Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: SowmKD1IyNJl5cN4ClqFsQ3M4zLZ92xXNw++gkE3460=
Subject key identifier: CB:90:A3:7E:28:DA:E8:71:A4:50:4C:B2:07:7E:59:3C:F6:78:95:E2
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 01974B1F25033B91204176A6E41F0BE6A6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 16:00:21 +0000
Manifest this update: Sat 07 Jun 2025 16:00:21 +0000
Manifest next update: Sun 08 Jun 2025 16:00:21 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: WRLOfhwKfgssOLtTrzE4cnyb02YDsQoIcvwcnODryic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:25:03:3b:91:20:41:76:a6:e4:1f:0b:e6:a6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Jun 7 16:00:21 2025 GMT
Not After : Jun 8 16:00:21 2025 GMT
Subject: CN=cb90a37e28dae871a4504cb2077e593cf67895e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:7f:39:80:77:c8:51:6c:f4:5e:1f:81:4c:
a4:2b:ea:e5:6d:18:8f:60:3a:06:9f:0c:2a:eb:b2:
f4:a5:b5:fe:bc:6b:39:cd:85:ff:a5:7e:7f:d4:d6:
45:15:cc:14:df:d1:02:3f:fb:ad:9c:e1:d4:ab:82:
ef:41:05:19:80:6d:1e:df:34:4a:62:8c:7b:47:ae:
42:e6:38:82:6c:c5:72:37:8f:27:28:06:9c:97:6f:
a4:5c:50:34:59:38:11:b1:70:bb:08:eb:58:7c:02:
73:30:e9:18:41:55:69:55:a9:ac:13:18:c8:c0:c3:
96:d6:92:32:8f:c5:0d:58:63:4d:68:eb:b2:93:c0:
89:e5:6a:7b:93:d0:da:28:d7:3a:6a:69:f5:2c:6c:
d0:14:20:7a:fc:b3:1d:b8:e7:88:c1:09:91:b5:b2:
79:8a:b8:ad:4e:b4:4b:3b:e9:84:f6:1f:c9:06:c3:
68:d3:31:a9:aa:16:23:99:d5:12:71:5f:49:dc:c6:
b5:a4:3d:e3:f3:42:39:df:1e:af:10:01:42:7f:64:
91:e2:84:67:76:85:1e:23:c4:7e:2a:fd:73:33:a2:
5b:7c:a4:54:a5:f2:8d:54:64:05:c1:0b:0c:83:61:
72:9c:3d:68:8b:db:6c:23:5f:93:67:19:b9:52:00:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:90:A3:7E:28:DA:E8:71:A4:50:4C:B2:07:7E:59:3C:F6:78:95:E2
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:c4:ee:d9:30:f0:9a:d4:ed:fa:d4:1e:00:08:f8:57:ee:
90:5e:21:5e:36:91:3a:86:ae:65:d9:a4:45:55:70:15:c5:58:
87:28:cd:94:c9:2f:87:b0:0a:9a:fa:de:a0:e4:63:5e:3f:a5:
42:8f:c2:dc:81:9f:39:2e:98:e6:0e:70:d2:96:bf:53:51:c9:
b1:c7:01:14:50:c3:86:74:46:0e:16:d4:72:ce:b1:77:3f:48:
d4:59:61:1f:07:1d:6b:dc:e0:f1:17:c8:5c:a9:ac:03:37:36:
06:5f:85:fc:d3:13:f1:5e:56:bf:40:3b:89:08:ed:c0:ce:2e:
91:9e:9f:6e:4d:55:8b:0b:8b:1a:91:94:9a:b6:be:57:35:26:
58:af:54:1e:84:12:b9:76:e3:4a:be:40:49:56:49:84:e5:b9:
6f:1d:b7:a2:f3:13:3e:70:a0:a8:9d:65:d3:40:65:1d:63:cc:
47:56:e6:49:d0:a6:17:4d:3b:c7:3f:45:55:0f:af:df:b7:c5:
c9:c3:01:fb:4f:69:65:cf:58:69:d2:3c:f6:96:d8:ed:c6:a6:
87:6c:b8:a1:28:aa:81:b2:88:34:58:a0:7c:39:00:c5:13:e8:
aa:0c:ed:81:4c:94:76:52:a3:ff:ef:f8:cb:d2:c2:b9:8b:2e:
ff:1e:28:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLHyUDO5EgQXam5B8L5qb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzIzZWFjZDc3ZTVjYTU5NTJkZDY3YzI4ZjRmZDkwZDMy
YWZhZGYwHhcNMjUwNjA3MTYwMDIxWhcNMjUwNjA4MTYwMDIxWjAzMTEwLwYDVQQD
EyhjYjkwYTM3ZTI4ZGFlODcxYTQ1MDRjYjIwNzdlNTkzY2Y2Nzg5NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JZ/OYB3yFFs9F4fgUykK+rlbRiP
YDoGnwwq67L0pbX+vGs5zYX/pX5/1NZFFcwU39ECP/utnOHUq4LvQQUZgG0e3zRK
Yox7R65C5jiCbMVyN48nKAacl2+kXFA0WTgRsXC7COtYfAJzMOkYQVVpVamsExjI
wMOW1pIyj8UNWGNNaOuyk8CJ5Wp7k9DaKNc6amn1LGzQFCB6/LMduOeIwQmRtbJ5
iritTrRLO+mE9h/JBsNo0zGpqhYjmdUScV9J3Ma1pD3j80I53x6vEAFCf2SR4oRn
doUeI8R+Kv1zM6JbfKRUpfKNVGQFwQsMg2FynD1oi9tsI1+TZxm5UgBXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuQo34o2uhxpFBMsgd+WTz2eJXiMB8GA1UdIwQY
MBaAFBMyPqzXflyllS3WfCj0/ZDTKvrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQt
NzBiMWM2OWI0MjMyLzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQtNzBiMWM2OWI0MjMy
LzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKDE7tkw
8JrU7frUHgAI+FfukF4hXjaROoauZdmkRVVwFcVYhyjNlMkvh7AKmvreoORjXj+l
Qo/C3IGfOS6Y5g5w0pa/U1HJsccBFFDDhnRGDhbUcs6xdz9I1FlhHwcda9zg8RfI
XKmsAzc2Bl+F/NMT8V5Wv0A7iQjtwM4ukZ6fbk1ViwuLGpGUmra+VzUmWK9UHoQS
uXbjSr5ASVZJhOW5bx23ovMTPnCgqJ1l00BlHWPMR1bmSdCmF007xz9FVQ+v37fF
ycMB+09pZc9YadI89pbY7camh2y4oSiqgbKINFigfDkAxRPoqgztgUyUdlKj/+/4
y9LCuYsu/x4oMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:36 2025 by rpki-client