Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier: hAlJfLg8tK65aVnJd26aukpwgu7O5WqYxqOJOag5/cM=
Subject key identifier: 9A:51:E2:6C:6D:66:33:4B:EB:22:E4:A7:2B:13:5C:79:A1:4D:E1:B3
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial: 019652A48B8C91D0332BBC5D90ED08FE8065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 10:00:37 +0000
Manifest this update: Sun 20 Apr 2025 10:00:37 +0000
Manifest next update: Mon 21 Apr 2025 10:00:37 +0000
Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: pJSSeYD5KtCsw7wiqpFWnHiOL8uCT8/e03d/yYvGrow=)
2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:8b:8c:91:d0:33:2b:bc:5d:90:ed:08:fe:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Validity
Not Before: Apr 20 10:00:37 2025 GMT
Not After : Apr 21 10:00:37 2025 GMT
Subject: CN=9a51e26c6d66334beb22e4a72b135c79a14de1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:a4:3e:df:2b:7c:b3:08:42:01:0d:c4:f6:
fc:75:98:d6:64:a7:69:a3:73:93:e7:32:9f:1f:0f:
6e:6a:8b:c0:4f:4a:38:d1:76:e5:31:95:ba:ff:5d:
a3:4c:5e:ed:ca:ab:d9:f3:e0:c4:9a:e9:b8:b7:73:
76:f7:cf:37:70:8a:31:b6:21:b6:3a:23:27:ef:73:
cb:ff:a7:11:a1:69:60:f3:e8:e3:4f:24:a3:f7:6e:
fb:5d:01:99:93:b4:54:ac:59:e6:e6:d2:b3:8f:66:
f1:0e:4b:7f:e4:e7:d1:88:0a:07:fb:4e:c5:34:fb:
88:fa:84:ae:b6:ec:a8:ab:b6:31:f7:06:6d:a6:29:
92:cf:88:d1:fc:38:5b:b3:73:60:a6:25:42:a7:21:
45:f5:10:2e:99:1c:46:63:84:e2:31:00:8a:b4:3d:
72:e3:7d:c2:3c:79:f3:13:00:0a:31:0d:88:33:97:
21:ca:ec:c1:fa:1a:55:28:73:c4:22:53:b0:41:aa:
e7:37:81:74:7a:0b:c3:19:cb:b8:82:92:4f:28:a0:
b8:73:ac:5a:79:8b:dc:a4:15:23:f5:a2:bc:86:d3:
a8:43:bf:f3:dc:35:e0:58:f6:5d:99:05:6d:9d:ec:
00:99:e2:d8:a0:5f:ee:cd:cd:d2:90:9c:78:2d:db:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:E2:6C:6D:66:33:4B:EB:22:E4:A7:2B:13:5C:79:A1:4D:E1:B3
X509v3 Authority Key Identifier:
keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ae:d3:0a:33:3d:78:6c:34:27:6a:7e:89:9e:85:94:a6:2a:
77:17:fc:e7:b4:5e:33:7c:8a:6a:ef:40:f4:a6:ed:50:e1:58:
49:4e:d3:f1:c1:a0:cf:f6:f9:e9:d9:ae:75:50:94:8e:0a:31:
09:f8:36:f3:87:01:08:82:30:83:34:cd:3d:24:03:90:ab:7c:
35:1a:61:62:f0:26:f7:7b:01:0f:69:81:ce:e0:6c:77:5e:d0:
e2:95:59:7e:2e:57:8a:61:cf:4c:e5:b8:90:c3:3f:4e:06:c3:
d6:ad:f0:db:dc:88:aa:d3:ae:70:ef:1f:fb:35:d1:6c:32:82:
2f:e3:3f:d0:4d:b7:ba:1a:65:67:92:e7:04:e4:86:24:eb:c5:
c8:3c:ae:5c:6d:15:2c:4e:f6:97:01:a0:3e:17:5a:aa:99:0e:
de:3b:f2:e7:ce:42:b6:d1:20:2c:cb:46:12:87:2d:f7:85:44:
bf:f7:5a:ef:d9:5f:e4:00:ac:9e:5a:fd:ad:e4:5a:26:c9:1b:
ae:57:d6:51:93:34:d1:d7:fb:f5:aa:d8:f9:f9:a1:a5:ee:ae:
c0:f3:37:26:97:2b:d0:73:0c:3a:13:c1:0b:20:83:3e:a0:35:
4f:31:47:1e:ea:49:ab:28:3e:a6:9e:7a:be:da:4b:f6:79:c6:
dc:27:41:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpIuMkdAzK7xdkO0I/oBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlN2EyNjRkYmNjZDc1YWE4NmNkMzYxYzZkMzY2YmQ4OGM5
MGRhMjMwHhcNMjUwNDIwMTAwMDM3WhcNMjUwNDIxMTAwMDM3WjAzMTEwLwYDVQQD
Eyg5YTUxZTI2YzZkNjYzMzRiZWIyMmU0YTcyYjEzNWM3OWExNGRlMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmqkPt8rfLMIQgENxPb8dZjWZKdp
o3OT5zKfHw9uaovAT0o40XblMZW6/12jTF7tyqvZ8+DEmum4t3N29883cIoxtiG2
OiMn73PL/6cRoWlg8+jjTySj9277XQGZk7RUrFnm5tKzj2bxDkt/5OfRiAoH+07F
NPuI+oSutuyoq7Yx9wZtpimSz4jR/Dhbs3NgpiVCpyFF9RAumRxGY4TiMQCKtD1y
433CPHnzEwAKMQ2IM5chyuzB+hpVKHPEIlOwQarnN4F0egvDGcu4gpJPKKC4c6xa
eYvcpBUj9aK8htOoQ7/z3DXgWPZdmQVtnewAmeLYoF/uzc3SkJx4Lds+xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpR4mxtZjNL6yLkpysTXHmhTeGzMB8GA1UdIwQY
MBaAFO56Jk28zXWqhs02HG02a9iMkNojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMt
MzE3ZTgyMGRmY2RiLzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMtMzE3ZTgyMGRmY2Ri
LzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg67TCjM9
eGw0J2p+iZ6FlKYqdxf857ReM3yKau9A9KbtUOFYSU7T8cGgz/b56dmudVCUjgox
Cfg284cBCIIwgzTNPSQDkKt8NRphYvAm93sBD2mBzuBsd17Q4pVZfi5XimHPTOW4
kMM/TgbD1q3w29yIqtOucO8f+zXRbDKCL+M/0E23uhplZ5LnBOSGJOvFyDyuXG0V
LE72lwGgPhdaqpkO3jvy585CttEgLMtGEoct94VEv/da79lf5ACsnlr9reRaJskb
rlfWUZM00df79arY+fmhpe6uwPM3Jpcr0HMMOhPBCyCDPqA1TzFHHupJqyg+pp56
vtpL9nnG3CdB9w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:19 2025 by rpki-client