Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: vBSzQuJxy5AbyXuN0rZvhXkOZen0sA5eeoMsJm6bfvc=
Subject key identifier: 3A:0B:3C:B6:EA:69:4D:9D:8D:FF:27:9E:5C:E0:02:95:BC:F8:EB:D8
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 019611A0BCEF70EA244C77506E9BA66CC752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0996
Signing time: Mon 07 Apr 2025 19:01:08 +0000
Manifest this update: Mon 07 Apr 2025 19:01:08 +0000
Manifest next update: Tue 08 Apr 2025 19:01:08 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: mlLuZJO4t1FEwpAyY5PDHox+00UihVvatlxsdri9Ndg=)
2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:bc:ef:70:ea:24:4c:77:50:6e:9b:a6:6c:c7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Apr 7 19:01:08 2025 GMT
Not After : Apr 8 19:01:08 2025 GMT
Subject: CN=3a0b3cb6ea694d9d8dff279e5ce00295bcf8ebd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:b4:68:96:f5:3f:6e:85:ef:0d:59:3c:41:
f9:9b:60:aa:4b:17:cc:73:0d:90:3a:22:5d:f5:ea:
66:f1:53:00:66:ed:d6:2c:16:ab:82:e4:cb:93:15:
6b:cf:46:39:d4:9c:4f:87:d1:ed:64:5b:3e:3e:c5:
af:91:3e:5b:b0:66:82:57:45:e5:5a:ac:86:64:31:
59:c8:c8:bb:d6:eb:32:bb:20:8d:65:70:03:43:77:
23:93:58:5b:5b:8f:41:e5:08:a1:c0:8a:33:19:91:
23:2b:a0:36:09:68:83:12:10:e4:bb:77:ff:de:0f:
17:48:a2:6b:b0:62:e4:76:f9:78:24:ee:99:c1:69:
89:8f:4f:3f:19:62:fb:1b:24:d6:0b:42:c8:89:ce:
9e:ce:d0:4b:5e:f0:1e:c2:99:74:73:f7:31:b1:9e:
59:08:67:c7:d0:9b:66:77:e5:8a:b7:64:20:e4:7d:
be:62:3d:50:a8:fb:34:38:b6:fa:53:4f:1e:e3:43:
f7:a1:cb:38:3a:6c:70:1b:d4:b5:3f:e0:eb:91:78:
1c:50:6b:01:2b:a7:50:fa:eb:93:b1:3f:77:82:8b:
91:cb:e1:74:3e:5a:8d:7d:aa:59:cf:42:1c:c0:52:
f9:83:25:60:d6:91:aa:c8:36:e7:5d:e1:c5:3f:e4:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0B:3C:B6:EA:69:4D:9D:8D:FF:27:9E:5C:E0:02:95:BC:F8:EB:D8
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:97:64:54:fe:1f:d5:6a:1b:d5:76:a1:c7:49:80:d8:5f:1e:
2a:cb:f0:45:5c:d5:d6:63:f7:01:92:53:77:44:a6:b5:65:2e:
65:b5:ea:c5:e0:e6:82:31:da:e0:ba:f8:be:c9:3e:b3:00:e1:
8a:16:eb:31:07:ea:c9:e7:88:5e:ed:18:d2:8b:5e:b5:6e:4d:
a2:68:fa:79:69:7d:c9:be:74:92:d9:c9:d2:14:7a:62:c9:51:
b1:b5:93:5e:5f:9b:08:3b:bc:58:3b:1f:c9:21:75:dd:da:2a:
19:20:98:63:b3:74:88:94:03:a5:4d:a1:e3:5b:6f:af:13:35:
6e:14:e2:00:c9:67:23:3b:26:88:25:18:be:6d:f9:37:94:e0:
d7:90:c8:9a:53:a3:34:a9:d7:da:b7:aa:ec:a6:32:0d:0c:0d:
fb:a9:33:25:0d:0b:bf:43:06:55:0c:45:b0:e5:59:27:db:be:
0f:67:32:e7:3a:4d:ee:a2:d7:93:cb:53:00:0f:00:19:61:97:
23:a0:dd:87:9c:56:7e:f1:8a:9c:9c:8d:0e:b7:ec:78:de:a7:
c1:eb:de:e5:94:24:1b:99:70:18:99:75:d9:23:1d:50:16:e0:
8c:04:1d:7b:67:a2:a9:cb:65:c9:76:ef:7a:47:64:5e:6b:b3:
1a:c3:0c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoLzvcOokTHdQbpumbMdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjUwNDA3MTkwMTA4WhcNMjUwNDA4MTkwMTA4WjAzMTEwLwYDVQQD
EygzYTBiM2NiNmVhNjk0ZDlkOGRmZjI3OWU1Y2UwMDI5NWJjZjhlYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhai0aJb1P26F7w1ZPEH5m2CqSxfM
cw2QOiJd9epm8VMAZu3WLBarguTLkxVrz0Y51JxPh9HtZFs+PsWvkT5bsGaCV0Xl
WqyGZDFZyMi71usyuyCNZXADQ3cjk1hbW49B5QihwIozGZEjK6A2CWiDEhDku3f/
3g8XSKJrsGLkdvl4JO6ZwWmJj08/GWL7GyTWC0LIic6eztBLXvAewpl0c/cxsZ5Z
CGfH0Jtmd+WKt2Qg5H2+Yj1QqPs0OLb6U08e40P3ocs4OmxwG9S1P+DrkXgcUGsB
K6dQ+uuTsT93gouRy+F0PlqNfapZz0IcwFL5gyVg1pGqyDbnXeHFP+QryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoLPLbqaU2djf8nnlzgApW8+OvYMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpdkVP4f
1Wob1Xahx0mA2F8eKsvwRVzV1mP3AZJTd0SmtWUuZbXqxeDmgjHa4Lr4vsk+swDh
ihbrMQfqyeeIXu0Y0otetW5Nomj6eWl9yb50ktnJ0hR6YslRsbWTXl+bCDu8WDsf
ySF13doqGSCYY7N0iJQDpU2h41tvrxM1bhTiAMlnIzsmiCUYvm35N5Tg15DImlOj
NKnX2req7KYyDQwN+6kzJQ0Lv0MGVQxFsOVZJ9u+D2cy5zpN7qLXk8tTAA8AGWGX
I6Ddh5xWfvGKnJyNDrfseN6nweve5ZQkG5lwGJl12SMdUBbgjAQde2eiqctlyXbv
ekdkXmuzGsMMyA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:34 2025 by rpki-client