Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: iPck4IxoiL/aYDaT7u6RTrA41k8ljw2ZF9AL7Lig6oo=
Subject key identifier: AE:A2:34:8C:FD:1C:65:72:61:25:4F:97:44:4F:BE:C9:8C:CB:2E:14
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 01958C29162A7E2FB402E3D676972AB2640E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 21:00:57 +0000
Manifest this update: Wed 12 Mar 2025 21:00:57 +0000
Manifest next update: Thu 13 Mar 2025 21:00:57 +0000
Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: nLNYBqa3JSylKYS+TNkYFy1dWncmjYMedfQ7a/+RpPU=)
2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:16:2a:7e:2f:b4:02:e3:d6:76:97:2a:b2:64:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Mar 12 21:00:57 2025 GMT
Not After : Mar 13 21:00:57 2025 GMT
Subject: CN=aea2348cfd1c657261254f97444fbec98ccb2e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:fa:b2:0a:a8:f9:10:78:ae:3d:16:5b:0f:
e5:30:68:5d:64:6a:25:d8:a5:3f:a3:fc:fc:19:f9:
95:2a:3e:a4:b6:ed:30:f1:07:20:cf:c8:ff:37:d1:
5a:b4:d6:36:a6:52:3f:c4:57:bb:fd:a5:f3:bd:ff:
0b:0d:36:2e:6a:c7:cc:6d:60:02:15:83:9a:0f:06:
40:54:f6:34:9c:ce:ca:82:98:a1:44:21:93:97:c5:
67:72:e3:d9:00:b8:48:9a:73:9d:15:3e:79:5b:33:
4f:72:23:35:26:65:a9:d5:74:27:06:bd:7d:bb:c6:
e1:0d:00:80:8b:f1:84:a2:1d:d0:e3:1b:21:2a:77:
8e:f1:81:f7:f1:80:fb:47:ca:7c:5d:2c:4a:5d:2b:
c4:ea:ce:43:cd:4e:f7:04:8d:1e:67:71:62:40:a8:
f1:72:8f:17:e9:7a:da:58:91:9c:f6:cc:4b:1e:cf:
0e:4e:3b:9f:ce:4f:c1:7b:e7:77:55:67:f0:cf:88:
37:f7:9b:fc:ea:60:ca:05:8c:7c:e0:de:87:df:2d:
5c:94:03:47:70:61:03:a5:77:35:f6:68:dd:83:7e:
f2:65:26:c8:46:a6:27:62:95:5b:1b:32:82:0b:e7:
4c:9a:fb:08:2b:2f:2a:fe:83:3b:a0:16:f0:b4:25:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A2:34:8C:FD:1C:65:72:61:25:4F:97:44:4F:BE:C9:8C:CB:2E:14
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4e:74:9c:fd:2d:13:63:66:85:a0:b6:23:30:63:19:62:5c:
8b:4a:2a:fc:73:81:f3:db:61:08:e0:3a:37:4c:12:ed:09:1d:
b5:3f:ec:45:c2:e2:88:20:20:1b:04:4a:5b:4a:00:a6:30:f8:
01:90:f1:88:e8:3f:fe:4d:99:46:f0:10:20:ee:02:5b:01:73:
c3:85:94:c9:9e:96:81:2f:3d:ee:81:e2:a7:cf:cc:3f:73:5d:
54:98:9c:67:f9:c3:c7:2e:75:4b:1e:7b:05:7f:c8:a7:12:fc:
4a:73:e5:2b:04:66:1b:45:e5:e5:9f:74:55:57:16:9d:ac:ea:
27:49:f7:81:c9:44:c6:6e:ed:87:b5:e3:d6:60:34:0b:07:a1:
f8:18:28:01:ec:2f:2f:6e:76:cc:7d:63:70:13:e6:f7:9b:73:
58:56:96:0c:53:42:1b:e6:3d:8e:55:23:d6:77:85:1a:b5:15:
14:70:ae:cf:77:92:26:53:50:58:5c:2e:53:a4:0b:49:0f:de:
67:95:7c:7d:27:75:03:89:d5:31:72:7f:ec:0c:db:1d:e0:bd:
64:57:1b:99:c0:e5:57:73:01:37:20:e8:c3:1d:c3:75:1d:8e:
15:47:e1:17:ef:d0:2e:d2:f4:02:b6:13:92:bf:f5:98:ed:7c:
79:14:d7:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKRYqfi+0AuPWdpcqsmQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5
YWFlNTEwHhcNMjUwMzEyMjEwMDU3WhcNMjUwMzEzMjEwMDU3WjAzMTEwLwYDVQQD
EyhhZWEyMzQ4Y2ZkMWM2NTcyNjEyNTRmOTc0NDRmYmVjOThjY2IyZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5b6sgqo+RB4rj0WWw/lMGhdZGol
2KU/o/z8GfmVKj6ktu0w8Qcgz8j/N9FatNY2plI/xFe7/aXzvf8LDTYuasfMbWAC
FYOaDwZAVPY0nM7KgpihRCGTl8VncuPZALhImnOdFT55WzNPciM1JmWp1XQnBr19
u8bhDQCAi/GEoh3Q4xshKneO8YH38YD7R8p8XSxKXSvE6s5DzU73BI0eZ3FiQKjx
co8X6XraWJGc9sxLHs8OTjufzk/Be+d3VWfwz4g395v86mDKBYx84N6H3y1clANH
cGEDpXc19mjdg37yZSbIRqYnYpVbGzKCC+dMmvsIKy8q/oM7oBbwtCUe7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6iNIz9HGVyYSVPl0RPvsmMyy4UMB8GA1UdIwQY
MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt
ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4
LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE50nP0t
E2NmhaC2IzBjGWJci0oq/HOB89thCOA6N0wS7QkdtT/sRcLiiCAgGwRKW0oApjD4
AZDxiOg//k2ZRvAQIO4CWwFzw4WUyZ6WgS897oHip8/MP3NdVJicZ/nDxy51Sx57
BX/IpxL8SnPlKwRmG0Xl5Z90VVcWnazqJ0n3gclExm7th7Xj1mA0Cweh+BgoAewv
L252zH1jcBPm95tzWFaWDFNCG+Y9jlUj1neFGrUVFHCuz3eSJlNQWFwuU6QLSQ/e
Z5V8fSd1A4nVMXJ/7AzbHeC9ZFcbmcDlV3MBNyDowx3DdR2OFUfhF+/QLtL0ArYT
kr/1mO18eRTX2g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:25 2025 by rpki-client