Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
File: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft (raw, json)
Hash identifier: S/mMdmCDXe3qVlcCqqKuVdyfBs0uzYmLqb47Yrw7574=
Subject key identifier: 14:F8:D0:95:A7:A4:2E:10:D4:BA:DD:6F:B8:02:A7:83:D8:97:F7:69
Authority key identifier: B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
Certificate issuer: /CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Certificate serial: 019661A9F6D61C2AF770DAAE7C3C4CFE6AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
Manifest number: 0911
Signing time: Wed 23 Apr 2025 08:00:50 +0000
Manifest this update: Wed 23 Apr 2025 08:00:50 +0000
Manifest next update: Thu 24 Apr 2025 08:00:50 +0000
Files and hashes: 1: MIW8OPxvmMYCyg8uVd5d1waRYaw.roa (hash: wVmZOjUw0dfWDKll8B0zY8od3oDZ40RulCQ3hTtaIiA=)
2: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl (hash: EYrp/vZceYBkvbrJhXh0cQTl/rkAWzpJDBwnT+yB0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:a9:f6:d6:1c:2a:f7:70:da:ae:7c:3c:4c:fe:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Validity
Not Before: Apr 23 08:00:50 2025 GMT
Not After : Apr 24 08:00:50 2025 GMT
Subject: CN=14f8d095a7a42e10d4badd6fb802a783d897f769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:0b:3c:10:ff:21:36:ad:85:14:4a:09:0f:
c5:f8:48:31:4e:73:7e:e1:50:3d:ac:8a:34:95:09:
0c:d1:db:2e:81:ac:fb:6a:c5:b8:5f:fd:fc:86:04:
e5:e2:b6:b6:9d:8e:ca:9d:d5:51:d5:36:59:70:41:
bd:79:cf:56:c2:7d:51:7c:d2:2a:c2:da:7f:56:b1:
03:fe:73:28:7f:fb:dc:4a:4d:7a:f2:74:86:87:37:
cc:18:66:38:d7:a9:ba:39:ee:d4:58:61:49:b2:cd:
dd:bc:79:04:c5:e5:82:8a:08:df:ec:03:96:21:9f:
19:01:d3:73:ef:29:d5:92:e7:b7:18:fe:9a:6f:8f:
b6:fc:fe:4b:01:e4:db:e2:88:5b:16:ba:ff:f7:26:
12:74:db:0e:4c:38:fd:7f:0d:a8:39:e6:69:40:52:
ac:35:1c:02:b0:b0:d5:64:9c:4d:c7:1b:94:5d:1f:
02:21:db:11:42:91:7b:0b:3c:69:39:13:ce:85:93:
7d:00:61:37:30:fa:86:34:8b:1a:c9:89:de:6a:8b:
c2:ba:32:a8:11:6f:f1:3e:8f:34:ef:21:5d:6e:15:
28:46:d2:19:81:5a:6b:1b:e8:20:4d:0c:51:42:2c:
c9:d5:84:65:5e:0c:10:ab:2f:45:60:62:b7:f6:bb:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:D0:95:A7:A4:2E:10:D4:BA:DD:6F:B8:02:A7:83:D8:97:F7:69
X509v3 Authority Key Identifier:
keyid:B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:82:1a:06:c2:5b:d8:ac:28:e4:6a:7a:03:4e:4a:0d:76:8e:
be:34:b4:0d:d2:20:42:d2:16:8a:bd:5f:49:3d:96:4b:d5:05:
