
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier: xQPXANNaDWMNCh2rm6J7IQXKAptDAx/XB4pYfFFJBAM=
Subject key identifier: BF:2E:AF:F3:49:00:CC:E3:77:1E:63:B9:58:93:B4:E4:2E:CE:84:49
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial: 019629E06E085D58FFF0F13FC961D2B740BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number: 0B0E
Signing time: Sat 12 Apr 2025 12:01:36 +0000
Manifest this update: Sat 12 Apr 2025 12:01:36 +0000
Manifest next update: Sun 13 Apr 2025 12:01:36 +0000
Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: wheT3JYtrc7n96HbsPsSyXFNiZx+6An10Ic2NAnxViA=)
2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:6e:08:5d:58:ff:f0:f1:3f:c9:61:d2:b7:40:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Validity
Not Before: Apr 12 12:01:36 2025 GMT
Not After : Apr 13 12:01:36 2025 GMT
Subject: CN=bf2eaff34900cce3771e63b95893b4e42ece8449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:0f:2d:5a:7b:1c:e1:90:73:fa:3f:9f:2f:
c0:72:6b:95:6b:f8:87:89:e2:2d:28:6c:a4:f2:63:
c0:35:7e:9f:39:75:e2:53:d2:9f:34:06:25:9d:a6:
23:06:a9:be:99:56:e5:2a:12:a4:5d:e7:25:18:43:
90:e8:78:77:7a:4a:a0:51:8a:1f:8b:17:0b:ee:dd:
2e:d3:23:fb:5d:2d:31:e4:6e:c3:40:fe:92:64:79:
da:6f:9e:51:34:9c:a4:4e:c2:75:56:0e:4a:88:9e:
06:df:cd:ef:4f:b8:2f:c0:a6:aa:17:ac:14:79:d8:
4e:3a:cc:dc:11:44:bb:c0:d5:32:f6:5d:be:fc:b0:
ca:73:91:57:a9:0c:97:99:03:88:ee:5e:52:ad:04:
56:5b:33:fe:db:f6:1c:2e:6e:e3:19:4e:35:5e:fc:
7a:48:f3:a7:b8:3f:ab:b2:d7:a2:03:61:cd:89:19:
73:77:1a:2e:e8:3d:fe:3a:63:52:36:24:13:ca:b0:
90:53:f9:17:07:bc:76:73:cc:15:a4:89:3d:2b:79:
00:63:04:23:39:ee:c8:a5:11:30:4e:54:03:b9:5f:
a5:9e:ce:37:d1:31:d0:ee:81:c1:7c:5c:a0:9b:f7:
7a:a7:b5:53:71:70:58:75:4d:52:41:ab:b1:df:a2:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:AF:F3:49:00:CC:E3:77:1E:63:B9:58:93:B4:E4:2E:CE:84:49
X509v3 Authority Key Identifier:
keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:04:ba:f2:41:e0:94:ac:ae:69:00:cb:e2:6c:8a:7b:d5:ad:
45:f1:d6:b9:90:63:ee:30:d2:78:18:6d:33:a7:d8:3c:2e:bc:
36:a1:d5:4a:9a:bb:c7:c9:99:0c:7e:cd:dc:47:e8:81:56:fe:
33:2e:de:75:71:d1:12:5e:87:6e:ee:87:52:e0:93:ac:cf:6f:
96:2c:25:9d:78:60:c6:e8:92:a9:34:78:45:ea:a9:1b:93:3a:
fd:36:3c:8b:f0:92:b7:57:cb:80:2f:6e:12:1b:05:75:dc:6c:
fb:d0:f4:4a:19:06:18:f0:d2:37:7a:a1:48:6d:1f:9b:35:a7:
fb:aa:f8:f9:90:c8:af:7b:59:c6:68:01:4c:89:47:d1:e5:ac:
e7:d5:23:9e:99:83:fd:2c:2a:25:96:15:5e:f4:b9:4d:ce:d9:
b0:30:e4:38:45:01:e0:97:71:7a:91:40:f6:08:f5:0c:e9:95:
fd:05:df:1c:81:8b:88:d3:18:0f:39:f7:ee:f4:2c:c6:c8:fc:
5f:fb:fa:2d:bd:e1:d4:25:58:44:53:01:4c:d3:a1:ca:af:cc:
d9:39:b5:e9:f9:12:43:21:e3:30:09:3b:29:a8:ab:8c:1d:e8:
16:cd:de:35:b9:f4:ff:14:3e:db:82:7a:25:ab:15:ce:38:f7:
d0:58:1e:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYp4G4IXVj/8PE/yWHSt0C7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi
OWZlMDQwHhcNMjUwNDEyMTIwMTM2WhcNMjUwNDEzMTIwMTM2WjAzMTEwLwYDVQQD
EyhiZjJlYWZmMzQ5MDBjY2UzNzcxZTYzYjk1ODkzYjRlNDJlY2U4NDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNgPLVp7HOGQc/o/ny/AcmuVa/iH
ieItKGyk8mPANX6fOXXiU9KfNAYlnaYjBqm+mVblKhKkXeclGEOQ6Hh3ekqgUYof
ixcL7t0u0yP7XS0x5G7DQP6SZHnab55RNJykTsJ1Vg5KiJ4G383vT7gvwKaqF6wU
edhOOszcEUS7wNUy9l2+/LDKc5FXqQyXmQOI7l5SrQRWWzP+2/YcLm7jGU41Xvx6
SPOnuD+rsteiA2HNiRlzdxou6D3+OmNSNiQTyrCQU/kXB7x2c8wVpIk9K3kAYwQj
Oe7IpREwTlQDuV+lns430THQ7oHBfFygm/d6p7VTcXBYdU1SQaux36LCWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8ur/NJAMzjdx5juViTtOQuzoRJMB8GA1UdIwQY
MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt
MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4
LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQS68kHg
lKyuaQDL4myKe9WtRfHWuZBj7jDSeBhtM6fYPC68NqHVSpq7x8mZDH7N3EfogVb+
My7edXHREl6Hbu6HUuCTrM9vliwlnXhgxuiSqTR4ReqpG5M6/TY8i/CSt1fLgC9u
EhsFddxs+9D0ShkGGPDSN3qhSG0fmzWn+6r4+ZDIr3tZxmgBTIlH0eWs59UjnpmD
/SwqJZYVXvS5Tc7ZsDDkOEUB4JdxepFA9gj1DOmV/QXfHIGLiNMYDzn37vQsxsj8
X/v6Lb3h1CVYRFMBTNOhyq/M2Tm16fkSQyHjMAk7KairjB3oFs3eNbn0/xQ+24J6
JasVzjj30FgexA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:44 2025 by rpki-client