Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: tw5IostWPEDFOB4sQldHI8pIHuhfhIFUrdfJCdd98ew=
Subject key identifier: 17:D3:FE:8C:4E:2E:19:43:33:24:B0:B8:D6:31:28:61:3D:8E:B6:27
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 01964D7E2C0D221FAAD4709A304F6E5E566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 0F72
Signing time: Sat 19 Apr 2025 10:00:36 +0000
Manifest this update: Sat 19 Apr 2025 10:00:36 +0000
Manifest next update: Sun 20 Apr 2025 10:00:36 +0000
Files and hashes: 1: EyXyZh1NMVmQSwOvgsi_6X0fzdc.roa (hash: zdUTP+PrB9t/KpvAQvCmMyip6WSChLUYJHZuuaMU0rs=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: WqPQX5xFExUW1GsfIGI/sU5L/npeWCVmt/SP4K8gzeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:2c:0d:22:1f:aa:d4:70:9a:30:4f:6e:5e:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Apr 19 10:00:36 2025 GMT
Not After : Apr 20 10:00:36 2025 GMT
Subject: CN=17d3fe8c4e2e19433324b0b8d63128613d8eb627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:a8:27:8d:3a:ce:f7:1b:01:d1:21:a4:9a:
8a:fc:32:c9:1d:51:c5:eb:74:a1:e2:85:69:be:cf:
5f:2c:2d:3e:76:52:21:28:50:45:44:42:c9:dc:84:
ba:f6:62:74:af:27:77:86:50:61:3e:1f:06:d0:a1:
ac:b0:90:89:4c:d8:bb:a8:50:2b:37:1d:2e:1d:c7:
dc:f8:ce:35:9c:fa:d0:86:14:73:66:14:5c:c1:b0:
02:9f:9e:45:60:da:a3:25:02:1d:f8:ca:a7:a9:ec:
07:7d:a1:37:cd:b0:ca:cf:37:df:65:ba:7a:8e:e5:
71:83:e1:af:10:64:15:28:81:4d:c5:70:a2:dc:dc:
24:0f:0d:67:5e:9e:6b:df:8a:f4:59:3d:ed:4b:1d:
b9:2f:98:97:4f:46:87:4a:89:96:05:78:3a:ec:2d:
84:b3:ec:7e:64:25:28:f3:59:d2:26:c1:b4:f8:45:
0e:6c:a0:9e:03:84:d7:a8:74:3f:02:f4:aa:39:4f:
4e:cb:23:d9:69:40:82:86:c4:fb:62:a0:2c:37:fe:
29:35:4f:5a:5d:3e:d8:9b:98:27:11:25:af:c3:ae:
4c:a2:c0:84:df:5b:b0:b2:8a:82:83:11:d5:cd:a4:
e4:cd:dd:b8:65:59:75:6a:3c:c5:21:e0:b6:b3:04:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:FE:8C:4E:2E:19:43:33:24:B0:B8:D6:31:28:61:3D:8E:B6:27
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c2:5e:da:f1:18:ef:25:38:eb:ed:b9:4f:66:49:6d:47:a2:
9e:2f:6e:32:f3:86:04:e3:81:24:ae:a3:1d:cf:e2:31:e5:cf:
ec:6a:1b:12:0d:40:a0:de:61:10:7f:af:10:08:30:c3:ec:9e:
8b:e9:23:fe:51:14:91:23:61:1a:64:09:0d:ba:ff:2f:77:bb:
70:23:8e:d9:7b:81:10:d5:38:fc:66:81:e1:dc:54:21:c2:46:
e4:ae:d0:eb:49:04:54:84:3c:ef:42:24:87:74:7d:ad:8d:2d:
67:3a:4f:c9:0a:cc:62:ba:c6:e8:d0:d5:8c:fa:e4:14:47:b9:
09:d1:29:cd:36:c2:75:f0:6c:f8:94:18:4d:47:67:ff:62:55:
7a:fe:6a:a1:e9:79:bf:44:82:f7:12:a2:f9:b6:aa:95:8a:e6:
05:a1:9a:4d:6a:c5:76:aa:0f:4b:ca:e3:8a:00:ca:a5:6a:38:
ea:10:97:27:11:e9:a5:a9:d8:fa:04:23:b3:96:fe:5a:63:2c:
8a:c5:70:da:fe:86:28:02:c8:71:88:26:ee:d3:74:80:11:88:
67:7f:90:af:df:5c:6e:bf:48:e6:96:f0:95:2b:63:68:71:fe:
ce:d2:e3:49:70:b9:bb:1c:83:07:08:18:de:7d:42:da:69:d5:
e5:1c:fa:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfiwNIh+q1HCaME9uXlZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDMyNTNhMzY4ZmM2NDc1ODUzOTcxYmE5MjM1YmUwMjMz
ZDhiN2MwHhcNMjUwNDE5MTAwMDM2WhcNMjUwNDIwMTAwMDM2WjAzMTEwLwYDVQQD
EygxN2QzZmU4YzRlMmUxOTQzMzMyNGIwYjhkNjMxMjg2MTNkOGViNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEqoJ406zvcbAdEhpJqK/DLJHVHF
63Sh4oVpvs9fLC0+dlIhKFBFRELJ3IS69mJ0ryd3hlBhPh8G0KGssJCJTNi7qFAr
Nx0uHcfc+M41nPrQhhRzZhRcwbACn55FYNqjJQId+MqnqewHfaE3zbDKzzffZbp6
juVxg+GvEGQVKIFNxXCi3NwkDw1nXp5r34r0WT3tSx25L5iXT0aHSomWBXg67C2E
s+x+ZCUo81nSJsG0+EUObKCeA4TXqHQ/AvSqOU9OyyPZaUCChsT7YqAsN/4pNU9a
XT7Ym5gnESWvw65MosCE31uwsoqCgxHVzaTkzd24ZVl1ajzFIeC2swSgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfT/oxOLhlDMySwuNYxKGE9jrYnMB8GA1UdIwQY
MBaAFHpDJTo2j8ZHWFOXG6kjW+AjPYt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtNbE9qYVB4a2RZVTVjYnFTTmI0Q005aTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iY2FlN2QtOWRhYS00ZmMxLTgwN2It
N2Y2ZGVhMzhlN2FhLzEvZWtNbE9qYVB4a2RZVTVjYnFTTmI0Q005aTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iY2FlN2QtOWRhYS00ZmMxLTgwN2ItN2Y2ZGVhMzhlN2Fh
LzEvZWtNbE9qYVB4a2RZVTVjYnFTTmI0Q005aTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsJe2vEY
7yU46+25T2ZJbUeini9uMvOGBOOBJK6jHc/iMeXP7GobEg1AoN5hEH+vEAgww+ye
i+kj/lEUkSNhGmQJDbr/L3e7cCOO2XuBENU4/GaB4dxUIcJG5K7Q60kEVIQ870Ik
h3R9rY0tZzpPyQrMYrrG6NDVjPrkFEe5CdEpzTbCdfBs+JQYTUdn/2JVev5qoel5
v0SC9xKi+baqlYrmBaGaTWrFdqoPS8rjigDKpWo46hCXJxHppanY+gQjs5b+WmMs
isVw2v6GKALIcYgm7tN0gBGIZ3+Qr99cbr9I5pbwlStjaHH+ztLjSXC5uxyDBwgY
3n1C2mnV5Rz6TQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:16 2025 by rpki-client