Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: reyq0rnnvwseSCdiQSUmBvLxDUkSJxI7LHkutjAA3Ck=
Subject key identifier: 79:27:0F:D7:6C:10:7B:B6:6C:6D:53:D4:C9:D9:FB:27:54:0F:0B:C0
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 01975490EC3A670855B6474E2F0A65D446D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 1106
Signing time: Mon 09 Jun 2025 12:01:12 +0000
Manifest this update: Mon 09 Jun 2025 12:01:12 +0000
Manifest next update: Tue 10 Jun 2025 12:01:12 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: itWnf0MvhC9LE+E54ioaOtJFQ2U9sOElv0SNXPlb2ps=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:ec:3a:67:08:55:b6:47:4e:2f:0a:65:d4:46:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Jun 9 12:01:12 2025 GMT
Not After : Jun 10 12:01:12 2025 GMT
Subject: CN=79270fd76c107bb66c6d53d4c9d9fb27540f0bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:6b:e6:8e:11:0a:db:ae:54:ea:9d:c8:ed:
42:31:4e:46:51:a7:75:e5:53:d8:0a:00:23:1e:e8:
05:19:05:c4:3a:c8:40:7a:b8:77:e0:f2:f3:c8:28:
49:60:65:f2:f4:3d:d8:5c:ac:67:fc:6f:7a:c1:97:
d9:fb:d3:8f:f3:96:95:96:59:22:25:5d:5a:2f:40:
18:c3:8d:81:74:cd:3b:b1:da:7b:c2:a0:74:f2:c4:
40:1f:88:4e:55:b8:b0:5b:d3:91:d2:0e:d0:22:e4:
e7:5a:68:3c:a7:6d:50:7e:af:55:60:2e:d1:ce:44:
5d:38:dd:a4:ee:6e:43:41:8a:2a:dc:63:dc:3e:9e:
55:bb:bb:dc:04:e1:77:8e:8c:1b:98:47:05:21:3d:
e4:05:f5:d3:74:b1:f8:3a:69:73:cf:55:01:dd:42:
9d:44:df:a7:03:28:91:9a:b8:e2:ec:2e:9e:0a:bf:
cc:67:b1:13:49:7b:8f:9f:f4:15:8c:9c:19:63:5a:
42:79:db:46:1d:22:82:bc:43:64:c2:c5:51:7a:51:
13:fa:5e:83:56:04:46:f3:e2:80:ae:03:64:d5:cd:
1b:19:74:44:60:5e:3d:b7:f0:e8:98:d3:71:7b:d2:
81:df:6c:a9:1b:9b:69:93:82:a5:2f:a9:31:0f:f7:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:0F:D7:6C:10:7B:B6:6C:6D:53:D4:C9:D9:FB:27:54:0F:0B:C0
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:6a:bc:6b:6e:67:90:d6:91:aa:ac:b7:aa:06:fd:f2:ca:
11:66:f2:b7:27:2a:e7:a9:da:51:94:5f:61:34:c2:47:55:84:
29:47:bf:af:42:53:10:4f:07:79:29:19:73:59:16:ca:bb:c3:
9d:16:d2:e0:89:91:20:5b:ba:7d:03:db:8f:48:96:33:1d:a7:
da:17:1f:a8:94:40:63:95:0a:f6:a4:83:a5:62:2a:99:c4:83:
5a:71:c5:e4:f2:89:97:90:03:de:0e:76:59:a2:0d:41:2a:d7:
d5:00:01:e7:d4:a8:f6:e2:6c:87:21:aa:10:f8:eb:5b:60:a0:
e6:76:e5:41:03:a9:cb:61:cb:7f:d6:62:8b:63:09:56:ab:31:
15:49:f3:51:d8:96:0e:81:2c:04:ca:77:77:13:58:f0:a6:57:
b1:5a:58:47:54:42:6e:6d:39:37:fb:d7:3d:6b:eb:44:e9:e0:
7d:c9:85:3c:e5:00:7c:79:48:3e:99:58:b4:9b:44:85:a9:af:
18:f2:de:88:6c:34:3e:84:84:ca:f2:28:a5:3d:2f:ad:74:14:
56:bf:74:c5:07:70:33:ee:f1:82:1d:ee:0e:8b:5e:d7:11:e8:
2b:05:da:f9:1e:03:c4:f9:98:41:10:88:c4:0f:6f:25:10:eb:
50:a2:36:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUkOw6ZwhVtkdOLwpl1EbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjEyMWNmMDYzMjgxOWVlY2VhYmViOGE5NTU2OWM2NzUy
OTg4MjEwHhcNMjUwNjA5MTIwMTEyWhcNMjUwNjEwMTIwMTEyWjAzMTEwLwYDVQQD
Eyg3OTI3MGZkNzZjMTA3YmI2NmM2ZDUzZDRjOWQ5ZmIyNzU0MGYwYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuChr5o4RCtuuVOqdyO1CMU5GUad1
5VPYCgAjHugFGQXEOshAerh34PLzyChJYGXy9D3YXKxn/G96wZfZ+9OP85aVllki
JV1aL0AYw42BdM07sdp7wqB08sRAH4hOVbiwW9OR0g7QIuTnWmg8p21Qfq9VYC7R
zkRdON2k7m5DQYoq3GPcPp5Vu7vcBOF3jowbmEcFIT3kBfXTdLH4Omlzz1UB3UKd
RN+nAyiRmrji7C6eCr/MZ7ETSXuPn/QVjJwZY1pCedtGHSKCvENkwsVRelET+l6D
VgRG8+KArgNk1c0bGXREYF49t/DomNNxe9KB32ypG5tpk4KlL6kxD/eH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHknD9dsEHu2bG1T1MnZ+ydUDwvAMB8GA1UdIwQY
MBaAFD6xIc8GMoGe7Oq+uKlVacZ1KYghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQt
NmU3MzlmMDJkNTEyLzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQtNmU3MzlmMDJkNTEy
LzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCVqvGtu
Z5DWkaqst6oG/fLKEWbytycq56naUZRfYTTCR1WEKUe/r0JTEE8HeSkZc1kWyrvD
nRbS4ImRIFu6fQPbj0iWMx2n2hcfqJRAY5UK9qSDpWIqmcSDWnHF5PKJl5AD3g52
WaINQSrX1QAB59So9uJshyGqEPjrW2Cg5nblQQOpy2HLf9Zii2MJVqsxFUnzUdiW
DoEsBMp3dxNY8KZXsVpYR1RCbm05N/vXPWvrROngfcmFPOUAfHlIPplYtJtEhamv
GPLeiGw0PoSEyvIopT0vrXQUVr90xQdwM+7xgh3uDote1xHoKwXa+R4DxPmYQRCI
xA9vJRDrUKI2AA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 15:36:12 2025 by rpki-client