Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier: RWTZxPJghJ/wLl5n9sU/reOfvIC0P/DDXi049hDIcVY=
Subject key identifier: 74:C1:A1:5A:D3:E9:5B:79:45:50:04:CD:21:96:C2:47:89:35:C2:F9
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial: 01965B7153898E2707A8B5E8E1BAFCAAAEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number: 10D1
Signing time: Tue 22 Apr 2025 03:01:15 +0000
Manifest this update: Tue 22 Apr 2025 03:01:15 +0000
Manifest next update: Wed 23 Apr 2025 03:01:15 +0000
Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: 9hilnp1dW7avelRrXkwWSOzXUlUlMVl4B51eR2iIUsw=)
2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:53:89:8e:27:07:a8:b5:e8:e1:ba:fc:aa:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Validity
Not Before: Apr 22 03:01:15 2025 GMT
Not After : Apr 23 03:01:15 2025 GMT
Subject: CN=74c1a15ad3e95b79455004cd2196c2478935c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:61:9c:90:68:a2:c9:3b:b1:87:0b:06:f5:
4b:ca:a3:2d:81:ab:8f:2e:71:19:8b:2a:53:f6:94:
3c:9c:99:c4:e9:fb:bc:95:18:b0:8c:5a:62:7e:f1:
d4:b9:bf:55:82:67:f5:89:f3:83:16:74:7f:0b:bc:
e6:9e:ae:0f:c7:e3:24:cd:b2:1b:3d:ef:d0:fc:9f:
9c:91:db:76:ab:46:bf:ba:9d:4d:70:2a:3e:3b:46:
3d:b3:0d:f2:dc:a2:03:ce:9c:9e:23:9f:36:a4:2d:
2b:6b:82:b7:1d:05:f7:3e:d4:43:ff:76:a5:12:00:
6a:bc:63:50:82:67:c2:86:e1:00:99:b8:41:bf:50:
a7:e9:ee:13:cd:4e:d1:33:14:19:ae:60:d3:d4:99:
44:df:c2:b1:67:0c:5a:f0:92:9b:88:61:1d:ce:2d:
7c:86:08:bb:fc:82:64:e3:f0:8b:a5:85:f7:58:6f:
1d:ff:f0:ab:32:01:fe:7f:52:35:0e:bd:83:f1:be:
de:3e:b4:af:39:86:6f:02:7f:6c:00:9a:eb:2f:f8:
5e:81:86:2f:68:74:c8:ac:78:f2:4c:fc:d8:8a:36:
f3:67:40:ba:45:e6:38:a6:c6:b7:9b:5f:9a:e7:d6:
04:4a:f3:b0:08:2e:4b:8f:51:6c:d1:00:7d:b8:ff:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C1:A1:5A:D3:E9:5B:79:45:50:04:CD:21:96:C2:47:89:35:C2:F9
X509v3 Authority Key Identifier:
keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cf:92:c0:1b:12:a5:ce:0c:0c:4a:59:98:11:d3:fb:60:ca:
c3:f5:b4:37:02:5a:0a:c5:f8:e1:16:4c:1c:61:7c:e8:52:e4:
82:cc:23:a1:3b:ff:96:23:96:9c:66:90:8f:97:df:65:47:fe:
4a:e3:a2:00:f6:80:c2:a8:70:9d:db:7d:6a:fd:fe:4c:06:6d:
19:32:71:01:4b:83:4e:84:fe:84:89:68:57:1e:34:b8:7b:8e:
20:b4:27:c1:40:c3:85:c4:bf:80:40:ad:49:b7:d6:9f:93:96:
f7:14:e0:4b:ee:5d:bb:fd:ce:e3:4a:ea:5e:7b:53:df:84:60:
7e:ee:df:90:24:19:c6:a3:3e:9f:e7:0b:a7:67:13:56:d6:73:
bb:c3:9c:78:92:ff:b1:c6:7c:96:9c:e5:5a:9e:e1:d2:d3:01:
89:e9:30:85:7b:87:32:c3:58:7e:54:97:ae:42:82:93:6e:1f:
80:e1:55:fa:47:19:74:87:7b:d5:1b:b8:a6:38:ed:50:66:6b:
f0:77:ac:1a:d2:79:02:b7:ed:23:3d:e7:e8:6c:73:0b:54:4c:
f1:09:e6:5b:e8:08:b8:9d:7f:6d:7c:40:28:42:33:db:48:25:
0a:31:18:cb:b4:ae:6a:7b:ba:95:06:44:58:f0:3c:e9:2f:b2:
ad:a4:d3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcVOJjicHqLXo4br8qq68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh
ZWYzY2MwHhcNMjUwNDIyMDMwMTE1WhcNMjUwNDIzMDMwMTE1WjAzMTEwLwYDVQQD
Eyg3NGMxYTE1YWQzZTk1Yjc5NDU1MDA0Y2QyMTk2YzI0Nzg5MzVjMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV9hnJBoosk7sYcLBvVLyqMtgauP
LnEZiypT9pQ8nJnE6fu8lRiwjFpifvHUub9Vgmf1ifODFnR/C7zmnq4Px+MkzbIb
Pe/Q/J+ckdt2q0a/up1NcCo+O0Y9sw3y3KIDzpyeI582pC0ra4K3HQX3PtRD/3al
EgBqvGNQgmfChuEAmbhBv1Cn6e4TzU7RMxQZrmDT1JlE38KxZwxa8JKbiGEdzi18
hgi7/IJk4/CLpYX3WG8d//CrMgH+f1I1Dr2D8b7ePrSvOYZvAn9sAJrrL/hegYYv
aHTIrHjyTPzYijbzZ0C6ReY4psa3m1+a59YESvOwCC5Lj1Fs0QB9uP/WzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTBoVrT6Vt5RVAEzSGWwkeJNcL5MB8GA1UdIwQY
MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAms+SwBsS
pc4MDEpZmBHT+2DKw/W0NwJaCsX44RZMHGF86FLkgswjoTv/liOWnGaQj5ffZUf+
SuOiAPaAwqhwndt9av3+TAZtGTJxAUuDToT+hIloVx40uHuOILQnwUDDhcS/gECt
SbfWn5OW9xTgS+5du/3O40rqXntT34Rgfu7fkCQZxqM+n+cLp2cTVtZzu8OceJL/
scZ8lpzlWp7h0tMBiekwhXuHMsNYflSXrkKCk24fgOFV+kcZdId71Ru4pjjtUGZr
8HesGtJ5ArftIz3n6GxzC1RM8QnmW+gIuJ1/bXxAKEIz20glCjEYy7Suanu6lQZE
WPA86S+yraTTNQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:43 2025 by rpki-client