Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: eX8XVHWgno/xkvNYWA7mLLXGSiG7zVG3PtJThnkvIfY=
Subject key identifier: 19:31:4F:DB:AE:CF:15:99:49:92:AF:70:34:A8:58:C6:D0:96:0F:51
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01958F2A5AF3E5E381584F59C903923DA9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0C6C
Signing time: Thu 13 Mar 2025 11:01:12 +0000
Manifest this update: Thu 13 Mar 2025 11:01:12 +0000
Manifest next update: Fri 14 Mar 2025 11:01:12 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: rDbGsy8vZ+ttyDG1J2l6qr83BQacW3Hy6XcoIEhXArE=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:5a:f3:e5:e3:81:58:4f:59:c9:03:92:3d:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Mar 13 11:01:12 2025 GMT
Not After : Mar 14 11:01:12 2025 GMT
Subject: CN=19314fdbaecf15994992af7034a858c6d0960f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:19:b0:e6:89:53:70:e6:2d:8a:aa:86:8d:
fa:7d:cd:97:d6:82:44:56:17:83:38:28:24:ff:65:
ab:30:50:fd:28:64:1b:70:28:14:82:f4:e4:64:74:
91:a8:4b:8e:3c:87:d0:05:79:be:19:d4:4f:ed:5c:
16:88:8c:cc:12:6a:6c:de:f3:7f:4a:26:11:65:80:
e4:3c:1b:ae:9e:e9:66:4a:7f:7e:ee:8f:84:59:8a:
63:03:4e:49:5e:cf:53:98:be:ee:89:11:21:91:e0:
b8:f5:64:69:50:2c:4a:df:6f:0c:67:e1:83:3d:37:
98:de:98:7b:18:53:67:59:3a:95:c9:26:d4:b8:b4:
5a:b1:cc:3c:30:00:ef:9d:39:a9:77:16:f4:d9:28:
c8:ed:e3:2d:bb:32:3f:54:f6:81:df:5a:20:03:f6:
ae:76:a3:78:2c:b4:85:51:1a:8f:2f:08:42:99:2a:
47:0b:88:a2:2f:94:2a:03:65:a7:ba:89:ab:03:b4:
2f:5a:97:a4:6e:0f:5a:a5:e6:3f:ba:fe:8b:41:e9:
d5:e8:42:2c:67:08:32:0a:6c:8b:8f:c2:d5:57:50:
17:d9:02:7d:5a:73:4c:0e:66:b7:38:ba:6c:70:8e:
3a:24:0e:74:18:bf:20:21:2d:49:d5:fb:66:44:59:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:4F:DB:AE:CF:15:99:49:92:AF:70:34:A8:58:C6:D0:96:0F:51
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0b:29:9e:61:29:45:49:af:21:82:7b:2d:06:c7:32:ed:c1:
8d:13:d3:26:fe:9f:8e:f1:1a:50:f2:30:5d:6c:62:59:00:f4:
b2:f1:ba:80:31:a3:64:1d:ff:cb:b8:66:7c:4c:6a:14:64:5e:
23:fe:24:f6:ce:a0:7c:10:98:92:77:57:cf:63:3e:74:be:55:
d7:fb:09:01:29:e8:84:5b:32:4a:a6:06:87:d3:b1:99:d4:0e:
78:fa:9f:40:82:6e:de:ec:cd:47:1a:83:c3:c1:fc:12:1f:3d:
b3:38:96:b3:31:33:80:9c:01:0b:1b:7d:7a:63:b5:bb:6c:d2:
3e:fc:00:b4:70:2b:84:71:2a:d5:8e:3c:9d:57:be:18:de:67:
f5:ee:1d:4e:41:f9:0f:65:69:2d:24:79:5f:bf:8f:ba:94:71:
eb:b9:2a:79:a0:d7:b7:5f:3f:87:2f:91:6e:2c:af:5e:18:c5:
50:fb:fb:4b:60:54:a8:c0:2e:83:8d:61:a7:9b:bb:d6:f8:cd:
7c:c9:ff:15:3d:70:1f:1b:7f:ba:d9:84:50:86:ed:c1:09:7a:
06:30:3d:61:77:5d:c9:f9:f7:6b:6b:9b:c0:de:b1:ab:54:ba:
75:34:4f:86:04:95:18:c6:a1:c2:3d:95:2d:e8:4b:77:ff:2c:
c0:bb:98:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKlrz5eOBWE9ZyQOSPannMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx
ODFhNGMwHhcNMjUwMzEzMTEwMTEyWhcNMjUwMzE0MTEwMTEyWjAzMTEwLwYDVQQD
EygxOTMxNGZkYmFlY2YxNTk5NDk5MmFmNzAzNGE4NThjNmQwOTYwZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZwZsOaJU3DmLYqqho36fc2X1oJE
VheDOCgk/2WrMFD9KGQbcCgUgvTkZHSRqEuOPIfQBXm+GdRP7VwWiIzMEmps3vN/
SiYRZYDkPBuunulmSn9+7o+EWYpjA05JXs9TmL7uiREhkeC49WRpUCxK328MZ+GD
PTeY3ph7GFNnWTqVySbUuLRascw8MADvnTmpdxb02SjI7eMtuzI/VPaB31ogA/au
dqN4LLSFURqPLwhCmSpHC4iiL5QqA2WnuomrA7QvWpekbg9apeY/uv6LQenV6EIs
ZwgyCmyLj8LVV1AX2QJ9WnNMDma3OLpscI46JA50GL8gIS1J1ftmRFnqzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkxT9uuzxWZSZKvcDSoWMbQlg9RMB8GA1UdIwQY
MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt
OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm
LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwspnmEp
RUmvIYJ7LQbHMu3BjRPTJv6fjvEaUPIwXWxiWQD0svG6gDGjZB3/y7hmfExqFGRe
I/4k9s6gfBCYkndXz2M+dL5V1/sJASnohFsySqYGh9OxmdQOePqfQIJu3uzNRxqD
w8H8Eh89sziWszEzgJwBCxt9emO1u2zSPvwAtHArhHEq1Y48nVe+GN5n9e4dTkH5
D2VpLSR5X7+PupRx67kqeaDXt18/hy+RbiyvXhjFUPv7S2BUqMAug41hp5u71vjN
fMn/FT1wHxt/utmEUIbtwQl6BjA9YXddyfn3a2ubwN6xq1S6dTRPhgSVGMahwj2V
LehLd/8swLuYew==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:01 2025 by rpki-client