Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: utJD5RilyGTVyZ+PcTaKNNsYB3oDnNLD6awOjS49vQE=
Subject key identifier: 9F:4B:AF:54:0C:E0:AE:1C:70:3A:06:FE:6A:4D:79:E6:A7:FA:C6:C2
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 01965FBB826733FB1111D9DF22F05703F5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0A37
Signing time: Tue 22 Apr 2025 23:00:46 +0000
Manifest this update: Tue 22 Apr 2025 23:00:46 +0000
Manifest next update: Wed 23 Apr 2025 23:00:46 +0000
Files and hashes: 1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: lCuzVNsfyEATOK+M7vJHhAh//BoQSMzVlHF3ukcqlAs=)
2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:82:67:33:fb:11:11:d9:df:22:f0:57:03:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Apr 22 23:00:46 2025 GMT
Not After : Apr 23 23:00:46 2025 GMT
Subject: CN=9f4baf540ce0ae1c703a06fe6a4d79e6a7fac6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:1a:93:7b:37:97:17:f8:4d:61:34:4d:44:
fe:7a:79:81:14:fa:31:78:ed:c8:a7:14:72:0c:33:
d0:d8:d5:86:1f:08:20:c5:61:cc:37:b6:ea:ad:3d:
bc:ea:ab:78:85:d3:ce:6e:9a:e5:77:25:e1:af:e8:
ed:90:f0:1f:4d:56:ee:58:8c:03:60:b4:24:c4:1a:
55:a7:b4:5d:d9:1d:2f:d9:07:e0:68:89:f3:0a:d8:
e3:28:d1:19:36:db:8e:e4:ee:97:24:a4:49:8e:a3:
cb:6f:1a:b9:a8:1b:51:3c:c2:31:98:70:ee:4d:55:
6b:3d:61:33:35:3f:4a:dd:bd:6e:00:dd:4a:71:f9:
05:d2:51:c6:62:7d:f9:b2:d8:8c:80:f4:eb:c2:e4:
e0:ea:ac:f5:cc:98:a5:08:be:75:b9:3d:8b:86:2f:
61:1b:c1:78:c9:57:f7:93:af:0c:dd:b7:8c:ae:17:
9f:85:f3:bd:4a:11:42:11:c0:85:51:5d:14:c9:67:
2b:c3:c2:11:1f:73:c6:b5:b4:2c:27:fb:1b:cc:97:
f8:22:7a:62:76:b2:34:13:66:04:38:ce:1b:4a:d6:
ce:73:e8:95:8f:be:1c:6a:07:3a:74:37:d9:e8:84:
7e:9e:39:61:f0:bc:77:ef:4a:50:4a:a4:eb:a0:bc:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:AF:54:0C:E0:AE:1C:70:3A:06:FE:6A:4D:79:E6:A7:FA:C6:C2
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cc:71:4f:2b:b5:b5:e7:0c:7e:fe:4d:09:12:00:70:7d:1a:
7f:68:fd:44:26:56:93:0e:58:23:9c:fb:f2:b8:9b:dd:a8:ed:
21:a7:7f:e9:74:fd:4d:68:59:29:b2:53:ea:80:75:52:df:30:
50:e5:53:ce:16:c9:a9:a1:42:52:09:21:c2:2e:00:27:a8:7f:
8d:9a:48:da:d5:9a:07:66:16:46:ca:f6:3a:0e:e6:9e:f8:3c:
06:bf:00:2d:db:2b:d2:99:bf:9b:06:1c:95:ed:0b:0e:9d:4a:
fa:a8:eb:27:d0:e6:45:56:ee:38:fa:bb:db:a6:01:99:38:8b:
5e:04:41:0a:4d:eb:2c:3d:c4:2a:90:68:2f:ff:c0:d9:e8:65:
f9:5a:7d:d9:05:87:fb:76:56:af:92:00:65:ff:14:98:47:73:
01:7c:cf:56:78:e7:68:ef:ca:ab:cf:34:3a:4a:e8:ae:85:0a:
52:a5:8a:00:9e:40:0e:4a:89:4c:4d:89:3c:e9:f5:85:a1:95:
7a:2f:43:63:23:f8:84:82:08:15:03:0a:84:95:35:dc:57:e8:
0a:a3:48:1c:74:fd:d5:c9:a0:47:80:84:7e:e1:0d:b9:eb:ab:
c2:9c:f9:f0:e3:e9:ac:ba:5c:77:45:8e:dc:c5:70:70:2a:51:
3d:2c:5b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfu4JnM/sREdnfIvBXA/XnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTYwOTgyZTgyYmY5ZTk4NzU0NDUwMDkzMDhkZTdlY2Jk
MDVjNTQwHhcNMjUwNDIyMjMwMDQ2WhcNMjUwNDIzMjMwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZjRiYWY1NDBjZTBhZTFjNzAzYTA2ZmU2YTRkNzllNmE3ZmFjNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnkak3s3lxf4TWE0TUT+enmBFPox
eO3IpxRyDDPQ2NWGHwggxWHMN7bqrT286qt4hdPObprldyXhr+jtkPAfTVbuWIwD
YLQkxBpVp7Rd2R0v2QfgaInzCtjjKNEZNtuO5O6XJKRJjqPLbxq5qBtRPMIxmHDu
TVVrPWEzNT9K3b1uAN1KcfkF0lHGYn35stiMgPTrwuTg6qz1zJilCL51uT2Lhi9h
G8F4yVf3k68M3beMrhefhfO9ShFCEcCFUV0UyWcrw8IRH3PGtbQsJ/sbzJf4Inpi
drI0E2YEOM4bStbOc+iVj74cagc6dDfZ6IR+njlh8Lx370pQSqTroLzWmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9Lr1QM4K4ccDoG/mpNeean+sbCMB8GA1UdIwQY
MBaAFOuWCYLoK/nph1RFAJMI3n7L0FxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjct
Y2FkZmNlZjBiNWM0LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjctY2FkZmNlZjBiNWM0
LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMxxTyu1
tecMfv5NCRIAcH0af2j9RCZWkw5YI5z78rib3ajtIad/6XT9TWhZKbJT6oB1Ut8w
UOVTzhbJqaFCUgkhwi4AJ6h/jZpI2tWaB2YWRsr2Og7mnvg8Br8ALdsr0pm/mwYc
le0LDp1K+qjrJ9DmRVbuOPq726YBmTiLXgRBCk3rLD3EKpBoL//A2ehl+Vp92QWH
+3ZWr5IAZf8UmEdzAXzPVnjnaO/Kq880OkroroUKUqWKAJ5ADkqJTE2JPOn1haGV
ei9DYyP4hIIIFQMKhJU13FfoCqNIHHT91cmgR4CEfuENueurwpz58OPprLpcd0WO
3MVwcCpRPSxbnA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:48 2025 by rpki-client