Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File: EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier: /vhsh6odTAuXLcz1BROb22Hq8Craigslpn2xjHkXexY=
Subject key identifier: D8:7A:EE:76:4C:85:CD:70:97:30:2A:87:DE:25:EC:A2:8E:EE:91:4E
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019614A19E00FF4F666B8B196EB41B8A6980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number: 07DF
Signing time: Tue 08 Apr 2025 09:00:58 +0000
Manifest this update: Tue 08 Apr 2025 09:00:58 +0000
Manifest next update: Wed 09 Apr 2025 09:00:58 +0000
Files and hashes: 1: 6Klja74aZhTKKoLLCt_3rKEYk4Y.roa (hash: t/uqWcCxSiWj4oYGbIVmwqMGIoVskiP1e2fDZiUxvEY=)
2: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: t+3PHZhrSL9Bc7gsS0vQ22yYvKaU3PX1fg3RQP1uNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a1:9e:00:ff:4f:66:6b:8b:19:6e:b4:1b:8a:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Apr 8 09:00:58 2025 GMT
Not After : Apr 9 09:00:58 2025 GMT
Subject: CN=d87aee764c85cd7097302a87de25eca28eee914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:23:9e:cd:1d:76:37:3e:25:6a:a2:1f:ec:
5d:a6:3c:64:47:26:08:67:d0:89:3e:1b:2c:6a:dc:
fe:82:87:dd:63:c1:7b:c6:68:f6:bb:e1:3d:e7:9f:
13:27:20:e1:38:44:3c:9f:9d:49:61:27:81:4a:2f:
07:fa:70:1f:17:bf:59:ff:45:ef:5f:a0:60:6e:e8:
b4:b3:5b:bd:ec:8a:6e:42:db:4f:85:26:ba:6c:0b:
1c:8a:27:09:ca:d4:2a:2c:c9:c6:1c:ba:66:11:fd:
7a:a3:28:0f:dc:ce:66:43:32:73:ad:85:39:49:9a:
9f:61:e2:49:0d:0c:69:19:99:5a:a9:ac:5d:d3:8c:
48:be:0f:ce:4b:9e:e0:5c:c4:49:59:62:f3:5e:3a:
c6:a6:08:b1:78:0a:c2:0c:80:45:de:59:88:07:83:
fc:91:3c:0b:36:9d:3c:1c:24:70:89:d5:7d:dc:15:
c1:98:6c:92:c5:d9:be:24:29:02:bd:eb:6c:3f:1e:
4c:f6:94:e6:1f:8e:80:40:fe:11:1b:4c:d6:1e:44:
5f:08:de:6e:c8:12:f6:a5:db:d1:f6:0b:9c:31:5b:
fa:d5:d9:a6:40:b0:e4:6e:43:9a:15:04:41:d0:52:
ea:c5:54:60:5c:42:08:4f:4f:4f:4a:2c:8a:62:8d:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:EE:76:4C:85:CD:70:97:30:2A:87:DE:25:EC:A2:8E:EE:91:4E
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c9:bc:a3:d3:ca:1d:be:cf:06:f4:86:b0:cf:08:89:da:ad:
59:37:65:61:dc:f6:35:9e:68:41:d4:ee:cd:4b:c7:e9:bf:dc:
4b:e4:21:5b:b1:07:ad:74:51:bf:f4:77:dc:6b:bb:e1:41:be:
4b:8f:f1:8f:8d:dd:92:02:48:4b:22:9b:f1:73:87:20:7b:f5:
42:27:04:65:08:84:ef:cb:0f:d6:30:48:06:74:b2:bb:bf:38:
11:e4:f2:9e:a4:dd:ce:61:e7:2c:26:52:3a:cd:7f:af:c5:bf:
c5:82:7e:a9:43:5e:c4:13:e4:2a:38:30:98:aa:a7:fe:22:eb:
66:2d:59:3c:c0:4b:c5:71:b4:6c:14:9f:02:11:8e:66:12:5e:
9a:14:b1:7c:60:d9:b5:6b:03:ef:8b:48:38:30:2b:9a:50:fe:
41:3c:62:c3:d8:2c:2e:11:58:1d:21:a0:23:af:40:69:7e:7f:
70:59:cb:17:fa:4d:2b:66:d5:1f:30:4e:4b:a7:de:5a:e8:a5:
43:e1:dc:b8:84:91:71:d9:08:33:c3:04:a4:29:13:20:ca:31:
7c:fb:33:01:90:c9:3d:47:c0:3a:98:93:f2:69:08:25:4e:51:
f6:27:8e:cc:1a:04:0c:f7:c9:39:c5:e5:c6:61:53:d7:15:eb:
9f:1a:29:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYUoZ4A/09ma4sZbrQbimmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYTY1N2YzNDI0YzhkZDU1MjE1YWY4NTNiOTMzMDdjMzY2
YzUzOGEwHhcNMjUwNDA4MDkwMDU4WhcNMjUwNDA5MDkwMDU4WjAzMTEwLwYDVQQD
EyhkODdhZWU3NjRjODVjZDcwOTczMDJhODdkZTI1ZWNhMjhlZWU5MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Ujns0ddjc+JWqiH+xdpjxkRyYI
Z9CJPhssatz+gofdY8F7xmj2u+E9558TJyDhOEQ8n51JYSeBSi8H+nAfF79Z/0Xv
X6Bgbui0s1u97IpuQttPhSa6bAsciicJytQqLMnGHLpmEf16oygP3M5mQzJzrYU5
SZqfYeJJDQxpGZlaqaxd04xIvg/OS57gXMRJWWLzXjrGpgixeArCDIBF3lmIB4P8
kTwLNp08HCRwidV93BXBmGySxdm+JCkCvetsPx5M9pTmH46AQP4RG0zWHkRfCN5u
yBL2pdvR9gucMVv61dmmQLDkbkOaFQRB0FLqxVRgXEIIT09PSiyKYo2HQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh67nZMhc1wlzAqh94l7KKO7pFOMB8GA1UdIwQY
MBaAFBKmV/NCTI3VUhWvhTuTMHw2bFOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMt
MDVmMDkzMzg1YWM4LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMtMDVmMDkzMzg1YWM4
LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8m8o9PK
Hb7PBvSGsM8IidqtWTdlYdz2NZ5oQdTuzUvH6b/cS+QhW7EHrXRRv/R33Gu74UG+
S4/xj43dkgJISyKb8XOHIHv1QicEZQiE78sP1jBIBnSyu784EeTynqTdzmHnLCZS
Os1/r8W/xYJ+qUNexBPkKjgwmKqn/iLrZi1ZPMBLxXG0bBSfAhGOZhJemhSxfGDZ
tWsD74tIODArmlD+QTxiw9gsLhFYHSGgI69AaX5/cFnLF/pNK2bVHzBOS6feWuil
Q+HcuISRcdkIM8MEpCkTIMoxfPszAZDJPUfAOpiT8mkIJU5R9ieOzBoEDPfJOcXl
xmFT1xXrnxopOA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:40 2025 by rpki-client