Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: s+JOVsYCrPIHucfJK+U8vZFZ7x6QRfRujw6oYFL45yA=
Subject key identifier: 9E:CE:8D:7A:B8:B4:DF:B0:1B:37:B3:1E:BC:86:2A:9B:21:C1:B7:0C
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01965425196101FD469E5FAC8C6601F47FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0CD2
Signing time: Sun 20 Apr 2025 17:00:39 +0000
Manifest this update: Sun 20 Apr 2025 17:00:39 +0000
Manifest next update: Mon 21 Apr 2025 17:00:39 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: J+KYVvtrysLsDISrbAcqdEAvzZiaG1C5VBSDsmvgvbc=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:19:61:01:fd:46:9e:5f:ac:8c:66:01:f4:7f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Apr 20 17:00:39 2025 GMT
Not After : Apr 21 17:00:39 2025 GMT
Subject: CN=9ece8d7ab8b4dfb01b37b31ebc862a9b21c1b70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:1d:90:8a:b5:eb:42:44:b0:d5:61:1c:74:
5b:35:18:1f:2b:c2:ab:16:9a:df:b5:f4:d7:4e:9d:
28:ae:ec:ca:4c:ed:54:95:73:eb:52:c7:9d:a5:8c:
1c:a6:f9:d6:cf:64:ad:c0:7f:05:b4:6b:87:51:9d:
3f:65:30:87:d1:1c:80:b0:0e:05:79:e2:48:47:06:
20:43:64:b1:f5:14:76:e6:60:8c:a9:cb:f0:b2:51:
68:84:da:22:92:e8:0c:c2:2f:3d:dd:45:da:a4:b1:
2e:84:07:71:37:0a:4f:10:f4:c7:4b:58:06:77:f8:
e4:fb:39:9c:62:3f:25:5f:e1:85:6e:a8:04:08:94:
1f:a8:4e:2d:77:df:dc:67:86:be:2d:ba:03:56:1b:
5a:3a:b6:77:6b:17:c9:7a:42:b9:e7:c8:b4:f1:0a:
7f:15:fa:a0:65:f0:4d:1d:85:55:65:a4:be:d2:be:
a1:97:99:d8:ed:96:3f:f3:1c:de:cf:b8:3d:53:27:
e9:d0:52:38:1b:b8:c3:6e:e7:0b:1e:5a:f1:23:4f:
53:dd:4b:c5:ad:44:eb:56:da:a0:64:3d:34:87:ac:
0c:f4:4a:b7:b2:da:a3:1e:49:28:9d:6f:07:61:46:
a9:b9:1c:8f:cd:62:24:1b:8e:76:93:ba:a8:d7:08:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CE:8D:7A:B8:B4:DF:B0:1B:37:B3:1E:BC:86:2A:9B:21:C1:B7:0C
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b1:d0:68:47:ca:53:87:85:d6:22:4e:d4:61:df:ad:f9:b6:
00:68:05:f3:f3:9c:7b:e4:9e:c4:e5:a6:7c:d5:e9:08:66:76:
7e:bb:9c:22:b2:61:cb:99:7a:d7:96:48:0f:ef:56:67:f0:0b:
f0:30:19:d6:1b:d9:16:3e:de:58:1b:c6:0a:c8:5b:25:6f:8a:
07:5a:1d:9e:09:d7:6c:03:5a:7d:23:6e:18:66:d0:95:33:c2:
47:d4:d7:c7:8e:6f:7a:a5:03:df:0c:4f:f0:8f:82:c5:67:1f:
e3:ca:44:dd:a5:ad:59:4e:31:e2:c0:d5:96:ac:75:33:15:4e:
95:c0:a8:9c:8f:a5:36:6d:05:43:2d:b8:7c:99:2f:58:4e:53:
13:5e:7f:32:0f:f0:53:92:95:07:18:e3:86:39:88:08:4c:7a:
bb:68:ba:41:fd:62:df:e3:b7:7d:70:39:7b:ae:d6:fa:16:d8:
87:df:38:36:f8:f5:b4:c3:fc:57:2f:62:20:23:5e:0a:1e:5e:
32:d0:0b:97:84:46:0d:43:7e:4d:3b:69:19:64:cd:89:6c:02:
db:61:e2:90:44:cc:c7:cf:0d:9f:bf:e7:59:ad:d7:bd:c2:f1:
08:9b:11:40:0e:cf:61:91:30:6c:d7:d6:62:42:6c:eb:22:80:
f4:32:4e:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJRlhAf1Gnl+sjGYB9H/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx
ODFhNGMwHhcNMjUwNDIwMTcwMDM5WhcNMjUwNDIxMTcwMDM5WjAzMTEwLwYDVQQD
Eyg5ZWNlOGQ3YWI4YjRkZmIwMWIzN2IzMWViYzg2MmE5YjIxYzFiNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvodkIq160JEsNVhHHRbNRgfK8Kr
FprftfTXTp0oruzKTO1UlXPrUsedpYwcpvnWz2StwH8FtGuHUZ0/ZTCH0RyAsA4F
eeJIRwYgQ2Sx9RR25mCMqcvwslFohNoikugMwi893UXapLEuhAdxNwpPEPTHS1gG
d/jk+zmcYj8lX+GFbqgECJQfqE4td9/cZ4a+LboDVhtaOrZ3axfJekK558i08Qp/
FfqgZfBNHYVVZaS+0r6hl5nY7ZY/8xzez7g9Uyfp0FI4G7jDbucLHlrxI09T3UvF
rUTrVtqgZD00h6wM9Eq3stqjHkkonW8HYUapuRyPzWIkG452k7qo1wg/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7OjXq4tN+wGzezHryGKpshwbcMMB8GA1UdIwQY
MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt
OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm
LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrHQaEfK
U4eF1iJO1GHfrfm2AGgF8/Oce+SexOWmfNXpCGZ2frucIrJhy5l615ZID+9WZ/AL
8DAZ1hvZFj7eWBvGCshbJW+KB1odngnXbANafSNuGGbQlTPCR9TXx45veqUD3wxP
8I+CxWcf48pE3aWtWU4x4sDVlqx1MxVOlcConI+lNm0FQy24fJkvWE5TE15/Mg/w
U5KVBxjjhjmICEx6u2i6Qf1i3+O3fXA5e67W+hbYh984Nvj1tMP8Vy9iICNeCh5e
MtALl4RGDUN+TTtpGWTNiWwC22HikETMx88Nn7/nWa3XvcLxCJsRQA7PYZEwbNfW
YkJs6yKA9DJOsg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:47:00 2025 by rpki-client