMjUwNDIxMDIwMDE1WhcNMjUwNDIyMDIwMDE1WjAzMTEwLwYDVQQD
Eyg5OTViMjBiMDc2NTlkZTU5MDg3NzJlOTIwYTZiMDFhMzg5ZmZjZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4MzFKSE12cfOYJR/juS8g3Zn1gY
g96ja/s+w76WTwsIKMwGYcWEJXSI18zJOuB/a00rNwWQdJ6k/EGjSBiU93dcdgMg
wXRecBqvghnrSyuivJnlg3VvxEK+MHtKFI1hrEKh5p3kEVrIM27T6Ui77YdVm4vc
esmHjZr/8jFUvj/Pg8vdsSyfo9fyB65I3fxkVhVs8RUrh3nkKGvDUqwiWblpDiZd
xafYK43Y0BHpSkxuz16AZAcCkqLfTau0Gln9U4lE/gvQmSSwf0Xm7CLARSsX3WCT
YqQ3Zw2sPsaOQTEw3TIv8Iy+4TL5mtUR+GHmyR+w99TfVtQAeotkzgavuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlbILB2Wd5ZCHcukgprAaOJ/843MB8GA1UdIwQY
MBaAFO1ZAr3710wz6nZFPRRedvaqhXxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDIt
NTAzMzZmNWQzNDBlLzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDItNTAzMzZmNWQzNDBl
LzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoTopWBz
sKkUMUDsu8JZKULM24bhjyzuAcC2KkZA+zCw797CedI9vEp2LOkhYNmNX5WpkMGj
/qkszAB0C7y6YblB43LpahOJo9zQY1Wcg3TZGyQz+Mzvc9TmdJ0wrZVRgIEeg8lf
L2rVmte4hLYmk6cw5fzk9Cx374aMIsozY2bMrJZ6zNRkUxEXybptNowb8gLdm+EE
I8H9vlcXjiHJ/RRmEHDDV2VIWUfHz8Nltd6qj8I23Qzs7ZU2nkrGtg1sh1rdZCB3
UgkgRjBRxk3hHjh5A+BhKELYpGrtLAxRC2M6Dns7shjgbUeV1lLFwo9DrY6bHV/z
3cUqVr9ippdStw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:16 2025 by rpki-client