Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: eMQmj23c7E30i9ppEWexx54/DrCxqKQXTOzpHlobrsE=
Subject key identifier: 00:0E:7D:B0:CD:3F:67:59:E4:06:AF:85:91:56:2F:BD:49:82:E6:E8
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 01965725D0500202D16F5370A9E78DB7BC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 0565
Signing time: Mon 21 Apr 2025 07:00:18 +0000
Manifest this update: Mon 21 Apr 2025 07:00:18 +0000
Manifest next update: Tue 22 Apr 2025 07:00:18 +0000
Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: 4Zi0B7WxnP9bHch4XLOIBB3bKgxVEIREclSAZdMJ4Y8=)
2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:d0:50:02:02:d1:6f:53:70:a9:e7:8d:b7:bc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Apr 21 07:00:18 2025 GMT
Not After : Apr 22 07:00:18 2025 GMT
Subject: CN=000e7db0cd3f6759e406af8591562fbd4982e6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:6a:cc:09:c2:52:9e:62:0e:ef:a5:0c:d5:
45:3a:99:ad:3f:e4:ec:80:e5:46:9b:e3:3b:1d:26:
43:40:87:e4:e6:57:b8:32:1d:9b:86:45:6c:7b:79:
95:98:09:c3:bc:72:b8:a0:6f:69:1d:34:65:2d:87:
06:db:97:36:57:e4:71:ec:e0:85:f5:fd:04:48:b7:
78:ed:f8:9d:d0:94:bc:b2:8b:9f:59:64:8e:9f:81:
6a:64:32:31:e2:a1:79:99:4b:b8:3c:9e:32:11:4e:
1f:96:ca:b8:45:e4:6c:f8:0d:f8:ea:f0:1e:19:9f:
8f:e2:36:c6:eb:d8:b7:f0:8c:35:91:47:cc:d2:b7:
93:08:8d:81:c1:ea:d4:f1:5a:0d:d3:8c:4a:eb:7f:
77:b9:c6:26:8d:fa:e7:55:8d:9b:f6:ed:6a:b4:ff:
b1:05:62:7b:84:61:cd:be:8a:60:d2:8d:c5:ce:d2:
3d:4e:f1:a1:f4:81:16:ac:a6:72:e8:39:d5:ce:7f:
79:57:40:c7:97:65:d0:00:6e:ab:b8:0b:45:6f:7a:
5b:0b:b0:32:fa:c1:4f:c9:17:b3:75:39:5c:c5:13:
91:72:6e:d8:17:59:28:8c:96:50:03:fd:50:70:61:
4b:7b:11:e2:d9:a9:60:a0:32:02:39:88:1c:08:01:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0E:7D:B0:CD:3F:67:59:E4:06:AF:85:91:56:2F:BD:49:82:E6:E8
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:6d:9e:fa:95:98:41:80:9c:76:07:0b:f2:74:c6:50:e4:
36:c7:0c:77:52:a8:5a:1f:67:df:34:6d:a3:47:1f:e2:53:98:
8c:28:ba:66:92:b8:3a:62:a0:28:49:17:31:a3:5b:7b:84:1d:
db:31:5b:8e:46:7e:7c:41:69:76:85:92:5d:d4:11:7c:4b:2f:
49:f3:57:1a:f9:df:4b:42:ce:7d:ef:b4:24:13:e0:9e:ef:20:
e6:b1:b5:6c:46:6a:46:e7:2d:5f:a8:36:62:84:b6:d5:36:56:
45:d1:ec:57:04:c2:7f:52:5f:dc:bd:20:87:5e:83:26:bc:13:
45:4b:ef:3e:b5:5e:c1:7a:42:ae:2e:fe:cd:1e:76:c7:08:12:
78:7b:7f:95:45:64:9c:61:24:90:a4:16:39:10:de:ec:06:ef:
3c:b8:e5:f6:71:f2:28:8f:00:34:7c:5b:e2:a9:c0:63:b8:a6:
22:77:98:f6:92:fe:5a:a1:b7:59:fd:dc:02:4a:f6:f9:05:84:
e9:b8:94:12:3c:ee:39:13:49:11:60:46:62:db:d7:6f:e9:54:
c9:8e:35:db:dd:bc:3e:47:3c:07:0f:18:80:74:db:dd:c2:dc:
ed:8f:7b:da:50:7e:4b:48:d1:1e:d6:a4:12:26:3d:38:3e:ba:
b8:08:32:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJdBQAgLRb1NwqeeNt7xcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1
Y2FlNGQwHhcNMjUwNDIxMDcwMDE4WhcNMjUwNDIyMDcwMDE4WjAzMTEwLwYDVQQD
EygwMDBlN2RiMGNkM2Y2NzU5ZTQwNmFmODU5MTU2MmZiZDQ5ODJlNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApclqzAnCUp5iDu+lDNVFOpmtP+Ts
gOVGm+M7HSZDQIfk5le4Mh2bhkVse3mVmAnDvHK4oG9pHTRlLYcG25c2V+Rx7OCF
9f0ESLd47fid0JS8soufWWSOn4FqZDIx4qF5mUu4PJ4yEU4flsq4ReRs+A346vAe
GZ+P4jbG69i38Iw1kUfM0reTCI2BwerU8VoN04xK6393ucYmjfrnVY2b9u1qtP+x
BWJ7hGHNvopg0o3FztI9TvGh9IEWrKZy6DnVzn95V0DHl2XQAG6ruAtFb3pbC7Ay
+sFPyRezdTlcxRORcm7YF1kojJZQA/1QcGFLexHi2algoDICOYgcCAGNYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAOfbDNP2dZ5AavhZFWL71JguboMB8GA1UdIwQY
MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt
NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4
LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVhtnvqV
mEGAnHYHC/J0xlDkNscMd1KoWh9n3zRto0cf4lOYjCi6ZpK4OmKgKEkXMaNbe4Qd
2zFbjkZ+fEFpdoWSXdQRfEsvSfNXGvnfS0LOfe+0JBPgnu8g5rG1bEZqRuctX6g2
YoS21TZWRdHsVwTCf1Jf3L0gh16DJrwTRUvvPrVewXpCri7+zR52xwgSeHt/lUVk
nGEkkKQWORDe7AbvPLjl9nHyKI8ANHxb4qnAY7imIneY9pL+WqG3Wf3cAkr2+QWE
6biUEjzuORNJEWBGYtvXb+lUyY412928Pkc8Bw8YgHTb3cLc7Y972lB+S0jRHtak
EiY9OD66uAgyBA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:46 2025 by rpki-client