Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: bp45KIE8n+7bsz6WZ5mifnltkGR7RAxlUhUjAXlqGCU=
Subject key identifier: 2B:16:FF:26:93:95:23:4A:40:E1:45:A8:82:BC:0D:E9:6E:BA:4E:0A
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 019611332B8E1C2CDDAF200EAB307EC1A945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 0513
Signing time: Mon 07 Apr 2025 17:01:28 +0000
Manifest this update: Mon 07 Apr 2025 17:01:28 +0000
Manifest next update: Tue 08 Apr 2025 17:01:28 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: Au3e/L+fCtT9ddua43mIjBkzUIyzGsSZl3/a1HsIgI4=)
2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:33:2b:8e:1c:2c:dd:af:20:0e:ab:30:7e:c1:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Apr 7 17:01:28 2025 GMT
Not After : Apr 8 17:01:28 2025 GMT
Subject: CN=2b16ff269395234a40e145a882bc0de96eba4e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:f5:67:51:63:c1:29:4b:74:14:1b:d2:e2:
42:18:ab:bb:94:29:f3:36:dc:1c:85:f5:0f:9c:e8:
6e:f3:5f:89:c4:cf:09:2e:6d:bc:ad:05:9d:cb:78:
fe:df:de:54:72:ec:7b:31:25:b5:7c:db:2b:79:bc:
94:8e:96:7d:9f:b7:62:2b:93:aa:8a:fb:8b:32:b4:
33:24:62:73:53:e4:51:9b:9c:51:ba:2b:70:10:7f:
f1:8f:f3:23:d5:81:ef:8c:6b:c6:79:05:67:4d:e3:
7f:97:2b:70:3f:f0:77:32:17:51:4a:cf:30:ea:99:
89:2c:dd:b4:bb:37:32:d3:1a:c2:28:01:63:e3:21:
5a:29:5b:8c:5a:f3:a1:58:ef:24:87:f6:0d:e4:7f:
00:d1:7b:e6:ed:31:21:f9:0b:f2:26:71:74:9c:8f:
c6:96:25:bf:00:9e:39:8c:84:3d:f5:61:f0:64:da:
2b:7b:9b:65:e6:33:7a:09:c0:37:57:28:a5:1b:7f:
a5:7a:0e:79:69:33:5e:e2:e3:3a:99:8f:fd:60:69:
ee:05:38:f7:b1:6a:20:1b:75:e7:a4:fc:b9:26:60:
6a:3c:41:e8:2f:70:84:e2:02:82:07:1b:85:6d:a4:
95:0b:a9:33:93:08:28:54:e7:58:38:6b:3e:51:bd:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:16:FF:26:93:95:23:4A:40:E1:45:A8:82:BC:0D:E9:6E:BA:4E:0A
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:ad:cc:14:de:5c:43:5c:ce:a7:86:0c:27:b9:d2:ac:e1:
c8:fa:ef:71:24:b5:29:d4:0a:13:c4:b3:bc:60:65:76:a2:6c:
90:2c:b3:8c:20:7b:a3:e3:85:49:23:bd:47:9d:9f:99:d3:c7:
a5:5e:3f:69:b5:06:54:3c:98:b8:9f:9b:d8:f7:89:82:50:bf:
e8:f2:3b:56:2e:52:40:4d:f8:56:0a:96:be:d4:ae:9e:25:6f:
25:a2:e8:29:96:e0:49:5b:24:9c:d1:bc:3f:69:b4:55:fb:85:
cf:ca:53:5d:51:2b:04:85:27:6d:1f:41:28:65:e9:cb:63:f3:
1a:3f:67:dd:48:07:92:ac:78:73:f7:29:1e:9e:30:ab:c0:f4:
09:90:eb:29:e6:83:d5:d9:a2:d3:db:9a:4d:08:00:29:cf:39:
33:7b:c4:f7:02:8c:7d:88:2a:ab:cc:ae:e7:6d:14:4e:97:9f:
e5:86:f7:c3:18:e9:e5:99:8e:8b:ad:2d:80:c5:40:f1:4f:13:
47:e5:e6:bd:8a:3c:ad:cc:64:62:02:f6:0c:52:06:fd:9b:0b:
4f:1b:82:b0:fc:25:58:74:50:58:11:17:48:28:7b:5e:cf:90:
44:a0:e2:23:70:e3:04:0e:8d:d8:d3:32:d6:f7:08:c2:b4:bd:
e4:f8:51:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRMyuOHCzdryAOqzB+walFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzZjMTYyNzhmYzgyMWUxZWVmOTMyZmRlYTliM2RkNjNj
YTZiMjEwHhcNMjUwNDA3MTcwMTI4WhcNMjUwNDA4MTcwMTI4WjAzMTEwLwYDVQQD
EygyYjE2ZmYyNjkzOTUyMzRhNDBlMTQ1YTg4MmJjMGRlOTZlYmE0ZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbj1Z1FjwSlLdBQb0uJCGKu7lCnz
NtwchfUPnOhu81+JxM8JLm28rQWdy3j+395Ucux7MSW1fNsrebyUjpZ9n7diK5Oq
ivuLMrQzJGJzU+RRm5xRuitwEH/xj/Mj1YHvjGvGeQVnTeN/lytwP/B3MhdRSs8w
6pmJLN20uzcy0xrCKAFj4yFaKVuMWvOhWO8kh/YN5H8A0Xvm7TEh+QvyJnF0nI/G
liW/AJ45jIQ99WHwZNore5tl5jN6CcA3VyilG3+leg55aTNe4uM6mY/9YGnuBTj3
sWogG3XnpPy5JmBqPEHoL3CE4gKCBxuFbaSVC6kzkwgoVOdYOGs+Ub28OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsW/yaTlSNKQOFFqIK8Deluuk4KMB8GA1UdIwQY
MBaAFBB2wWJ4/IIeHu+TL96ps91jymshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQt
ZDQ5NGQ5OTdkMzk4LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQtZDQ5NGQ5OTdkMzk4
LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKGtzBTe
XENczqeGDCe50qzhyPrvcSS1KdQKE8SzvGBldqJskCyzjCB7o+OFSSO9R52fmdPH
pV4/abUGVDyYuJ+b2PeJglC/6PI7Vi5SQE34VgqWvtSuniVvJaLoKZbgSVsknNG8
P2m0VfuFz8pTXVErBIUnbR9BKGXpy2PzGj9n3UgHkqx4c/cpHp4wq8D0CZDrKeaD
1dmi09uaTQgAKc85M3vE9wKMfYgqq8yu520UTpef5Yb3wxjp5ZmOi60tgMVA8U8T
R+XmvYo8rcxkYgL2DFIG/ZsLTxuCsPwlWHRQWBEXSCh7Xs+QRKDiI3DjBA6N2NMy
1vcIwrS95PhREQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:58:48 2025 by rpki-client