Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: w6CF+DB1tawJMdb2LBqsZm3/D3O0NTJYGFgSPf2NQgM=
Subject key identifier: A9:AC:0C:BB:55:1C:47:34:2B:D4:8D:09:F8:DE:E6:0C:D9:75:61:C9
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 01964D1026FED9570965142AFAB187C8D475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 0367
Signing time: Sat 19 Apr 2025 08:00:26 +0000
Manifest this update: Sat 19 Apr 2025 08:00:26 +0000
Manifest next update: Sun 20 Apr 2025 08:00:26 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: qCgzfTjqGPHeO3e45DEU9vQX39vdBtwNCXCRF5ZEBLs=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:26:fe:d9:57:09:65:14:2a:fa:b1:87:c8:d4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Apr 19 08:00:26 2025 GMT
Not After : Apr 20 08:00:26 2025 GMT
Subject: CN=a9ac0cbb551c47342bd48d09f8dee60cd97561c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:2e:26:dc:d7:81:42:ee:5e:ea:5a:04:8c:
ee:66:9b:75:60:6f:f3:a8:a8:40:98:65:44:54:41:
3a:09:3b:16:23:4a:a1:18:0c:49:45:97:0b:96:fd:
28:e0:0c:74:94:d5:79:91:a0:93:c7:63:e7:90:80:
e8:8c:fc:ce:51:03:26:66:7e:f1:10:58:34:15:60:
9d:5c:22:f1:58:6a:e0:f1:c9:19:b9:65:a9:48:98:
39:19:5a:a4:16:2e:e5:e3:69:74:3b:38:d6:b8:ec:
7f:01:71:87:9c:74:e2:25:6e:0e:a3:6a:da:4e:c5:
45:19:66:dd:35:c3:51:48:e9:a1:0c:e7:cb:79:fc:
b2:31:f6:0f:f6:b1:61:70:61:b6:9a:5b:d7:d9:41:
c5:9b:52:84:d8:24:8d:fe:03:40:5e:29:0f:d0:45:
c8:78:06:7a:e5:ef:34:65:1d:bc:d8:5d:3d:e4:4b:
3c:e6:c9:80:db:9b:02:ef:89:c8:f4:3e:84:01:f9:
df:b8:7e:3b:e0:87:df:1c:73:07:3e:a9:b8:4e:5d:
c3:5a:95:a7:5c:9d:97:3e:ce:d4:07:81:b2:51:eb:
41:63:30:08:95:cc:58:4c:8c:5f:36:32:8c:03:65:
4b:19:93:df:08:2d:85:ba:54:4c:93:e5:62:e9:5d:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AC:0C:BB:55:1C:47:34:2B:D4:8D:09:F8:DE:E6:0C:D9:75:61:C9
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:d5:a6:d4:d6:8c:02:a8:9c:02:64:ad:bd:df:f4:4c:87:
eb:31:5f:ba:d1:63:09:2d:4c:a5:8f:f3:a9:38:29:24:b5:7e:
da:19:85:3f:b8:41:bf:ef:34:1f:ba:e7:ca:4d:97:d3:50:35:
23:6f:e2:d9:94:24:8d:3f:3b:b3:08:42:06:c0:7b:38:70:00:
34:6c:81:11:4e:c7:99:d8:7d:be:f0:5c:fe:0a:69:b5:53:83:
84:e4:60:4a:58:1e:b9:e6:7c:78:54:f2:9d:70:da:d8:e2:ca:
5e:8f:6f:8f:97:82:29:28:cd:dc:22:f8:71:25:f6:57:06:91:
56:85:28:9b:da:f1:d5:88:cd:c7:5a:fb:5b:9a:28:71:69:88:
ba:7a:30:d6:ff:90:40:07:f2:b5:88:ff:5c:5b:a1:ca:0d:39:
60:22:6e:af:44:49:79:b5:0a:2e:3a:fe:30:bc:8e:5b:9b:42:
2a:9c:d6:01:a1:46:57:4e:92:66:d9:05:c0:64:54:96:75:e4:
3e:94:e3:81:b8:67:db:32:b2:e5:29:bb:e0:40:de:bf:7d:a3:
c0:bd:92:c4:c3:93:a6:8b:5d:30:4d:78:13:6f:e0:a7:13:fe:
53:95:4b:3d:55:fd:43:98:7c:66:53:2a:1e:5d:ab:e9:09:c9:
17:08:3f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNECb+2VcJZRQq+rGHyNR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjUwMjZlNTk1NWRjZGQxMTE0NzZmOWI2ODQ5ZDcyODE4
NTQ2OWIwHhcNMjUwNDE5MDgwMDI2WhcNMjUwNDIwMDgwMDI2WjAzMTEwLwYDVQQD
EyhhOWFjMGNiYjU1MWM0NzM0MmJkNDhkMDlmOGRlZTYwY2Q5NzU2MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD4uJtzXgULuXupaBIzuZpt1YG/z
qKhAmGVEVEE6CTsWI0qhGAxJRZcLlv0o4Ax0lNV5kaCTx2PnkIDojPzOUQMmZn7x
EFg0FWCdXCLxWGrg8ckZuWWpSJg5GVqkFi7l42l0OzjWuOx/AXGHnHTiJW4Oo2ra
TsVFGWbdNcNRSOmhDOfLefyyMfYP9rFhcGG2mlvX2UHFm1KE2CSN/gNAXikP0EXI
eAZ65e80ZR282F095Es85smA25sC74nI9D6EAfnfuH474IffHHMHPqm4Tl3DWpWn
XJ2XPs7UB4GyUetBYzAIlcxYTIxfNjKMA2VLGZPfCC2FulRMk+Vi6V3xWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmsDLtVHEc0K9SNCfje5gzZdWHJMB8GA1UdIwQY
MBaAFO4lAm5ZVdzdERR2+baEnXKBhUabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTct
MmE0NmY2ZmFjNGNhLzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTctMmE0NmY2ZmFjNGNh
LzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlLVptTW
jAKonAJkrb3f9EyH6zFfutFjCS1MpY/zqTgpJLV+2hmFP7hBv+80H7rnyk2X01A1
I2/i2ZQkjT87swhCBsB7OHAANGyBEU7Hmdh9vvBc/gpptVODhORgSlgeueZ8eFTy
nXDa2OLKXo9vj5eCKSjN3CL4cSX2VwaRVoUom9rx1YjNx1r7W5oocWmIunow1v+Q
QAfytYj/XFuhyg05YCJur0RJebUKLjr+MLyOW5tCKpzWAaFGV06SZtkFwGRUlnXk
PpTjgbhn2zKy5Sm74EDev32jwL2SxMOTpotdME14E2/gpxP+U5VLPVX9Q5h8ZlMq
Hl2r6QnJFwg/QA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:16:59 2025 by rpki-client