Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: 6ASSiVaSbNDMiFSdBNtzu2hd35/bcSin+yj4dFNt5Po=
Subject key identifier: 53:5F:9E:8D:CE:69:F5:DC:41:A1:B1:0D:DE:A9:62:CF:96:84:42:0E
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 01958F98732F562A1E7ADBA3DFA53EA6DFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0A56
Signing time: Thu 13 Mar 2025 13:01:27 +0000
Manifest this update: Thu 13 Mar 2025 13:01:27 +0000
Manifest next update: Fri 14 Mar 2025 13:01:27 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: O5L/zZSMEVfpmxGJYue+5dHJFokn2NYZaYSvStkgmtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:73:2f:56:2a:1e:7a:db:a3:df:a5:3e:a6:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Mar 13 13:01:27 2025 GMT
Not After : Mar 14 13:01:27 2025 GMT
Subject: CN=535f9e8dce69f5dc41a1b10ddea962cf9684420e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:a2:81:b1:ac:4d:8f:2d:e8:60:01:9c:65:
94:48:ca:b9:61:30:ab:a9:b2:73:b4:46:b0:02:0f:
7a:38:4d:2a:96:ec:4b:a8:72:4e:bd:69:ac:61:52:
6e:9c:9f:50:4e:65:8a:78:6b:f7:55:b8:86:d5:18:
b2:ef:8c:2f:2a:e9:c9:7a:38:3b:36:e7:aa:9e:65:
36:d3:d0:83:dd:e7:94:56:40:45:ba:34:cf:21:38:
0c:17:38:17:8f:5f:b2:60:07:fd:c4:16:8c:74:f0:
1b:ef:b2:64:0d:8b:81:37:4f:37:55:47:55:41:e5:
df:dd:bd:6a:86:b7:df:db:9c:c6:eb:50:34:b4:e6:
bd:61:a7:20:37:c4:e4:fe:e9:4d:a9:a7:6f:3c:f0:
b3:8d:cf:72:a6:98:a3:80:f8:a5:72:a3:e9:d6:19:
67:c0:b8:0c:51:5e:72:d6:d7:d7:d7:10:ea:78:28:
e4:ae:88:fc:8c:5e:eb:3f:b4:cd:d1:02:f8:84:06:
64:66:3d:2e:97:63:4d:e6:07:c9:2a:e4:dc:7f:f4:
f0:24:ca:65:74:58:93:b8:47:bf:84:12:3e:66:4d:
49:91:92:9b:41:b0:65:7a:19:12:72:1d:73:05:20:
e8:25:12:8c:68:8c:08:7f:fd:29:2b:95:51:c3:f4:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5F:9E:8D:CE:69:F5:DC:41:A1:B1:0D:DE:A9:62:CF:96:84:42:0E
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:bf:5c:aa:aa:4a:fe:37:71:e8:30:7a:0b:9c:8f:86:dc:
b8:3c:68:f3:71:4d:0a:76:11:b6:5e:66:0c:16:d4:dc:ed:c0:
44:40:b6:8b:db:b7:c8:06:61:ce:5a:32:75:46:97:45:a2:e7:
ef:14:4c:79:60:59:0b:6b:15:5b:79:01:af:c7:9d:05:7a:b5:
80:e1:79:39:85:18:ba:a1:58:fc:9e:64:2b:63:29:46:d8:3e:
96:c6:b1:44:b0:58:7a:0d:0f:5d:85:82:82:92:b3:c0:66:63:
a2:a2:39:4d:c1:9f:0c:cc:83:33:83:af:ad:02:48:91:5f:e6:
0d:03:43:0d:64:41:83:81:68:a7:e3:19:4f:b7:46:c4:5b:5f:
0f:30:7a:ca:1b:db:8b:0b:96:17:0b:11:c4:b0:f0:e1:60:4f:
9d:01:72:a0:e7:cd:67:7e:50:9d:57:a7:20:e6:ed:de:15:d6:
81:9b:95:c1:e5:04:4a:1a:4d:c1:19:bf:d8:1e:65:e6:10:c7:
f8:3f:97:12:f4:c0:07:63:0f:3b:57:6e:6e:44:16:0f:2c:14:
2f:58:50:40:b9:53:31:fe:b9:10:6c:8a:96:e0:e8:66:40:60:
5c:b6:73:26:9f:20:5e:a8:63:5c:3e:12:ba:cb:82:80:03:48:
b2:ee:5a:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPmHMvVioeetuj36U+pt/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGM0ZjVmNDRhNjYwNmE3NjE3YTk2Y2VjMTg0OTAwYWNh
NmY4MGUwHhcNMjUwMzEzMTMwMTI3WhcNMjUwMzE0MTMwMTI3WjAzMTEwLwYDVQQD
Eyg1MzVmOWU4ZGNlNjlmNWRjNDFhMWIxMGRkZWE5NjJjZjk2ODQ0MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmaigbGsTY8t6GABnGWUSMq5YTCr
qbJztEawAg96OE0qluxLqHJOvWmsYVJunJ9QTmWKeGv3VbiG1Riy74wvKunJejg7
NueqnmU209CD3eeUVkBFujTPITgMFzgXj1+yYAf9xBaMdPAb77JkDYuBN083VUdV
QeXf3b1qhrff25zG61A0tOa9YacgN8Tk/ulNqadvPPCzjc9yppijgPilcqPp1hln
wLgMUV5y1tfX1xDqeCjkroj8jF7rP7TN0QL4hAZkZj0ul2NN5gfJKuTcf/TwJMpl
dFiTuEe/hBI+Zk1JkZKbQbBlehkSch1zBSDoJRKMaIwIf/0pK5VRw/TymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNfno3OafXcQaGxDd6pYs+WhEIOMB8GA1UdIwQY
MBaAFHiMT19EpmBqdhepbOwYSQCspvgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUt
YzY2ZTA4NzhkZDI3LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUtYzY2ZTA4NzhkZDI3
LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrq/XKqq
Sv43cegwegucj4bcuDxo83FNCnYRtl5mDBbU3O3AREC2i9u3yAZhzloydUaXRaLn
7xRMeWBZC2sVW3kBr8edBXq1gOF5OYUYuqFY/J5kK2MpRtg+lsaxRLBYeg0PXYWC
gpKzwGZjoqI5TcGfDMyDM4OvrQJIkV/mDQNDDWRBg4Fop+MZT7dGxFtfDzB6yhvb
iwuWFwsRxLDw4WBPnQFyoOfNZ35QnVenIObt3hXWgZuVweUEShpNwRm/2B5l5hDH
+D+XEvTAB2MPO1dubkQWDywUL1hQQLlTMf65EGyKluDoZkBgXLZzJp8gXqhjXD4S
usuCgANIsu5aMw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:22 2025 by rpki-client