0c:d6:bf:30:22:fe:a1:e6:b4:bb:ae:ac:e9:9f:d6:0e:7d:42:
43:ac:72:da:ce:02:4a:7d:68:f1:bd:c0:df:87:16:bf:da:f1:
79:dd:48:63:c6:b1:d4:03:cc:ef:de:fd:13:a3:ed:02:ed:34:
b3:7f:0b:02:59:94:1c:94:44:ba:0f:7a:3a:17:01:79:63:c0:
d2:af:3b:2d:82:91:ac:1d:3c:3d:25:ca:d0:ee:6a:10:31:5d:
c2:4e:eb:12:14:4a:90:e0:62:eb:22:c7:a0:0b:d8:8d:25:8a:
7a:65:f8:b2:7d:55:d9:b7:7f:8d:e6:1d:1e:51:51:2d:89:1c:
b9:3a:a7:09:60:96:91:5d:0c:be:62:b0:4f:8a:ee:4b:c5:71:
b0:43:9f:cc:8d:df:d4:fd:dc:40:d6:24:10:7a:77:8c:85:08:
4f:ea:88:d5:b5:ab:da:e9:00:b7:e4:89:1d:68:88:6e:45:5a:
95:c9:c0:3f:8d:71:38:25:6e:e3:39:9a:f9:be:6a:06:1a:fd:
73:dc:06:c0:cd:bc:0f:33:45:71:a1:e9:34:f0:3f:c9:dc:7f:
d7:08:1b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZhqfbWHCr3cNqufDxM/mrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYmE0NzYwNWNmMzY3NjI2MjYzZTU3ZjE2ZDBkODc5MTZj
ZWRkYzgwHhcNMjUwNDIzMDgwMDUwWhcNMjUwNDI0MDgwMDUwWjAzMTEwLwYDVQQD
EygxNGY4ZDA5NWE3YTQyZTEwZDRiYWRkNmZiODAyYTc4M2Q4OTdmNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSALPBD/ITathRRKCQ/F+EgxTnN+
4VA9rIo0lQkM0dsugaz7asW4X/38hgTl4ra2nY7KndVR1TZZcEG9ec9Wwn1RfNIq
wtp/VrED/nMof/vcSk168nSGhzfMGGY416m6Oe7UWGFJss3dvHkExeWCigjf7AOW
IZ8ZAdNz7ynVkue3GP6ab4+2/P5LAeTb4ohbFrr/9yYSdNsOTDj9fw2oOeZpQFKs
NRwCsLDVZJxNxxuUXR8CIdsRQpF7CzxpORPOhZN9AGE3MPqGNIsayYneaovCujKo
EW/xPo807yFdbhUoRtIZgVprG+ggTQxRQizJ1YRlXgwQqy9FYGK39ruzEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT40JWnpC4Q1Lrdb7gCp4PYl/dpMB8GA1UdIwQY
MBaAFLO6R2Bc82diYmPlfxbQ2HkWzt3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdwSFlGenpaMkppWS1WX0Z0RFllUmJPM2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zZGZjMTQtZTZhYi00OGNhLTk2MTMt
NDk1YTUwMWM2OTk4LzEvczdwSFlGenpaMkppWS1WX0Z0RFllUmJPM2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zZGZjMTQtZTZhYi00OGNhLTk2MTMtNDk1YTUwMWM2OTk4
LzEvczdwSFlGenpaMkppWS1WX0Z0RFllUmJPM2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA24IaBsJb
2Kwo5Gp6A05KDXaOvjS0DdIgQtIWir1fST2WS9UFDNa/MCL+oea0u66s6Z/WDn1C
Q6xy2s4CSn1o8b3A34cWv9rxed1IY8ax1APM7979E6PtAu00s38LAlmUHJREug96
OhcBeWPA0q87LYKRrB08PSXK0O5qEDFdwk7rEhRKkOBi6yLHoAvYjSWKemX4sn1V
2bd/jeYdHlFRLYkcuTqnCWCWkV0MvmKwT4ruS8VxsEOfzI3f1P3cQNYkEHp3jIUI
T+qI1bWr2ukAt+SJHWiIbkValcnAP41xOCVu4zma+b5qBhr9c9wGwM28DzNFcaHp
NPA/ydx/1wgb3w==
-----END CERTIFICATE-----
Generated at Wed Apr 23 13:58:49 2025 by rpki-client