Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: iA3bxcJBc54PT1PhoSfQ0BAPq4+cHxoTqCmC9J6ppks=
Subject key identifier: 33:66:D2:ED:51:28:96:C2:2F:E6:6C:94:A0:EC:01:32:E8:D9:A2:B9
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019657CB01B279840C0495A2CE6CF9FD9914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 10:00:44 +0000
Manifest this update: Mon 21 Apr 2025 10:00:44 +0000
Manifest next update: Tue 22 Apr 2025 10:00:44 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: GmKwwevCE19OdByrmTa9sYFWfox+kEiWk9NNta0JydE=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:01:b2:79:84:0c:04:95:a2:ce:6c:f9:fd:99:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Apr 21 10:00:44 2025 GMT
Not After : Apr 22 10:00:44 2025 GMT
Subject: CN=3366d2ed512896c22fe66c94a0ec0132e8d9a2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:b8:89:7e:d4:2d:18:ef:fb:69:44:49:7d:
bc:37:e4:78:4b:a5:38:d1:7f:3e:75:d4:ff:93:e2:
f4:31:e3:da:5f:f0:06:5a:1b:2b:ae:b8:11:77:97:
59:1b:cd:93:c3:fc:17:78:e4:d2:0b:78:62:fa:2b:
81:87:c8:ce:66:33:2a:a8:38:74:a5:3e:fd:b2:56:
22:d8:9f:01:c2:a4:df:50:13:f7:e1:bd:d0:72:9b:
d9:bf:89:ca:1a:8d:57:48:54:d4:4b:94:7e:e9:d2:
e4:54:d1:cb:eb:fe:38:c2:bc:d2:a6:80:c7:53:43:
2b:7b:58:6c:45:48:44:4f:72:d7:d0:72:0a:7e:47:
c3:40:c2:9d:97:f9:5f:ef:25:82:55:35:70:5f:af:
a5:31:4a:f6:53:82:37:4b:1e:06:79:39:df:fe:37:
79:41:de:48:e8:58:b0:24:19:65:9f:46:3b:2b:f1:
d2:b9:fd:0b:bc:00:5c:69:aa:00:6b:6a:3e:07:aa:
e3:3a:20:2b:e3:8a:51:51:bf:cc:91:47:ab:c8:93:
7e:29:87:98:a4:b0:28:70:ed:91:16:86:b1:bc:0f:
66:bb:04:d7:fd:4f:ff:12:f0:3a:38:72:51:c3:fd:
f1:3f:a6:49:0e:6a:c8:a6:35:b5:6a:45:c7:37:f7:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:D2:ED:51:28:96:C2:2F:E6:6C:94:A0:EC:01:32:E8:D9:A2:B9
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:12:e5:e6:12:ec:cf:01:7d:2a:f5:2c:2f:e3:05:2a:ab:5e:
63:b3:79:8b:7e:98:44:e1:18:4d:69:9d:c1:7c:ca:7c:c7:5f:
87:1f:40:5d:ee:51:ed:18:c9:d2:3a:3c:60:1c:f6:3b:82:f4:
29:96:6b:46:84:64:5e:f6:b4:d2:9d:20:56:b5:ba:9e:cd:38:
20:ae:ea:ea:2d:28:fa:6f:5a:31:e6:1f:17:44:06:64:12:5e:
c8:f6:00:d8:44:a5:cd:b2:d6:b5:68:e8:c4:7c:00:01:c9:ba:
92:ea:54:34:18:d4:e0:58:bd:3e:fd:31:d3:7c:18:c9:17:40:
26:ca:72:16:c1:d0:01:23:53:24:02:69:75:f3:f0:70:04:7f:
cb:90:90:d9:ce:9e:a3:50:c1:ae:1e:3f:41:59:e2:4f:35:d1:
75:48:3f:95:96:20:b6:a7:6e:20:c9:00:61:70:60:3d:29:c2:
75:04:8d:69:f2:ff:49:74:81:a2:8f:8b:6e:ee:f1:a7:c9:8a:
10:3c:99:28:34:1e:fa:b0:05:58:9d:e1:be:22:52:f6:08:c1:
cc:05:ba:e7:2d:38:55:c3:e1:6e:99:23:7f:af:2c:c0:cb:dd:
27:32:04:9b:1c:a0:7e:97:88:2b:b8:0e:8d:52:57:b4:59:f6:
d6:a4:0e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXywGyeYQMBJWizmz5/ZkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz
ZGU5NDgwHhcNMjUwNDIxMTAwMDQ0WhcNMjUwNDIyMTAwMDQ0WjAzMTEwLwYDVQQD
EygzMzY2ZDJlZDUxMjg5NmMyMmZlNjZjOTRhMGVjMDEzMmU4ZDlhMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomK4iX7ULRjv+2lESX28N+R4S6U4
0X8+ddT/k+L0MePaX/AGWhsrrrgRd5dZG82Tw/wXeOTSC3hi+iuBh8jOZjMqqDh0
pT79slYi2J8BwqTfUBP34b3QcpvZv4nKGo1XSFTUS5R+6dLkVNHL6/44wrzSpoDH
U0Mre1hsRUhET3LX0HIKfkfDQMKdl/lf7yWCVTVwX6+lMUr2U4I3Sx4GeTnf/jd5
Qd5I6FiwJBlln0Y7K/HSuf0LvABcaaoAa2o+B6rjOiAr44pRUb/MkUeryJN+KYeY
pLAocO2RFoaxvA9muwTX/U//EvA6OHJRw/3xP6ZJDmrIpjW1akXHN/c72QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNm0u1RKJbCL+ZslKDsATLo2aK5MB8GA1UdIwQY
MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt
MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5
LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhLl5hLs
zwF9KvUsL+MFKqteY7N5i36YROEYTWmdwXzKfMdfhx9AXe5R7RjJ0jo8YBz2O4L0
KZZrRoRkXva00p0gVrW6ns04IK7q6i0o+m9aMeYfF0QGZBJeyPYA2ESlzbLWtWjo
xHwAAcm6kupUNBjU4Fi9Pv0x03wYyRdAJspyFsHQASNTJAJpdfPwcAR/y5CQ2c6e
o1DBrh4/QVniTzXRdUg/lZYgtqduIMkAYXBgPSnCdQSNafL/SXSBoo+Lbu7xp8mK
EDyZKDQe+rAFWJ3hviJS9gjBzAW65y04VcPhbpkjf68swMvdJzIEmxygfpeIK7gO
jVJXtFn21qQOuA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:23 2025 by rpki-client