Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier: /OvozM76E2hSWgzU9wPOJ3UNGo+SgU4AQBn4eb4tA7k=
Subject key identifier: 9C:3F:CC:A0:0E:60:F7:F2:B1:B1:BE:39:B1:D2:B7:B3:4C:B1:76:D1
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial: 01963840ADE31A456C2E2F67365209E25B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number: 14F0
Signing time: Tue 15 Apr 2025 07:01:24 +0000
Manifest this update: Tue 15 Apr 2025 07:01:24 +0000
Manifest next update: Wed 16 Apr 2025 07:01:24 +0000
Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: oiMNP/Wm44mOD0OIu2D4cNc+AICdfE+QboNeZr/rZxU=)
2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:40:ad:e3:1a:45:6c:2e:2f:67:36:52:09:e2:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Validity
Not Before: Apr 15 07:01:24 2025 GMT
Not After : Apr 16 07:01:24 2025 GMT
Subject: CN=9c3fcca00e60f7f2b1b1be39b1d2b7b34cb176d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:2a:93:7d:40:ee:3d:36:5d:9c:de:ae:4f:
63:07:dc:9d:52:2e:33:11:b8:9f:18:bd:f4:67:e8:
9b:a3:4a:91:76:71:ce:2c:89:45:21:8b:ba:c3:12:
9a:16:1f:c0:2b:5a:3f:ce:77:74:e2:ef:dd:0b:3d:
88:f6:6b:6d:aa:14:a7:f0:52:66:e0:d3:48:cf:35:
26:1c:62:5b:be:bb:16:91:83:8e:cd:c2:a0:a2:f0:
35:6f:ee:eb:31:d2:f6:5f:fd:64:e8:a7:d2:47:8d:
12:9e:1e:04:0c:45:02:e2:2f:66:8a:c1:b5:5f:58:
a3:b0:be:34:60:72:6a:1c:5c:2f:55:9a:ac:c3:75:
d5:a4:55:45:6f:70:e5:1b:f8:06:2a:f0:e5:a5:b9:
bb:f3:ae:e2:67:89:c4:53:e2:3c:2d:38:d3:dd:74:
81:2e:c6:83:be:2c:3e:63:ae:d4:ba:cd:01:8b:09:
a4:2a:ad:a5:f4:5e:54:c9:ac:2d:d9:c6:c5:48:b0:
12:78:44:84:11:4a:3c:f6:88:7e:e3:49:5e:a4:a3:
69:16:6b:68:fb:44:15:bc:94:db:93:c8:b3:9d:87:
20:85:f8:56:4d:5e:28:d8:0a:0a:9b:56:5d:14:62:
97:8d:e6:ec:ff:f7:a9:f7:90:1c:55:9c:65:4e:a9:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:CC:A0:0E:60:F7:F2:B1:B1:BE:39:B1:D2:B7:B3:4C:B1:76:D1
X509v3 Authority Key Identifier:
keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:db:a8:fe:c7:e6:f3:5f:b4:86:57:d0:d3:6c:46:fd:6e:66:
a2:8c:d2:76:94:1e:93:11:e5:bf:de:d1:7b:09:0d:6c:c0:09:
82:00:68:56:a3:f4:cb:5b:53:b7:d0:3d:ae:4b:4e:e0:f8:69:
25:8b:63:d3:c1:07:7b:73:41:6b:29:1d:43:25:59:5d:e5:44:
d8:ff:72:cf:3f:3b:af:c6:8c:2d:23:a9:03:0d:7d:3a:2e:ca:
e2:f4:75:4a:e1:42:3e:aa:b5:16:3e:66:83:3d:9a:a2:5f:d6:
b5:49:46:48:9f:6d:f2:da:ae:ee:14:74:63:66:d1:ef:97:53:
c4:09:c3:80:ce:54:91:0e:7c:bf:af:ca:e5:e7:ca:41:26:d8:
03:8e:1f:6e:d3:46:0a:86:1c:8e:7f:62:fc:ad:66:2b:85:5c:
fc:ec:15:9d:a3:1c:eb:d5:f5:86:3c:13:3c:ee:8d:21:37:42:
cb:34:73:62:fe:bc:d1:41:23:a7:2b:0b:9c:2a:fe:e0:84:b1:
27:e2:93:d4:7f:69:46:53:3b:a2:68:a0:14:26:88:51:7e:b8:
1f:b5:9b:14:4b:27:50:b1:76:76:df:19:7b:b2:72:d6:3d:e8:
08:57:11:79:3b:64:b4:5b:be:ee:98:ad:c0:46:3f:78:c1:13:
b0:e8:d6:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY4QK3jGkVsLi9nNlIJ4lsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5
NmYxOTcwHhcNMjUwNDE1MDcwMTI0WhcNMjUwNDE2MDcwMTI0WjAzMTEwLwYDVQQD
Eyg5YzNmY2NhMDBlNjBmN2YyYjFiMWJlMzliMWQyYjdiMzRjYjE3NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrcqk31A7j02XZzerk9jB9ydUi4z
EbifGL30Z+ibo0qRdnHOLIlFIYu6wxKaFh/AK1o/znd04u/dCz2I9mttqhSn8FJm
4NNIzzUmHGJbvrsWkYOOzcKgovA1b+7rMdL2X/1k6KfSR40Snh4EDEUC4i9misG1
X1ijsL40YHJqHFwvVZqsw3XVpFVFb3DlG/gGKvDlpbm7867iZ4nEU+I8LTjT3XSB
LsaDviw+Y67Uus0BiwmkKq2l9F5Uyawt2cbFSLASeESEEUo89oh+40lepKNpFmto
+0QVvJTbk8iznYcghfhWTV4o2AoKm1ZdFGKXjebs//ep95AcVZxlTqm1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw/zKAOYPfysbG+ObHSt7NMsXbRMB8GA1UdIwQY
MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt
N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1
LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9uo/sfm
81+0hlfQ02xG/W5moozSdpQekxHlv97RewkNbMAJggBoVqP0y1tTt9A9rktO4Php
JYtj08EHe3NBaykdQyVZXeVE2P9yzz87r8aMLSOpAw19Oi7K4vR1SuFCPqq1Fj5m
gz2aol/WtUlGSJ9t8tqu7hR0Y2bR75dTxAnDgM5UkQ58v6/K5efKQSbYA44fbtNG
CoYcjn9i/K1mK4Vc/OwVnaMc69X1hjwTPO6NITdCyzRzYv680UEjpysLnCr+4ISx
J+KT1H9pRlM7omigFCaIUX64H7WbFEsnULF2dt8Ze7Jy1j3oCFcReTtktFu+7pit
wEY/eMETsOjW/Q==
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:47:51 2025 by rpki-client