Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: 1wJuuYaoLwS0FVDO+VolxiEFzVIkisg5hHzJpLe4naw=
Subject key identifier: F1:F9:BC:02:D4:6D:D9:D8:4C:50:39:D9:3E:2E:70:7F:B4:9B:11:C8
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 01964FA39203A6CD9700E9EC9D11783BAE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 11BB
Signing time: Sat 19 Apr 2025 20:00:41 +0000
Manifest this update: Sat 19 Apr 2025 20:00:41 +0000
Manifest next update: Sun 20 Apr 2025 20:00:41 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: m34jw4Xd33qKR1nMRCWOL5zMOqmG8c2JJuCY07tpB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:92:03:a6:cd:97:00:e9:ec:9d:11:78:3b:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Apr 19 20:00:41 2025 GMT
Not After : Apr 20 20:00:41 2025 GMT
Subject: CN=f1f9bc02d46dd9d84c5039d93e2e707fb49b11c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:72:57:26:05:5b:6f:63:ed:8a:d6:36:30:
4c:a5:82:a4:c2:02:73:44:54:52:d0:57:10:b4:18:
b7:fc:33:3a:17:fe:45:01:3a:5c:58:bb:84:b5:2a:
58:78:85:58:e2:33:a3:14:c7:1b:f8:5b:2f:3b:71:
bc:51:62:7d:b1:ff:ab:46:1d:7b:8f:b8:cc:18:bb:
01:29:14:f5:ae:41:5e:73:10:d3:1c:98:d9:f6:c8:
1c:7c:a7:f6:80:42:86:fa:b8:b8:e6:cb:c7:bd:e2:
31:a8:1b:b7:f3:22:83:0d:a9:7e:7c:67:c0:a5:a4:
d6:6e:91:c8:c2:14:eb:b7:ac:40:ee:38:0a:4d:e2:
a2:fd:ca:e7:32:12:75:3d:42:e7:95:18:34:3a:db:
ce:26:fd:db:c2:2a:93:d0:6c:ce:55:a4:50:bf:03:
e4:1b:a5:4f:84:a1:37:ce:15:8f:c6:e2:54:71:99:
2d:02:6c:b8:67:b2:bb:00:6a:02:58:7b:32:d1:e9:
6a:9d:d9:1f:bd:1e:98:5f:13:34:c7:e1:09:8e:68:
2b:a7:66:70:23:2c:84:48:da:af:16:b0:ee:ca:76:
c4:61:a3:ce:32:29:2b:94:24:31:e4:c7:98:07:1e:
7b:4b:fa:96:10:46:03:c6:5d:38:9b:63:1f:8d:57:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F9:BC:02:D4:6D:D9:D8:4C:50:39:D9:3E:2E:70:7F:B4:9B:11:C8
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:99:cb:f1:0c:74:f7:de:62:5e:31:65:97:f9:4a:89:c1:71:
eb:10:c3:ec:96:7a:5b:5f:b3:42:21:d6:37:17:79:8a:f4:63:
49:ed:21:f4:ba:67:bb:24:8c:03:9b:3d:2e:6a:4f:14:2c:ab:
12:57:35:85:d8:35:c2:3f:4c:c3:7f:7a:36:d3:58:24:d2:a2:
ed:21:39:a1:2e:c1:47:d6:97:54:5d:0c:40:df:17:23:0e:46:
86:1b:17:e9:ce:e3:8e:03:aa:a1:e0:50:fc:8e:40:fb:9f:ff:
83:08:80:80:f3:86:f2:20:b4:60:95:8a:e1:42:ee:53:0a:71:
51:ef:b8:6e:6e:22:2e:21:78:00:54:f8:06:ff:01:ba:3b:6b:
00:1e:e2:81:59:53:b9:8d:f7:bb:71:ba:da:6c:97:54:3e:02:
81:64:d1:f9:15:13:80:84:75:85:38:16:53:73:12:de:0c:2a:
4d:14:14:a5:16:bf:1a:87:90:c5:fc:d2:85:58:30:58:b3:bd:
db:32:38:66:bf:b9:2c:84:17:a5:00:0e:88:d5:3f:b9:45:7c:
87:1e:0f:d4:75:45:b8:cc:e9:ff:08:03:47:cc:04:00:ff:52:
a8:9d:9b:56:b9:a2:d0:b3:7f:87:a7:3d:ca:e8:28:3d:0e:d8:
ba:07:00:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPo5IDps2XAOnsnRF4O643MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3
MmY0NWMwHhcNMjUwNDE5MjAwMDQxWhcNMjUwNDIwMjAwMDQxWjAzMTEwLwYDVQQD
EyhmMWY5YmMwMmQ0NmRkOWQ4NGM1MDM5ZDkzZTJlNzA3ZmI0OWIxMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux5yVyYFW29j7YrWNjBMpYKkwgJz
RFRS0FcQtBi3/DM6F/5FATpcWLuEtSpYeIVY4jOjFMcb+FsvO3G8UWJ9sf+rRh17
j7jMGLsBKRT1rkFecxDTHJjZ9sgcfKf2gEKG+ri45svHveIxqBu38yKDDal+fGfA
paTWbpHIwhTrt6xA7jgKTeKi/crnMhJ1PULnlRg0OtvOJv3bwiqT0GzOVaRQvwPk
G6VPhKE3zhWPxuJUcZktAmy4Z7K7AGoCWHsy0elqndkfvR6YXxM0x+EJjmgrp2Zw
IyyESNqvFrDuynbEYaPOMikrlCQx5MeYBx57S/qWEEYDxl04m2MfjVc+ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH5vALUbdnYTFA52T4ucH+0mxHIMB8GA1UdIwQY
MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt
ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4
LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpnL8Qx0
995iXjFll/lKicFx6xDD7JZ6W1+zQiHWNxd5ivRjSe0h9LpnuySMA5s9LmpPFCyr
Elc1hdg1wj9Mw396NtNYJNKi7SE5oS7BR9aXVF0MQN8XIw5GhhsX6c7jjgOqoeBQ
/I5A+5//gwiAgPOG8iC0YJWK4ULuUwpxUe+4bm4iLiF4AFT4Bv8BujtrAB7igVlT
uY33u3G62myXVD4CgWTR+RUTgIR1hTgWU3MS3gwqTRQUpRa/GoeQxfzShVgwWLO9
2zI4Zr+5LIQXpQAOiNU/uUV8hx4P1HVFuMzp/wgDR8wEAP9SqJ2bVrmi0LN/h6c9
yugoPQ7YugcARQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:03:02 2025 by rpki-client