Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier: AONM4FY32hNPw/164J4UHcs9/Y2gDXLSonsPRhDVQIw=
Subject key identifier: BD:99:45:F5:DF:34:BE:81:3A:0B:C3:37:AD:CB:63:6C:01:FC:7D:35
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 019643685EF589CC12954227FA81D1A18092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number: 02C9
Signing time: Thu 17 Apr 2025 11:00:35 +0000
Manifest this update: Thu 17 Apr 2025 11:00:35 +0000
Manifest next update: Fri 18 Apr 2025 11:00:35 +0000
Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: VsBaN+tMTV53tqdS7i3NU+pOeH5LWsJoRJ4Tm+4UqaM=)
2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:5e:f5:89:cc:12:95:42:27:fa:81:d1:a1:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Apr 17 11:00:35 2025 GMT
Not After : Apr 18 11:00:35 2025 GMT
Subject: CN=bd9945f5df34be813a0bc337adcb636c01fc7d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:4e:fe:64:3a:97:9f:b4:c7:49:30:88:96:
45:b4:a7:17:27:e7:56:bb:60:5e:9e:d1:23:94:a4:
69:d4:e0:79:00:aa:ff:87:e2:af:30:29:c3:2f:bc:
b4:da:e9:b1:39:77:be:79:6f:ee:72:92:85:3e:6e:
7b:7d:75:43:52:b4:d0:06:80:6f:3a:65:9d:fe:01:
8f:ab:20:01:29:f9:0a:a4:53:6a:58:9d:c8:ee:92:
61:61:5b:cd:f6:d1:47:31:12:5c:5b:5c:e0:8a:f0:
2b:e3:b0:b8:01:4e:58:dc:77:a0:64:8d:3f:ec:cf:
05:5a:87:71:fe:de:b3:66:01:41:50:95:ef:b5:84:
39:9c:a9:a4:68:ea:34:55:f5:54:60:95:cf:ea:47:
fb:71:b0:51:aa:e1:85:ae:89:f7:b2:61:4c:62:e5:
dc:56:00:07:a6:d1:84:42:01:a4:db:b4:00:a9:4a:
81:fe:75:ef:60:85:4e:d2:55:e4:7f:9d:53:b7:0c:
91:63:f1:51:a2:2e:2f:5b:aa:f7:6b:8b:43:a6:eb:
53:46:60:aa:e4:b8:8f:bb:56:7a:8b:50:47:c1:bd:
db:98:7d:35:a4:77:4f:8e:0f:06:7d:4d:ff:e2:ef:
fc:07:43:3c:eb:e1:cf:41:5f:df:bf:a2:8a:8a:71:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:45:F5:DF:34:BE:81:3A:0B:C3:37:AD:CB:63:6C:01:FC:7D:35
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:83:25:fd:6e:0a:ca:60:63:f9:c9:41:ef:67:87:5d:29:
40:96:d4:3b:a6:bc:8b:5b:ef:b1:d8:76:83:a7:03:69:a1:fc:
e0:35:ef:8a:d9:6b:95:0a:bc:ea:f1:e4:17:a9:e5:4d:3f:fc:
e8:fc:fc:7d:b2:7a:10:cc:3b:0e:17:df:59:cc:a8:68:ea:49:
09:18:14:e1:b8:14:ee:ba:8f:52:27:42:9c:40:33:d3:b9:ab:
33:aa:9f:fc:0d:c8:ec:6f:14:17:be:26:55:99:64:75:d7:ca:
7e:e6:4b:9e:3b:25:2f:be:9e:92:46:0e:4e:12:23:c0:9e:3a:
99:08:6c:01:48:99:12:f0:3a:c4:33:42:c9:d1:79:11:2f:57:
d1:8f:78:09:b5:83:86:df:22:d2:2d:65:fd:e9:45:d0:23:55:
8a:c8:ed:ac:c2:9e:9e:50:0c:7c:57:3a:01:f4:a7:a4:0c:03:
4d:b1:d6:52:7b:18:96:7d:95:41:25:cc:b5:54:ad:a7:cd:f4:
d4:96:53:02:4b:0a:41:04:4b:cd:9c:05:2d:6e:5c:2b:57:33:
94:6b:c0:d8:9d:71:ad:3c:23:0a:55:33:aa:5a:47:c5:f5:21:
24:8b:d8:09:5a:a3:6a:54:bb:fe:64:8d:43:a7:6f:a4:4a:99:
5c:b4:81:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDaF71icwSlUIn+oHRoYCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw
MjBhOWQwHhcNMjUwNDE3MTEwMDM1WhcNMjUwNDE4MTEwMDM1WjAzMTEwLwYDVQQD
EyhiZDk5NDVmNWRmMzRiZTgxM2EwYmMzMzdhZGNiNjM2YzAxZmM3ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzStO/mQ6l5+0x0kwiJZFtKcXJ+dW
u2BentEjlKRp1OB5AKr/h+KvMCnDL7y02umxOXe+eW/ucpKFPm57fXVDUrTQBoBv
OmWd/gGPqyABKfkKpFNqWJ3I7pJhYVvN9tFHMRJcW1zgivAr47C4AU5Y3HegZI0/
7M8FWodx/t6zZgFBUJXvtYQ5nKmkaOo0VfVUYJXP6kf7cbBRquGFron3smFMYuXc
VgAHptGEQgGk27QAqUqB/nXvYIVO0lXkf51TtwyRY/FRoi4vW6r3a4tDputTRmCq
5LiPu1Z6i1BHwb3bmH01pHdPjg8GfU3/4u/8B0M86+HPQV/fv6KKinH9iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2ZRfXfNL6BOgvDN63LY2wB/H01MB8GA1UdIwQY
MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct
Y2EyOGQ5OTYyNDQ2LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2
LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY6DJf1u
CspgY/nJQe9nh10pQJbUO6a8i1vvsdh2g6cDaaH84DXvitlrlQq86vHkF6nlTT/8
6Pz8fbJ6EMw7DhffWcyoaOpJCRgU4bgU7rqPUidCnEAz07mrM6qf/A3I7G8UF74m
VZlkddfKfuZLnjslL76ekkYOThIjwJ46mQhsAUiZEvA6xDNCydF5ES9X0Y94CbWD
ht8i0i1l/elF0CNVisjtrMKenlAMfFc6AfSnpAwDTbHWUnsYln2VQSXMtVStp830
1JZTAksKQQRLzZwFLW5cK1czlGvA2J1xrTwjClUzqlpHxfUhJIvYCVqjalS7/mSN
Q6dvpEqZXLSBLw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:24:52 2025 by rpki-client