Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: gqUhA1oVpBqmrhofFfhjwAAPHf3zgKJs0Os+Nxg7quM=
Subject key identifier: DE:4B:C3:01:84:52:45:DE:4D:0F:E4:7B:34:F1:0A:D7:9E:FC:F3:41
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 019611D79AE9AF8FDC0E28F553D2204238C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 20:01:04 +0000
Manifest this update: Mon 07 Apr 2025 20:01:04 +0000
Manifest next update: Tue 08 Apr 2025 20:01:04 +0000
Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: 67/sgZC43AadBAoa8JZ0CGcksN4Xgq/XsJcElcoVFZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:9a:e9:af:8f:dc:0e:28:f5:53:d2:20:42:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Apr 7 20:01:04 2025 GMT
Not After : Apr 8 20:01:04 2025 GMT
Subject: CN=de4bc301845245de4d0fe47b34f10ad79efcf341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:58:ea:97:fd:d4:28:01:92:42:50:41:d5:
bd:9f:13:92:01:a2:c1:53:40:ac:4f:41:e4:a2:35:
de:4f:ba:89:98:4d:f3:63:0d:b7:c5:1f:a5:37:02:
62:6d:28:9c:79:da:2b:a9:90:32:94:fa:d1:60:00:
38:1d:ac:32:7b:b2:64:22:e8:64:dc:5f:1e:63:ea:
76:b7:ff:f0:15:59:f3:07:e2:17:19:b8:02:23:50:
ba:bf:8e:2c:48:ea:56:83:74:56:6c:18:fe:a7:ae:
34:0c:b3:df:25:ce:1f:9b:a8:c3:04:f8:3f:a9:24:
78:8f:15:c1:a9:8f:71:fc:0f:1a:02:87:9b:9a:41:
03:11:5b:61:84:e3:67:d4:7e:c6:2e:25:83:a0:43:
d0:01:df:7e:0a:3c:09:0b:be:50:85:92:89:3a:a0:
ec:8d:00:d7:3b:d4:b3:6a:23:61:51:08:6d:24:4a:
8a:de:51:2d:50:91:e2:a9:96:af:a7:ce:94:b6:49:
e4:97:9f:31:80:19:a1:59:29:2f:32:df:23:4c:1d:
ae:11:99:65:f2:b5:a4:b4:f7:b0:d7:18:d4:61:c4:
f4:33:c6:8e:23:28:e4:6c:e3:3b:d0:9c:82:39:3b:
a6:26:26:65:89:af:42:de:41:12:d9:50:84:46:20:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:C3:01:84:52:45:DE:4D:0F:E4:7B:34:F1:0A:D7:9E:FC:F3:41
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:0a:b0:1e:ab:14:72:f5:18:14:99:94:86:d9:15:c0:1b:
04:92:2e:e2:36:b8:7f:ea:71:2b:46:5a:11:4e:fd:25:6d:db:
37:15:31:07:c4:41:52:46:01:03:d8:5b:6a:1d:37:84:1e:2e:
37:75:af:f6:8e:d9:75:7b:51:67:ac:9d:d6:58:72:cc:ad:ed:
83:13:56:1f:0f:ba:9b:6b:12:62:83:29:7b:bc:95:1a:c1:2a:
a2:df:5a:fb:55:fd:74:a8:a1:86:23:ab:d3:be:42:26:67:6e:
1d:06:42:14:76:57:2c:a8:5e:a7:fb:f6:75:ee:ea:24:86:d9:
e3:a3:0b:3c:56:61:22:54:3f:91:b5:ec:7f:42:56:8e:0c:43:
87:05:21:f7:93:f8:d3:8b:0b:3c:72:56:c7:9d:fb:80:0c:37:
fb:14:50:fb:1b:bd:a9:d7:99:cc:d7:8e:6c:1d:76:ac:33:2e:
c7:83:20:fb:56:c4:e2:bc:28:49:8c:20:a0:23:5b:c9:86:b4:
5b:00:4b:38:29:da:db:bf:b3:3d:d5:f8:e0:12:c6:da:c6:dc:
32:05:39:eb:d8:87:20:0c:47:b5:e4:fe:00:5e:f2:db:6c:4e:
fd:47:60:49:ca:60:72:13:5b:de:7d:6f:37:62:e9:54:e5:f2:
c0:85:76:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYR15rpr4/cDij1U9IgQjjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw
NTQ3OTYwHhcNMjUwNDA3MjAwMTA0WhcNMjUwNDA4MjAwMTA0WjAzMTEwLwYDVQQD
EyhkZTRiYzMwMTg0NTI0NWRlNGQwZmU0N2IzNGYxMGFkNzllZmNmMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfxY6pf91CgBkkJQQdW9nxOSAaLB
U0CsT0HkojXeT7qJmE3zYw23xR+lNwJibSicedorqZAylPrRYAA4Hawye7JkIuhk
3F8eY+p2t//wFVnzB+IXGbgCI1C6v44sSOpWg3RWbBj+p640DLPfJc4fm6jDBPg/
qSR4jxXBqY9x/A8aAoebmkEDEVthhONn1H7GLiWDoEPQAd9+CjwJC75QhZKJOqDs
jQDXO9SzaiNhUQhtJEqK3lEtUJHiqZavp86Utknkl58xgBmhWSkvMt8jTB2uEZll
8rWktPew1xjUYcT0M8aOIyjkbOM70JyCOTumJiZlia9C3kES2VCERiBd0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5LwwGEUkXeTQ/kezTxCtee/PNBMB8GA1UdIwQY
MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt
NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz
LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhgKsB6r
FHL1GBSZlIbZFcAbBJIu4ja4f+pxK0ZaEU79JW3bNxUxB8RBUkYBA9hbah03hB4u
N3Wv9o7ZdXtRZ6yd1lhyzK3tgxNWHw+6m2sSYoMpe7yVGsEqot9a+1X9dKihhiOr
075CJmduHQZCFHZXLKhep/v2de7qJIbZ46MLPFZhIlQ/kbXsf0JWjgxDhwUh95P4
04sLPHJWx537gAw3+xRQ+xu9qdeZzNeObB12rDMux4Mg+1bE4rwoSYwgoCNbyYa0
WwBLOCna27+zPdX44BLG2sbcMgU569iHIAxHteT+AF7y22xO/UdgScpgchNb3n1v
N2LpVOXywIV2ig==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:32 2025 by rpki-client