Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: a+4jd2WMiB6EsIFHwTE4Wk4BGZcBE7c0fZsTqyvWWSI=
Subject key identifier: 74:EA:2D:2F:82:B4:5B:1D:5D:98:F2:6A:D5:7B:73:17:13:C3:E0:09
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 019653122220129EFA7103DBFF7B89A2D8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 0EF8
Signing time: Sun 20 Apr 2025 12:00:19 +0000
Manifest this update: Sun 20 Apr 2025 12:00:19 +0000
Manifest next update: Mon 21 Apr 2025 12:00:19 +0000
Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: NQ5GzR3F3qcDrHdnol+z+knpt5sTeqHQ2p27UW4YPN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:22:20:12:9e:fa:71:03:db:ff:7b:89:a2:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Apr 20 12:00:19 2025 GMT
Not After : Apr 21 12:00:19 2025 GMT
Subject: CN=74ea2d2f82b45b1d5d98f26ad57b731713c3e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:19:a1:2f:24:6a:bc:36:57:bd:b2:69:d4:
93:40:4e:5c:81:43:c5:96:45:90:04:cc:c7:4d:a9:
2c:b3:fa:3d:fb:05:77:e8:e8:42:c4:b4:4f:bf:b8:
11:4f:15:94:2f:d6:ac:b0:65:29:4e:78:f1:b2:34:
75:d4:b9:75:0c:31:2d:e7:34:61:38:14:f1:0f:7a:
3e:41:54:51:1e:cc:7f:2a:2f:a8:40:1b:0e:d3:4c:
73:1d:0a:15:ea:0d:1a:d4:45:ba:d1:5b:b8:78:be:
0c:22:01:21:0b:5e:16:ca:a7:dd:e8:91:fb:e6:ed:
27:44:37:ba:2f:77:de:1e:2e:28:6b:30:75:ed:06:
f6:13:4c:0b:08:9a:90:36:f1:03:0b:ac:83:cb:27:
22:67:33:d8:82:e8:73:05:1a:ec:76:c4:ac:08:64:
b8:4f:09:f0:db:57:2a:fa:60:8d:d0:ed:1b:fe:89:
3b:03:24:65:b3:d8:52:9f:a0:57:92:c6:ab:ac:1d:
3d:81:5b:d2:c6:75:8b:5c:69:2f:67:d4:1c:6e:ac:
0a:39:d5:87:65:1f:b8:4b:4d:cb:41:d7:a4:de:f4:
ed:b7:96:eb:18:d7:f9:57:a0:65:df:7a:ad:94:6c:
3c:03:12:3f:4a:32:c1:81:39:1f:20:ac:0b:26:ea:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:2D:2F:82:B4:5B:1D:5D:98:F2:6A:D5:7B:73:17:13:C3:E0:09
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9f:6a:98:cb:0b:0d:00:d6:c6:35:5d:7e:d4:2f:13:99:89:
bf:11:d3:43:3a:cb:04:49:b4:02:84:32:dc:37:37:0a:d3:76:
8a:70:b4:ca:38:59:23:b4:fd:fe:7d:0b:93:44:fa:70:9c:72:
b7:0e:da:3b:b5:8c:57:0c:1e:2b:de:8e:68:bf:f9:88:42:c1:
7c:cc:78:8b:69:38:18:2c:3a:49:e1:ab:07:06:5a:b4:83:ef:
7e:9b:48:28:da:5b:57:b6:54:78:02:11:00:61:87:36:22:a7:
de:f1:c0:3c:ee:67:de:fd:a3:3e:be:87:25:3e:2d:25:00:a6:
83:22:66:58:c0:3f:77:17:53:28:4c:f4:a8:2c:cb:b6:b4:70:
36:31:b0:ea:34:78:bf:70:7e:51:a1:89:c6:f1:10:42:9c:a2:
f8:05:91:72:f2:2c:11:3c:9a:ef:b5:21:67:54:c5:7c:c2:fe:
49:36:01:60:13:50:cf:30:dc:f1:fe:70:75:49:94:88:fe:4d:
dd:8f:12:46:c5:39:af:ab:6f:59:ff:6a:19:15:6a:df:41:9d:
05:bb:95:fc:b8:b0:a6:6c:49:d4:74:fa:39:de:1a:24:94:cd:
79:d3:87:b1:50:fa:cd:c6:88:22:82:40:87:4a:ff:e9:67:38:
6c:ba:06:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTEiIgEp76cQPb/3uJotijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzExMWVjNTU0OTExNWNiMzQ3NjU0ZDhmZTViMjcwOWQy
N2Y3ZGYwHhcNMjUwNDIwMTIwMDE5WhcNMjUwNDIxMTIwMDE5WjAzMTEwLwYDVQQD
Eyg3NGVhMmQyZjgyYjQ1YjFkNWQ5OGYyNmFkNTdiNzMxNzEzYzNlMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/sZoS8karw2V72yadSTQE5cgUPF
lkWQBMzHTakss/o9+wV36OhCxLRPv7gRTxWUL9assGUpTnjxsjR11Ll1DDEt5zRh
OBTxD3o+QVRRHsx/Ki+oQBsO00xzHQoV6g0a1EW60Vu4eL4MIgEhC14Wyqfd6JH7
5u0nRDe6L3feHi4oazB17Qb2E0wLCJqQNvEDC6yDyyciZzPYguhzBRrsdsSsCGS4
Twnw21cq+mCN0O0b/ok7AyRls9hSn6BXksarrB09gVvSxnWLXGkvZ9QcbqwKOdWH
ZR+4S03LQdek3vTtt5brGNf5V6Bl33qtlGw8AxI/SjLBgTkfIKwLJuq17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTqLS+CtFsdXZjyatV7cxcTw+AJMB8GA1UdIwQY
MBaAFMdxEexVSRFcs0dlTY/lsnCdJ/ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUt
ZTBjMmI5NDc5MmNhLzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUtZTBjMmI5NDc5MmNh
LzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp9qmMsL
DQDWxjVdftQvE5mJvxHTQzrLBEm0AoQy3Dc3CtN2inC0yjhZI7T9/n0Lk0T6cJxy
tw7aO7WMVwweK96OaL/5iELBfMx4i2k4GCw6SeGrBwZatIPvfptIKNpbV7ZUeAIR
AGGHNiKn3vHAPO5n3v2jPr6HJT4tJQCmgyJmWMA/dxdTKEz0qCzLtrRwNjGw6jR4
v3B+UaGJxvEQQpyi+AWRcvIsETya77UhZ1TFfML+STYBYBNQzzDc8f5wdUmUiP5N
3Y8SRsU5r6tvWf9qGRVq30GdBbuV/LiwpmxJ1HT6Od4aJJTNedOHsVD6zcaIIoJA
h0r/6Wc4bLoGGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:03 2025 by rpki-client