Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: 01il5IT8UYLALhsjkY2lTVWjFW+Kui8OB4uOdafxszM=
Subject key identifier: BA:09:4F:FF:3B:70:D8:8B:DD:E4:FC:EE:13:25:AD:EE:3D:AE:68:A8
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019655A57D8D524EFF36D311CEDD528F8564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0B93
Signing time: Mon 21 Apr 2025 00:00:30 +0000
Manifest this update: Mon 21 Apr 2025 00:00:30 +0000
Manifest next update: Tue 22 Apr 2025 00:00:30 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: soylRTJnMggKSEKdu+SwfxkL1nbiiopjOLUMBhiKMac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:7d:8d:52:4e:ff:36:d3:11:ce:dd:52:8f:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Apr 21 00:00:30 2025 GMT
Not After : Apr 22 00:00:30 2025 GMT
Subject: CN=ba094fff3b70d88bdde4fcee1325adee3dae68a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:82:35:7e:04:8f:42:94:d0:d8:ec:2d:c7:
04:a9:15:07:d3:57:ec:93:11:fa:c9:a3:b7:9c:0d:
4f:d0:68:02:14:3b:d0:d4:79:34:71:1b:07:a8:e0:
ef:0b:be:63:d2:94:8e:86:c6:0b:b2:25:5b:6a:81:
49:28:c6:4a:1a:ec:58:20:34:22:be:e8:52:16:a1:
11:78:d9:6c:b3:84:b1:6f:76:73:4c:63:57:7f:4b:
2e:a8:dc:32:49:35:7e:2b:17:7c:c2:7a:ef:5d:13:
70:c3:e8:57:47:af:8b:fa:ec:88:d9:89:29:dd:b9:
a4:1b:49:1e:6a:8a:e5:df:71:1c:8c:15:2b:6a:df:
7f:49:ed:e5:c3:15:d2:97:54:dc:8f:4f:31:2f:10:
18:74:f6:9a:aa:1b:8c:44:d5:1b:53:77:99:47:7b:
60:76:32:33:87:03:02:e3:9d:aa:15:ac:05:30:38:
c4:9f:4b:88:9f:b7:7a:6e:2b:08:27:6f:10:fb:75:
95:18:9f:5d:3e:11:8d:49:f0:97:5e:68:ce:8a:a4:
2f:2e:9c:22:2f:ea:b7:41:dc:f8:62:8b:8d:f9:d1:
c4:e2:cd:48:7a:b1:9c:86:f1:96:ac:4d:c4:2f:20:
a4:d0:c6:96:e6:ad:d1:c5:32:1d:2d:99:4b:2f:8f:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:09:4F:FF:3B:70:D8:8B:DD:E4:FC:EE:13:25:AD:EE:3D:AE:68:A8
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4d:f3:56:1f:fa:bb:17:cd:e3:b8:f8:c2:72:d4:16:89:55:
72:53:4f:18:0b:e3:cf:dd:23:56:31:8a:43:34:df:de:3a:d9:
f2:3d:62:2b:99:fe:06:9c:cd:0c:38:88:f3:60:ce:c0:a1:a3:
f6:4a:5e:3b:e5:25:54:af:5d:a7:40:28:a6:ab:c6:f0:05:d0:
e9:29:cf:52:7f:51:fc:c2:92:cb:be:88:12:01:e5:21:0a:72:
0e:c8:9f:5f:69:3d:74:e8:58:8e:c3:7c:88:4f:88:f1:db:23:
41:66:7a:7f:28:18:c5:b9:75:00:c9:29:d0:c9:21:f6:49:b1:
c2:c5:a0:65:ad:5e:db:5f:b2:bd:20:33:6f:ed:1e:9c:75:b8:
97:a8:24:dc:be:fa:c8:a5:77:f5:30:7c:dc:1c:2c:1f:08:24:
6c:bd:c0:5f:72:8f:0c:c1:ed:ff:2f:93:3a:84:44:e4:19:26:
67:12:34:77:a3:0c:c9:c7:8f:41:4d:68:ad:36:bb:4d:e2:bb:
ed:b3:9f:2b:66:d0:22:64:31:90:a8:70:72:8f:4a:18:17:0f:
ed:f9:43:01:d5:28:51:fb:31:9e:d9:ed:a6:34:3e:55:e7:a8:
dc:5e:89:c1:ee:bf:67:36:9b:05:9e:6e:96:d2:e5:77:cd:40:
97:ec:4a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpX2NUk7/NtMRzt1Sj4VkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1
OGUyOTYwHhcNMjUwNDIxMDAwMDMwWhcNMjUwNDIyMDAwMDMwWjAzMTEwLwYDVQQD
EyhiYTA5NGZmZjNiNzBkODhiZGRlNGZjZWUxMzI1YWRlZTNkYWU2OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOCCNX4Ej0KU0NjsLccEqRUH01fs
kxH6yaO3nA1P0GgCFDvQ1Hk0cRsHqODvC75j0pSOhsYLsiVbaoFJKMZKGuxYIDQi
vuhSFqEReNlss4Sxb3ZzTGNXf0suqNwySTV+Kxd8wnrvXRNww+hXR6+L+uyI2Ykp
3bmkG0keaorl33EcjBUrat9/Se3lwxXSl1Tcj08xLxAYdPaaqhuMRNUbU3eZR3tg
djIzhwMC452qFawFMDjEn0uIn7d6bisIJ28Q+3WVGJ9dPhGNSfCXXmjOiqQvLpwi
L+q3Qdz4YouN+dHE4s1IerGchvGWrE3ELyCk0MaW5q3RxTIdLZlLL494aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoJT/87cNiL3eT87hMlre49rmioMB8GA1UdIwQY
MBaAFHvbPF2VHr67hqmahNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2It
NzdmNjc2M2Y0ZDJiLzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJi
LzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU3zVh/6
uxfN47j4wnLUFolVclNPGAvjz90jVjGKQzTf3jrZ8j1iK5n+BpzNDDiI82DOwKGj
9kpeO+UlVK9dp0AopqvG8AXQ6SnPUn9R/MKSy76IEgHlIQpyDsifX2k9dOhYjsN8
iE+I8dsjQWZ6fygYxbl1AMkp0Mkh9kmxwsWgZa1e21+yvSAzb+0enHW4l6gk3L76
yKV39TB83BwsHwgkbL3AX3KPDMHt/y+TOoRE5BkmZxI0d6MMycePQU1orTa7TeK7
7bOfK2bQImQxkKhwco9KGBcP7flDAdUoUfsxntntpjQ+Veeo3F6Jwe6/ZzabBZ5u
ltLld81Al+xKpg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:27 2025 by rpki-client