Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier: z6tATFcWOJ8nvxckLUehnVNoDpad5ffZS3JgcEQPc/Q=
Subject key identifier: 47:A8:20:E3:60:FC:9B:BF:AF:07:39:1B:D2:E9:7D:77:D2:68:90:DB
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 01960F7BAF2A2A21B4AC8C659A27844C5EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number: 14E4
Signing time: Mon 07 Apr 2025 09:01:25 +0000
Manifest this update: Mon 07 Apr 2025 09:01:25 +0000
Manifest next update: Tue 08 Apr 2025 09:01:25 +0000
Files and hashes: 1: GdDoydsiseWesyFp8nfXLAwY-Ss.roa (hash: ZX3EqP0ya1H5H5fx2BO7+jv6fp5rUfEUzpZL5ygfDiA=)
2: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: iHYAS/HwXoxHLebgSo2Mpw6mai8FRlfGI1TAa2YZxf4=)
3: yujM9boXq2owCDALS6fBRuV-QS4.roa (hash: uBWZxd0MuVhnf/a/H4XCYeoko2cyqYwJN4ZzBnbQh88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:af:2a:2a:21:b4:ac:8c:65:9a:27:84:4c:5e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Apr 7 09:01:25 2025 GMT
Not After : Apr 8 09:01:25 2025 GMT
Subject: CN=47a820e360fc9bbfaf07391bd2e97d77d26890db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:45:59:d2:95:e3:9a:2f:c0:3b:41:aa:e6:
20:6e:4d:29:7c:11:1a:a4:50:db:d5:63:d0:76:b0:
71:82:0c:ce:ce:07:5d:aa:c4:ee:ed:d8:32:3d:c9:
70:73:bd:88:ac:1b:b2:cd:e9:df:99:c8:c5:50:1b:
2b:df:10:00:a8:8d:39:d3:c1:8b:bb:67:fa:09:e8:
1b:14:e2:f2:fc:83:6b:a1:b9:af:0d:9c:65:04:be:
63:79:01:b4:91:52:8e:1b:ad:de:cf:6a:26:7f:67:
10:bb:5a:fc:b7:a7:d1:05:31:54:b9:2b:c9:08:29:
46:73:22:3d:9b:a3:2a:02:ba:7f:0a:23:be:ea:17:
dc:6d:ae:16:db:b2:cf:1e:56:bc:4f:e7:80:0e:71:
62:7c:85:37:23:04:f7:cf:d5:fb:57:b3:95:d4:ff:
61:a3:5f:1e:d0:0b:fa:b7:1d:76:41:36:74:d9:cd:
5b:87:8f:aa:ca:36:e4:37:88:15:59:93:32:eb:b3:
c5:86:1f:c1:1a:eb:59:9a:12:d8:c7:0c:66:e7:61:
ab:7b:9a:14:6f:92:f3:f3:10:9b:f2:24:bb:81:28:
04:4b:c0:fe:a0:78:0c:a7:13:c6:65:21:dd:ba:e3:
f8:bf:dd:e9:3f:70:41:99:23:92:41:a6:92:d6:28:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:20:E3:60:FC:9B:BF:AF:07:39:1B:D2:E9:7D:77:D2:68:90:DB
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:a6:69:14:ff:5b:eb:e5:e7:46:04:18:7d:98:14:c5:4b:
64:f6:cf:06:79:2d:69:8a:b7:63:3c:f2:b7:98:ce:5c:26:c8:
72:64:64:77:5c:7b:1d:78:32:52:c3:2e:fb:4d:06:94:a2:4b:
40:c4:1e:9a:fe:f2:ad:1c:13:e5:6c:59:05:e6:6f:95:72:94:
c2:bc:8c:4a:b8:37:45:69:a5:3d:e4:b4:80:e4:aa:7c:44:fd:
29:a4:41:49:e3:38:65:e7:8e:88:d5:6c:fe:d9:ec:b6:25:04:
54:7d:27:90:4e:1b:a7:a7:be:43:71:8b:b4:63:25:6f:e5:e7:
73:ca:5b:b4:a7:e8:37:4a:86:c3:d3:9e:76:28:16:16:6d:ea:
9f:86:ab:f8:ca:e0:61:ea:13:d0:c7:ca:86:75:70:06:2e:82:
dc:c2:33:f8:15:98:d7:0d:33:cc:d3:c9:14:79:01:fe:6f:07:
bb:83:cd:7d:7d:e9:e8:fe:58:34:6e:d0:c3:de:d3:63:1e:af:
a4:bf:b9:34:ce:e9:eb:94:d2:d2:25:bd:3a:2c:c4:39:0c:91:
0e:e8:a7:00:e2:a1:f6:3b:f7:ce:c3:f9:dd:0d:dd:b7:dd:4c:
9e:b9:79:5c:2e:5f:c1:66:d3:91:4e:52:76:b4:08:53:fa:a7:
e1:b4:bd:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPe68qKiG0rIxlmieETF7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDdhYWFiMjIwNmMwODEyOGY1NDM3MzAwNjRhMTQ1YTNl
ZmZhMTQwHhcNMjUwNDA3MDkwMTI1WhcNMjUwNDA4MDkwMTI1WjAzMTEwLwYDVQQD
Eyg0N2E4MjBlMzYwZmM5YmJmYWYwNzM5MWJkMmU5N2Q3N2QyNjg5MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYJFWdKV45ovwDtBquYgbk0pfBEa
pFDb1WPQdrBxggzOzgddqsTu7dgyPclwc72IrBuyzenfmcjFUBsr3xAAqI0508GL
u2f6CegbFOLy/INrobmvDZxlBL5jeQG0kVKOG63ez2omf2cQu1r8t6fRBTFUuSvJ
CClGcyI9m6MqArp/CiO+6hfcba4W27LPHla8T+eADnFifIU3IwT3z9X7V7OV1P9h
o18e0Av6tx12QTZ02c1bh4+qyjbkN4gVWZMy67PFhh/BGutZmhLYxwxm52Gre5oU
b5Lz8xCb8iS7gSgES8D+oHgMpxPGZSHduuP4v93pP3BBmSOSQaaS1ihvTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeoIONg/Ju/rwc5G9LpfXfSaJDbMB8GA1UdIwQY
MBaAFCNHqqsiBsCBKPVDcwBkoUWj7/oUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQt
NzU4NDA2NjFlYWY1LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQtNzU4NDA2NjFlYWY1
LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLamaRT/
W+vl50YEGH2YFMVLZPbPBnktaYq3Yzzyt5jOXCbIcmRkd1x7HXgyUsMu+00GlKJL
QMQemv7yrRwT5WxZBeZvlXKUwryMSrg3RWmlPeS0gOSqfET9KaRBSeM4ZeeOiNVs
/tnstiUEVH0nkE4bp6e+Q3GLtGMlb+Xnc8pbtKfoN0qGw9OedigWFm3qn4ar+Mrg
YeoT0MfKhnVwBi6C3MIz+BWY1w0zzNPJFHkB/m8Hu4PNfX3p6P5YNG7Qw97TYx6v
pL+5NM7p65TS0iW9OizEOQyRDuinAOKh9jv3zsP53Q3dt91Mnrl5XC5fwWbTkU5S
drQIU/qn4bS9bQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:32:22 2025 by rpki-client