Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: VwU36zRkGCwNnYv4IQdw8bfHcTkGNrE/UvTYXBkiXE4=
Subject key identifier: DD:DD:B7:47:2B:BC:73:69:4B:82:3B:44:9B:7C:B1:30:DA:E6:8F:FC
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 0196410C76F425F15E29BEE7DA692DB8903D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 14F3
Signing time: Thu 17 Apr 2025 00:00:57 +0000
Manifest this update: Thu 17 Apr 2025 00:00:57 +0000
Manifest next update: Fri 18 Apr 2025 00:00:57 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: TFxgedC/8fz5xLxjO5uGZDZvumlEzkTdyktfawlByAI=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:0c:76:f4:25:f1:5e:29:be:e7:da:69:2d:b8:90:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Apr 17 00:00:57 2025 GMT
Not After : Apr 18 00:00:57 2025 GMT
Subject: CN=ddddb7472bbc73694b823b449b7cb130dae68ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:f5:dc:4e:91:39:c0:5d:b3:ce:a1:4e:55:
6b:37:d4:0a:c0:4f:8b:0d:32:3e:d0:57:77:63:99:
f5:3f:80:11:fb:86:18:d7:14:ac:19:c8:31:0d:f1:
42:72:14:7d:40:02:ea:db:53:28:db:23:52:0f:50:
82:8f:65:43:2c:ec:53:1d:63:15:06:45:d7:c0:f3:
79:24:1d:fd:8e:a5:bc:1b:ef:76:57:9b:9d:f7:c3:
d7:d7:86:5a:c6:88:8e:00:87:d5:94:2a:4f:2b:7e:
4b:6c:fe:ec:3e:6f:c5:3f:f4:63:4f:f1:5d:6a:66:
34:77:13:13:2e:95:fc:58:ff:23:64:47:02:ee:98:
4d:ab:0d:26:49:27:48:df:e1:b4:7e:be:b2:23:0c:
13:38:62:93:f8:7a:13:bc:cb:aa:2c:cc:1f:81:70:
ea:d8:bd:86:3a:30:b0:f7:c3:6d:72:bd:80:2c:0b:
fb:1e:8b:56:41:e0:63:1c:2b:7c:32:96:8e:e1:c0:
b1:5a:42:f3:d9:21:44:99:3d:d5:3d:11:64:91:09:
4b:69:da:59:27:0a:06:c5:2d:54:44:8a:14:3d:4d:
61:21:87:3c:0f:5b:cc:bd:02:e4:de:d9:8a:34:a3:
50:c1:23:f3:ed:7a:ad:10:80:92:77:0d:83:6b:21:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:B7:47:2B:BC:73:69:4B:82:3B:44:9B:7C:B1:30:DA:E6:8F:FC
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:3f:13:28:dd:b0:e8:d0:bc:0d:36:70:80:50:fc:d4:c0:
e6:72:f3:f1:9f:40:88:c5:4d:70:12:fa:b6:04:1a:7a:1d:6d:
58:e5:62:eb:27:c3:91:49:c3:7f:1f:c2:d6:44:9c:6d:7b:13:
5d:4c:98:87:09:a3:ca:60:35:12:91:57:f1:6f:de:0f:96:f0:
1c:7b:1f:a7:88:ce:94:25:2d:1e:be:13:fb:7f:ad:78:7f:7f:
c0:11:f8:7e:13:9c:e0:66:14:d1:50:06:bf:36:52:37:69:95:
5d:5b:30:04:57:9b:4f:01:8b:d6:ef:f2:2b:98:20:33:ee:c6:
0d:30:76:1b:79:3e:e5:4a:87:f4:e5:b4:1a:d3:d3:d1:37:74:
6b:6b:1c:9b:2f:43:37:48:da:49:6e:e4:cc:4d:6f:fe:92:e8:
50:83:96:26:42:1f:b4:a3:45:5b:db:eb:19:fc:95:a5:94:d7:
a9:b8:76:37:5f:44:43:85:b0:7a:66:3d:86:67:01:20:35:4d:
bf:e8:9b:78:cf:47:0e:1c:e1:bf:08:dd:47:fe:52:db:4d:c3:
f3:46:4a:a1:38:6c:21:bc:e3:7c:92:5c:0f:f2:8f:92:05:50:
07:d6:39:15:6b:cb:81:dc:34:45:5f:4a:f9:37:82:00:be:89:
1e:24:71:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBDHb0JfFeKb7n2mktuJA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0
NTVhNTYwHhcNMjUwNDE3MDAwMDU3WhcNMjUwNDE4MDAwMDU3WjAzMTEwLwYDVQQD
EyhkZGRkYjc0NzJiYmM3MzY5NGI4MjNiNDQ5YjdjYjEzMGRhZTY4ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxH13E6ROcBds86hTlVrN9QKwE+L
DTI+0Fd3Y5n1P4AR+4YY1xSsGcgxDfFCchR9QALq21Mo2yNSD1CCj2VDLOxTHWMV
BkXXwPN5JB39jqW8G+92V5ud98PX14ZaxoiOAIfVlCpPK35LbP7sPm/FP/RjT/Fd
amY0dxMTLpX8WP8jZEcC7phNqw0mSSdI3+G0fr6yIwwTOGKT+HoTvMuqLMwfgXDq
2L2GOjCw98Ntcr2ALAv7HotWQeBjHCt8MpaO4cCxWkLz2SFEmT3VPRFkkQlLadpZ
JwoGxS1URIoUPU1hIYc8D1vMvQLk3tmKNKNQwSPz7XqtEICSdw2DayFyywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3dt0crvHNpS4I7RJt8sTDa5o/8MB8GA1UdIwQY
MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et
MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1
LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcQ/Eyjd
sOjQvA02cIBQ/NTA5nLz8Z9AiMVNcBL6tgQaeh1tWOVi6yfDkUnDfx/C1kScbXsT
XUyYhwmjymA1EpFX8W/eD5bwHHsfp4jOlCUtHr4T+3+teH9/wBH4fhOc4GYU0VAG
vzZSN2mVXVswBFebTwGL1u/yK5ggM+7GDTB2G3k+5UqH9OW0GtPT0Td0a2scmy9D
N0jaSW7kzE1v/pLoUIOWJkIftKNFW9vrGfyVpZTXqbh2N19EQ4WwemY9hmcBIDVN
v+ibeM9HDhzhvwjdR/5S203D80ZKoThsIbzjfJJcD/KPkgVQB9Y5FWvLgdw0RV9K
+TeCAL6JHiRx+A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:43:06 2025 by rpki-client