Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: jWCDWd2GaDPObcGKwywlUlTIVTw7HCpJWKGtz8zrbQQ=
Subject key identifier: 91:B7:46:D3:62:3A:82:83:E0:B0:B7:08:9E:B3:4B:04:6C:63:86:E9
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 0196379B282002DD38299037BC5D3C5DFFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 12A2
Signing time: Tue 15 Apr 2025 04:00:37 +0000
Manifest this update: Tue 15 Apr 2025 04:00:37 +0000
Manifest next update: Wed 16 Apr 2025 04:00:37 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: G99OZrdxNO1LFeCabRMOMpFHpVIwTZ67pYlp/Cii6c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:9b:28:20:02:dd:38:29:90:37:bc:5d:3c:5d:ff:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Apr 15 04:00:37 2025 GMT
Not After : Apr 16 04:00:37 2025 GMT
Subject: CN=91b746d3623a8283e0b0b7089eb34b046c6386e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:15:2c:45:b8:51:fd:d3:c5:4b:f5:d5:62:
33:94:de:18:45:24:46:63:fb:86:67:88:fc:cd:85:
dd:e8:13:a7:9f:a6:75:a2:ea:8f:a5:42:ac:49:45:
56:92:55:8c:89:95:da:c2:1c:f1:56:22:0f:0a:20:
27:70:af:ba:f3:c8:f1:84:9f:d8:ed:a6:74:91:09:
51:65:52:de:b3:6d:cd:b7:58:c1:3d:8f:36:93:45:
98:2b:75:33:d3:ad:ab:33:e4:fc:ba:c7:d1:5c:79:
c1:4d:74:89:3c:d6:69:c0:26:5b:4c:25:83:09:43:
36:36:9f:ba:c9:3a:35:c0:cc:f4:8f:ac:c2:ac:71:
59:43:47:1b:56:81:84:e7:00:45:5a:6b:ac:71:39:
74:51:3e:3f:69:43:3f:7c:c6:e2:a2:92:d3:34:00:
f0:66:21:e4:0b:0d:81:b3:e3:f8:aa:84:23:1f:ff:
da:5f:e4:03:14:b7:4b:9a:21:76:26:bc:c1:75:9f:
9e:f2:83:73:fc:5e:41:b2:a4:ad:f4:45:c3:88:97:
dd:48:12:7a:f9:e7:f6:92:44:0b:4f:00:ca:3b:3d:
a0:2d:4f:73:45:27:17:8f:a8:4b:8e:ab:e7:64:a0:
35:fb:cf:57:a3:08:bb:09:94:90:46:48:17:a1:2e:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B7:46:D3:62:3A:82:83:E0:B0:B7:08:9E:B3:4B:04:6C:63:86:E9
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:20:87:7f:37:e8:8f:61:4a:51:b5:6b:bf:e6:ee:0e:d4:91:
79:cf:77:34:77:95:6a:b4:23:16:95:7b:f3:ea:87:15:60:d5:
d7:22:da:69:19:e5:c4:bb:72:5f:41:c3:d9:d5:b4:a8:29:84:
63:b5:bb:81:51:3d:17:9e:6c:ef:84:fd:11:27:7b:d5:90:c9:
aa:5b:59:de:c9:24:db:4e:73:06:55:2b:d0:db:c9:67:f9:1b:
a8:86:e4:3f:5c:89:c9:fa:18:27:a6:35:71:38:f8:e6:70:9a:
4c:03:1f:93:27:45:31:7d:c6:16:14:b2:f0:20:96:4d:b3:ea:
3e:fa:06:03:27:93:f2:8b:a6:98:7b:cf:ef:6c:a1:3a:d4:c8:
e9:38:fa:03:9f:73:b8:9a:75:c3:4a:a4:83:90:a7:5b:69:75:
51:bd:b1:65:64:5b:74:33:71:50:42:11:a6:36:2f:c1:65:5c:
10:65:06:4e:99:02:c7:43:3e:fe:22:60:df:79:de:03:c5:1e:
c5:59:ed:c1:97:61:41:17:2c:77:62:f5:6a:3a:3e:80:37:2f:
7b:0c:8e:07:e9:38:82:57:a8:68:c9:20:bd:f0:e5:4f:ef:7d:
eb:92:59:40:eb:3c:e5:41:a3:b5:f9:3b:fd:64:d2:66:18:8b:
28:e3:ab:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY3myggAt04KZA3vF08Xf/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk
M2M4YTYwHhcNMjUwNDE1MDQwMDM3WhcNMjUwNDE2MDQwMDM3WjAzMTEwLwYDVQQD
Eyg5MWI3NDZkMzYyM2E4MjgzZTBiMGI3MDg5ZWIzNGIwNDZjNjM4NmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsEVLEW4Uf3TxUv11WIzlN4YRSRG
Y/uGZ4j8zYXd6BOnn6Z1ouqPpUKsSUVWklWMiZXawhzxViIPCiAncK+688jxhJ/Y
7aZ0kQlRZVLes23Nt1jBPY82k0WYK3Uz062rM+T8usfRXHnBTXSJPNZpwCZbTCWD
CUM2Np+6yTo1wMz0j6zCrHFZQ0cbVoGE5wBFWmuscTl0UT4/aUM/fMbiopLTNADw
ZiHkCw2Bs+P4qoQjH//aX+QDFLdLmiF2JrzBdZ+e8oNz/F5BsqSt9EXDiJfdSBJ6
+ef2kkQLTwDKOz2gLU9zRScXj6hLjqvnZKA1+89Xowi7CZSQRkgXoS6yKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG3RtNiOoKD4LC3CJ6zSwRsY4bpMB8GA1UdIwQY
MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt
MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh
LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiCHfzfo
j2FKUbVrv+buDtSRec93NHeVarQjFpV78+qHFWDV1yLaaRnlxLtyX0HD2dW0qCmE
Y7W7gVE9F55s74T9ESd71ZDJqltZ3skk205zBlUr0NvJZ/kbqIbkP1yJyfoYJ6Y1
cTj45nCaTAMfkydFMX3GFhSy8CCWTbPqPvoGAyeT8oummHvP72yhOtTI6Tj6A59z
uJp1w0qkg5CnW2l1Ub2xZWRbdDNxUEIRpjYvwWVcEGUGTpkCx0M+/iJg33neA8Ue
xVntwZdhQRcsd2L1ajo+gDcvewyOB+k4gleoaMkgvfDlT+9965JZQOs85UGjtfk7
/WTSZhiLKOOrtg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:41:29 2025 by rpki-client