Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: hiNmCEo573Eh6BsSpe+yFju5kVnPLxHnjTfPcoFqIKg=
Subject key identifier: 9A:FB:58:D9:AF:22:52:2A:91:55:11:06:1A:06:0A:DC:F3:3B:CE:63
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 01964D7E21047C7E81914704BD105CBA7B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 10:00:33 +0000
Manifest this update: Sat 19 Apr 2025 10:00:33 +0000
Manifest next update: Sun 20 Apr 2025 10:00:33 +0000
Files and hashes: 1: EFku_9VXqbesZmjqxLjBcuB7CJQ.roa (hash: NldkodBx9XHI5VbEYIs7dZXK6yR3WU54I+HEv9PZwY0=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: 3gE7mxJE/2utM83qve/XPQNm4JNdhgtp7t03w/8k2kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:21:04:7c:7e:81:91:47:04:bd:10:5c:ba:7b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Apr 19 10:00:33 2025 GMT
Not After : Apr 20 10:00:33 2025 GMT
Subject: CN=9afb58d9af22522a915511061a060adcf33bce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:c9:4d:6c:c7:b1:db:a0:d4:36:9f:6f:88:
01:8b:80:4d:5d:8e:c9:f9:10:69:02:d5:9b:7c:91:
12:63:6d:1b:0f:b9:6d:f6:dc:d0:05:ee:17:35:e9:
c4:1f:8d:34:94:3f:2d:e5:81:3c:2d:89:3f:7c:55:
4a:95:65:cc:e0:e1:84:c8:42:b2:36:5b:e4:33:3a:
fc:5f:5a:f1:fb:df:23:7f:48:cb:b7:48:0a:aa:58:
6b:19:22:c6:eb:eb:47:b2:f1:40:9e:2e:fe:74:a9:
6a:53:0b:46:87:b9:3f:f8:7b:0e:0a:68:53:99:4c:
f2:9e:c1:e2:62:b0:69:25:0e:43:5c:9b:5e:f2:4a:
25:0a:94:cc:71:09:df:09:8a:f8:6c:e8:a0:d1:8b:
5e:f7:33:10:78:2b:21:11:aa:13:3c:45:82:4f:e8:
eb:dd:f2:d3:2b:a4:9e:c7:2b:aa:3b:99:69:e4:a4:
81:1d:cd:54:c9:5c:17:66:10:97:14:89:ee:b8:f1:
87:b7:32:87:23:94:25:a5:bf:95:06:c8:34:44:dd:
31:4f:d4:b9:43:1a:1a:bb:87:05:80:fd:60:c3:2a:
96:66:01:b7:63:63:51:52:be:68:35:23:ca:ab:c5:
00:00:bb:b0:7a:eb:7c:b3:0d:59:3c:7c:ba:2e:fc:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:58:D9:AF:22:52:2A:91:55:11:06:1A:06:0A:DC:F3:3B:CE:63
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c8:64:20:33:2d:dd:cc:ca:cb:90:c3:de:22:77:e4:5d:17:
6f:f4:9e:a9:73:71:c6:6b:ed:b4:4f:2e:61:de:45:38:b0:1e:
26:90:a1:c5:8c:33:52:30:f9:17:ee:44:90:80:40:34:4f:d2:
24:f7:44:4f:5f:21:8a:cc:ef:9b:eb:e8:58:2e:05:f5:7b:21:
23:41:32:1e:b4:0e:0c:49:be:67:97:30:74:8c:ed:54:af:4f:
9a:16:5f:f7:99:6f:77:ac:90:9e:67:66:fa:9a:24:c8:6e:fd:
c5:52:0f:0d:61:28:a4:14:47:d3:0c:5b:48:a2:b2:62:9b:60:
af:c6:fb:bd:c2:b0:be:5a:76:a3:11:5a:2f:04:ce:48:46:84:
21:82:58:83:31:01:38:aa:c6:e3:61:1c:ac:88:7f:39:1c:7f:
ef:b2:6d:89:60:cd:85:d1:2f:22:bc:67:49:f4:13:fc:36:42:
95:c7:65:ea:9f:67:94:60:56:f6:2e:bb:5a:12:e6:50:c3:17:
68:91:1a:c7:ce:38:2e:7d:cd:24:e7:e2:19:76:b2:27:93:45:
2f:cd:3d:7a:42:cb:92:b8:6d:6e:eb:cf:53:27:9c:78:62:2c:
7f:66:ac:f1:8e:58:ae:16:28:cc:bb:a6:27:bc:93:f7:89:15:
b9:bf:ab:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfiEEfH6BkUcEvRBcunsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx
NDlhZmEwHhcNMjUwNDE5MTAwMDMzWhcNMjUwNDIwMTAwMDMzWjAzMTEwLwYDVQQD
Eyg5YWZiNThkOWFmMjI1MjJhOTE1NTExMDYxYTA2MGFkY2YzM2JjZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjrJTWzHsdug1Dafb4gBi4BNXY7J
+RBpAtWbfJESY20bD7lt9tzQBe4XNenEH400lD8t5YE8LYk/fFVKlWXM4OGEyEKy
NlvkMzr8X1rx+98jf0jLt0gKqlhrGSLG6+tHsvFAni7+dKlqUwtGh7k/+HsOCmhT
mUzynsHiYrBpJQ5DXJte8kolCpTMcQnfCYr4bOig0Yte9zMQeCshEaoTPEWCT+jr
3fLTK6SexyuqO5lp5KSBHc1UyVwXZhCXFInuuPGHtzKHI5Qlpb+VBsg0RN0xT9S5
Qxoau4cFgP1gwyqWZgG3Y2NRUr5oNSPKq8UAALuweut8sw1ZPHy6LvwD4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr7WNmvIlIqkVURBhoGCtzzO85jMB8GA1UdIwQY
MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt
ZWYyZDUzYjVhMzRkLzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk
LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8hkIDMt
3czKy5DD3iJ35F0Xb/SeqXNxxmvttE8uYd5FOLAeJpChxYwzUjD5F+5EkIBANE/S
JPdET18hiszvm+voWC4F9XshI0EyHrQODEm+Z5cwdIztVK9PmhZf95lvd6yQnmdm
+pokyG79xVIPDWEopBRH0wxbSKKyYptgr8b7vcKwvlp2oxFaLwTOSEaEIYJYgzEB
OKrG42EcrIh/ORx/77JtiWDNhdEvIrxnSfQT/DZClcdl6p9nlGBW9i67WhLmUMMX
aJEax844Ln3NJOfiGXayJ5NFL809ekLLkrhtbuvPUyeceGIsf2as8Y5YrhYozLum
J7yT94kVub+rbQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:23 2025 by rpki-client