Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File: ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier: 9B9K1SuhBX29OtJiKk206K467nxJDbY7FOBiB4TYkb8=
Subject key identifier: 5C:EB:67:88:CD:DE:C8:AE:9B:19:62:91:C9:54:B1:DB:17:08:AA:A0
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer: /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial: 019655DD425B1BAAEF5F9460C641C05DAB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 01:01:25 +0000
Manifest this update: Mon 21 Apr 2025 01:01:25 +0000
Manifest next update: Tue 22 Apr 2025 01:01:25 +0000
Files and hashes: 1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: BdU1Zgfwt+QDkHaAwD3Blwuy0MsWIrwu5k2h9Uqvgw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:42:5b:1b:aa:ef:5f:94:60:c6:41:c0:5d:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
Validity
Not Before: Apr 21 01:01:25 2025 GMT
Not After : Apr 22 01:01:25 2025 GMT
Subject: CN=5ceb6788cddec8ae9b196291c954b1db1708aaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:ba:5c:99:e0:62:2d:19:72:8b:72:54:3a:
0e:97:5f:54:0e:8a:db:31:97:f0:46:e4:df:73:d4:
95:47:f7:e7:b6:4b:f9:6e:22:01:c3:42:e9:2d:53:
60:3d:cd:18:c3:d7:6d:4f:8b:8e:60:c9:80:d2:d8:
10:7d:94:b3:9c:fa:78:be:5f:e1:36:02:77:b3:c1:
08:90:cd:14:6c:91:bc:0c:22:5b:e2:a5:9a:61:45:
a4:5d:49:bf:4d:d7:ea:85:53:bd:ae:ed:c8:4f:af:
65:0c:e6:64:07:51:e1:41:bc:16:4d:49:e2:26:30:
a3:6f:fe:19:02:03:df:75:9b:f6:42:7a:6a:ab:fa:
3c:18:44:57:89:f0:d4:35:b7:18:5e:a2:e3:06:9d:
29:aa:01:50:1f:67:e4:85:62:f2:6e:02:fa:c6:92:
77:65:0f:36:2c:20:0d:25:98:b6:00:e2:5d:8f:77:
63:f8:f4:69:9d:df:84:9f:1e:6f:7f:d0:93:2d:06:
2f:62:1a:2b:7d:e9:10:99:09:f7:c0:a5:ef:d0:80:
e8:68:c9:6a:46:7d:a4:63:df:f5:27:83:17:ab:d7:
e3:98:aa:13:d3:c6:e6:a4:cd:d0:81:20:46:cd:d1:
07:9a:0c:81:9e:ae:38:a3:7f:ad:a8:78:10:ec:23:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:67:88:CD:DE:C8:AE:9B:19:62:91:C9:54:B1:DB:17:08:AA:A0
X509v3 Authority Key Identifier:
keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:38:d2:a4:a3:04:01:2b:d3:a1:75:df:5d:7d:55:be:0e:2f:
26:79:a3:99:50:1c:09:2d:f6:34:7a:2b:c2:18:30:91:46:c0:
f9:fd:d0:e6:46:ae:3a:68:92:9a:c5:60:1e:41:52:79:df:5a:
4e:59:53:e3:99:8a:90:ec:2f:12:34:60:a6:a5:1f:d2:06:17:
13:be:a8:e5:dc:46:e9:bf:35:73:b4:74:8e:67:d6:3e:84:d2:
fb:19:f0:fd:16:06:fc:89:e9:de:fe:ea:de:33:b9:75:32:8e:
0a:a6:97:02:4e:da:d2:6e:c0:bb:2b:73:57:b2:25:7e:a3:32:
c2:42:7b:9d:31:26:14:04:53:14:63:5e:5b:ab:0a:04:5e:68:
46:b2:18:be:f7:53:4d:44:50:e4:5b:e5:9d:d9:37:c5:af:46:
c3:9e:ef:0f:e3:a3:3d:8c:81:5e:00:ec:ea:58:fe:78:c3:19:
29:b5:66:98:5e:21:21:f1:fe:2a:ff:24:10:f4:0b:8e:92:8f:
56:c7:f1:a3:56:28:fe:de:f6:28:96:45:a0:e5:d9:f2:72:76:
1e:34:22:49:f8:f3:31:43:e1:83:2f:71:8b:71:fa:c7:37:3f:
b3:06:8f:1f:85:16:2a:b0:82:15:0f:e2:9c:ac:e7:57:6a:de:
d5:ed:82:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3UJbG6rvX5RgxkHAXauFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjRlNjZkN2NiYTc3Yjk3NzY4NTU1OWMyNDgxYmI5MDQ0
YzViNzUwHhcNMjUwNDIxMDEwMTI1WhcNMjUwNDIyMDEwMTI1WjAzMTEwLwYDVQQD
Eyg1Y2ViNjc4OGNkZGVjOGFlOWIxOTYyOTFjOTU0YjFkYjE3MDhhYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw+6XJngYi0ZcotyVDoOl19UDorb
MZfwRuTfc9SVR/fntkv5biIBw0LpLVNgPc0Yw9dtT4uOYMmA0tgQfZSznPp4vl/h
NgJ3s8EIkM0UbJG8DCJb4qWaYUWkXUm/TdfqhVO9ru3IT69lDOZkB1HhQbwWTUni
JjCjb/4ZAgPfdZv2Qnpqq/o8GERXifDUNbcYXqLjBp0pqgFQH2fkhWLybgL6xpJ3
ZQ82LCANJZi2AOJdj3dj+PRpnd+Enx5vf9CTLQYvYhorfekQmQn3wKXv0IDoaMlq
Rn2kY9/1J4MXq9fjmKoT08bmpM3QgSBGzdEHmgyBnq44o3+tqHgQ7CPIWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzrZ4jN3siumxlikclUsdsXCKqgMB8GA1UdIwQY
MBaAFBAk5m18une5d2hVWcJIG7kETFt1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMTU1YzktMTNlMi00YjI4LWI2ODIt
NDdlYTNmODc0MzU1LzEvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hMTU1YzktMTNlMi00YjI4LWI2ODItNDdlYTNmODc0MzU1
LzEvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljjSpKME
ASvToXXfXX1Vvg4vJnmjmVAcCS32NHorwhgwkUbA+f3Q5kauOmiSmsVgHkFSed9a
TllT45mKkOwvEjRgpqUf0gYXE76o5dxG6b81c7R0jmfWPoTS+xnw/RYG/Inp3v7q
3jO5dTKOCqaXAk7a0m7AuytzV7IlfqMywkJ7nTEmFARTFGNeW6sKBF5oRrIYvvdT
TURQ5Fvlndk3xa9Gw57vD+OjPYyBXgDs6lj+eMMZKbVmmF4hIfH+Kv8kEPQLjpKP
Vsfxo1Yo/t72KJZFoOXZ8nJ2HjQiSfjzMUPhgy9xi3H6xzc/swaPH4UWKrCCFQ/i
nKznV2re1e2CkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:24 2025 by rpki-client