Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File: E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier: CuWKbVRHX0fEwHRxlCdv9ugYEwpCm2qzDdLlWLWThdQ=
Subject key identifier: 0A:EB:80:00:9E:A5:8B:1E:74:CA:6A:09:B2:14:1C:D8:79:8D:C0:4A
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial: 019643D5FB78362B7110F66748EC606C76CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number: 1228
Signing time: Thu 17 Apr 2025 13:00:19 +0000
Manifest this update: Thu 17 Apr 2025 13:00:19 +0000
Manifest next update: Fri 18 Apr 2025 13:00:19 +0000
Files and hashes: 1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: KvYvgs9GyRBS/Dms98SGt8W2jLdk4Q+l20thsvv2jpw=)
2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d5:fb:78:36:2b:71:10:f6:67:48:ec:60:6c:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
Validity
Not Before: Apr 17 13:00:19 2025 GMT
Not After : Apr 18 13:00:19 2025 GMT
Subject: CN=0aeb80009ea58b1e74ca6a09b2141cd8798dc04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:fb:62:bb:bc:ac:2e:b2:4f:43:ff:c2:dd:
2b:d6:9a:2c:42:46:46:c3:9b:b0:4a:ce:c5:45:4f:
32:3e:9c:24:58:a7:25:87:1c:e3:85:46:18:1c:f4:
7d:db:ed:2c:f4:b6:91:e0:e6:7c:9e:70:56:5f:31:
68:ef:8a:bd:0a:a2:8d:ee:ee:8e:d5:f9:d1:c8:02:
49:07:56:5d:de:11:fc:18:cb:45:a9:e8:d5:93:5f:
bc:16:f2:43:dd:73:f8:04:f5:25:aa:6b:2e:6b:96:
1b:7d:89:08:14:7f:ac:57:7f:a3:a0:25:8c:d4:73:
60:bc:88:ca:0b:36:5a:d2:87:5b:49:ff:87:95:3a:
2d:07:aa:f6:25:e0:52:8d:ee:0f:14:5a:28:e7:e1:
0b:a9:9d:5c:01:ff:f2:b8:2d:ca:73:2e:cd:3f:12:
c9:34:a1:d1:d0:51:7d:3b:2c:a4:22:06:5a:32:4b:
b6:e1:a5:3f:d7:d2:78:74:ed:17:26:8e:75:95:28:
cb:c3:1b:5b:bc:9c:3a:32:48:7a:e8:8e:a3:e6:86:
b2:1c:4f:82:5e:9a:de:e1:70:10:12:28:5d:3b:1b:
66:01:91:74:b9:94:c5:5b:3e:fe:1b:58:37:ba:79:
84:4b:0d:3d:0f:c6:04:bc:5b:fd:30:7c:02:80:5e:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EB:80:00:9E:A5:8B:1E:74:CA:6A:09:B2:14:1C:D8:79:8D:C0:4A
X509v3 Authority Key Identifier:
keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:24:b6:56:57:83:f4:78:b3:4a:36:ec:b7:07:f8:ec:82:29:
66:54:2b:52:17:33:f0:67:86:35:ac:e5:ed:b1:cf:8f:04:cd:
ba:77:70:1e:5d:23:54:78:b2:d0:b8:55:80:c5:e7:3e:f8:1c:
eb:b8:5f:c3:19:47:f1:e6:47:1a:a8:2d:df:f9:fb:c7:2c:dc:
37:d5:58:57:0b:89:d1:a9:62:c1:17:7c:da:cb:c2:4a:82:c3:
12:3e:4b:f7:6d:89:6f:20:34:ed:24:fd:95:3e:c2:54:59:b9:
da:f8:66:b9:08:7d:8f:cd:b8:fb:73:0c:59:40:5b:d7:a6:cc:
65:a6:d2:32:f2:23:97:45:1a:e0:ea:ec:e0:0a:f7:61:56:6e:
fb:2e:d7:73:1e:99:6a:0a:d4:94:63:c6:a8:ea:36:3c:c9:2c:
7b:f7:ba:60:8b:32:d5:6d:c2:8e:ba:52:ec:27:ef:72:cd:d8:
de:4a:00:b3:8e:63:c9:f5:98:f2:b9:65:68:5b:72:85:cc:e5:
9e:79:c7:3a:5a:da:dc:3a:70:ed:52:92:07:74:6e:1e:92:80:
b1:70:28:14:5c:b5:7e:67:6f:c7:7b:a5:57:8b:8f:44:b8:4c:
c3:fe:c0:e9:ab:f0:68:61:f4:43:6f:4f:ca:cf:1c:19:83:0e:
e9:ba:7e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1ft4NitxEPZnSOxgbHbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjg5YjgwMTg2MzMyZDQ0MWJiMDUxNWM0NzI2MWM1ZmZh
MDYxNmIwHhcNMjUwNDE3MTMwMDE5WhcNMjUwNDE4MTMwMDE5WjAzMTEwLwYDVQQD
EygwYWViODAwMDllYTU4YjFlNzRjYTZhMDliMjE0MWNkODc5OGRjMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx477Yru8rC6yT0P/wt0r1posQkZG
w5uwSs7FRU8yPpwkWKclhxzjhUYYHPR92+0s9LaR4OZ8nnBWXzFo74q9CqKN7u6O
1fnRyAJJB1Zd3hH8GMtFqejVk1+8FvJD3XP4BPUlqmsua5YbfYkIFH+sV3+joCWM
1HNgvIjKCzZa0odbSf+HlTotB6r2JeBSje4PFFoo5+ELqZ1cAf/yuC3Kcy7NPxLJ
NKHR0FF9OyykIgZaMku24aU/19J4dO0XJo51lSjLwxtbvJw6Mkh66I6j5oayHE+C
Xpre4XAQEihdOxtmAZF0uZTFWz7+G1g3unmESw09D8YEvFv9MHwCgF79xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArrgACepYsedMpqCbIUHNh5jcBKMB8GA1UdIwQY
MBaAFBO4m4AYYzLUQbsFFcRyYcX/oGFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUt
YzE5MjMyYmRhNDMwLzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUtYzE5MjMyYmRhNDMw
LzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiS2VleD
9HizSjbstwf47IIpZlQrUhcz8GeGNazl7bHPjwTNundwHl0jVHiy0LhVgMXnPvgc
67hfwxlH8eZHGqgt3/n7xyzcN9VYVwuJ0aliwRd82svCSoLDEj5L922JbyA07ST9
lT7CVFm52vhmuQh9j824+3MMWUBb16bMZabSMvIjl0Ua4Ors4Ar3YVZu+y7Xcx6Z
agrUlGPGqOo2PMkse/e6YIsy1W3CjrpS7Cfvcs3Y3koAs45jyfWY8rllaFtyhczl
nnnHOlra3Dpw7VKSB3RuHpKAsXAoFFy1fmdvx3ulV4uPRLhMw/7A6avwaGH0Q29P
ys8cGYMO6bp+Og==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:41 2025 by rpki-client