Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: F8jxKUJh7OjvWZ7Tma/Tn6PXPKn4GFDmVIpQkCYdsN4=
Subject key identifier: 7B:E6:DF:2A:04:DE:70:26:7A:78:1A:F0:66:52:67:57:AD:77:F1:6C
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019648580A5E12EDF683A8D6BF192FD67112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 0420
Signing time: Fri 18 Apr 2025 10:00:51 +0000
Manifest this update: Fri 18 Apr 2025 10:00:51 +0000
Manifest next update: Sat 19 Apr 2025 10:00:51 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: SMVMXbpvnrwOojq83TOVfI4NkDXdwE6fefE+JWBqSEc=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:0a:5e:12:ed:f6:83:a8:d6:bf:19:2f:d6:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Apr 18 10:00:51 2025 GMT
Not After : Apr 19 10:00:51 2025 GMT
Subject: CN=7be6df2a04de70267a781af066526757ad77f16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:1d:78:b0:4a:24:74:12:14:9c:58:a1:10:
4d:74:f9:50:ed:98:55:89:fe:77:70:54:67:04:0a:
2f:df:f4:9c:fb:2f:b7:98:94:46:b7:be:36:d0:72:
99:a5:91:fe:46:10:74:12:87:10:76:07:63:a9:a1:
4c:d1:20:ef:1c:6a:e0:87:68:0d:38:c9:08:d9:0e:
af:14:28:cc:25:2b:07:f9:d9:ab:9c:4a:b9:63:f1:
7e:e1:09:88:c0:0b:9b:56:7b:10:74:03:4a:58:a0:
47:6d:3b:6e:29:90:59:e0:f3:a7:0d:22:db:c9:cd:
a7:79:ea:74:71:af:4e:81:c8:15:fd:4a:32:d4:c3:
16:48:04:f1:f0:e3:c0:41:a9:43:6e:cb:bb:5b:31:
47:82:64:87:ec:82:a0:b7:82:a1:ca:57:17:88:0e:
7f:b8:bc:80:c6:79:8e:b4:26:dd:c0:4d:92:cf:45:
84:4b:88:21:8d:19:1b:e5:0b:59:52:1a:c2:58:08:
80:8e:e8:f9:10:9c:60:0f:df:39:f5:f8:3d:10:d6:
f2:10:37:17:6f:fa:09:6d:7f:b4:a1:ec:b7:c2:84:
aa:c0:1f:cc:b9:dd:a6:9d:a4:36:8b:9f:2d:84:3f:
cc:61:db:f3:2a:e4:cf:71:c0:0a:e8:7e:9a:bb:25:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E6:DF:2A:04:DE:70:26:7A:78:1A:F0:66:52:67:57:AD:77:F1:6C
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:c4:d7:bd:19:3d:b5:fb:5c:7a:88:6e:56:a7:6a:2d:79:
fb:fd:8f:cd:a3:c0:5b:ba:56:84:c7:96:1f:e2:84:b0:93:a5:
c8:85:dd:25:af:da:e5:af:19:63:51:fd:c1:c2:ee:8a:14:61:
62:67:03:75:3b:48:78:55:1e:ca:48:1d:3b:11:c2:49:60:eb:
1d:26:c6:1f:6c:b7:72:40:91:e2:98:4b:93:9f:17:17:6a:35:
24:2e:b8:8d:00:01:83:7f:11:ad:eb:cb:f8:b4:b9:9c:67:63:
b4:1e:a1:c3:e5:d8:ea:5d:bd:2f:98:8c:9b:45:e0:f4:41:f8:
d7:62:bc:72:34:91:22:6b:b0:4d:cb:3b:16:70:ee:ba:c1:7c:
ef:ba:40:39:3c:9d:18:cd:35:3d:f3:40:0f:7f:b6:7d:8f:46:
ce:c2:47:c5:17:0b:ed:a4:c4:8a:68:95:fa:ea:5e:dc:d4:16:
ea:bd:fd:cf:de:f1:55:30:21:d4:26:5c:bc:55:83:89:b9:89:
03:46:7e:d5:41:f4:6d:f8:b9:0a:c3:40:d3:64:ac:33:7d:1b:
71:c8:19:65:ea:18:bb:3c:be:dc:90:cd:a8:25:76:a8:9d:7a:
fe:6f:16:c8:5a:db:1f:44:69:de:ba:23:27:df:63:03:bb:43:
3c:b9:ad:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIWApeEu32g6jWvxkv1nESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjY5YzBjMDg1Y2M5NzhhMzcyYTBlNGYwNTY0ODM5OGUx
ZTdmZTgwHhcNMjUwNDE4MTAwMDUxWhcNMjUwNDE5MTAwMDUxWjAzMTEwLwYDVQQD
Eyg3YmU2ZGYyYTA0ZGU3MDI2N2E3ODFhZjA2NjUyNjc1N2FkNzdmMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVodeLBKJHQSFJxYoRBNdPlQ7ZhV
if53cFRnBAov3/Sc+y+3mJRGt7420HKZpZH+RhB0EocQdgdjqaFM0SDvHGrgh2gN
OMkI2Q6vFCjMJSsH+dmrnEq5Y/F+4QmIwAubVnsQdANKWKBHbTtuKZBZ4POnDSLb
yc2neep0ca9OgcgV/Uoy1MMWSATx8OPAQalDbsu7WzFHgmSH7IKgt4KhylcXiA5/
uLyAxnmOtCbdwE2Sz0WES4ghjRkb5QtZUhrCWAiAjuj5EJxgD9859fg9ENbyEDcX
b/oJbX+0oey3woSqwB/Mud2mnaQ2i58thD/MYdvzKuTPccAK6H6auyXODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvm3yoE3nAmenga8GZSZ1etd/FsMB8GA1UdIwQY
MBaAFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEt
NTNiMDQzNDI3ODNkLzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEtNTNiMDQzNDI3ODNk
LzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVPE170Z
PbX7XHqIblanai15+/2PzaPAW7pWhMeWH+KEsJOlyIXdJa/a5a8ZY1H9wcLuihRh
YmcDdTtIeFUeykgdOxHCSWDrHSbGH2y3ckCR4phLk58XF2o1JC64jQABg38RrevL
+LS5nGdjtB6hw+XY6l29L5iMm0Xg9EH412K8cjSRImuwTcs7FnDuusF877pAOTyd
GM01PfNAD3+2fY9GzsJHxRcL7aTEimiV+upe3NQW6r39z97xVTAh1CZcvFWDibmJ
A0Z+1UH0bfi5CsNA02SsM30bccgZZeoYuzy+3JDNqCV2qJ16/m8WyFrbH0Rp3roj
J99jA7tDPLmtig==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:49:42 2025 by rpki-client