
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: GTxHOaCUkZjicdSxiW9VEZsDrFuaK16jc5SxWc9p9IM=
Subject key identifier: 0D:07:59:ED:B2:40:02:A3:A1:42:FB:44:E1:A3:63:FD:17:3D:6E:FC
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 0196CCF41352531DDD6AA07F4E3583C4CBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 153A
Signing time: Wed 14 May 2025 04:01:09 +0000
Manifest this update: Wed 14 May 2025 04:01:09 +0000
Manifest next update: Thu 15 May 2025 04:01:09 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: 8Ragzot9ghcZWdql2kUVCy7nTQ726iZSVzYEY0KCJa4=)
2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f4:13:52:53:1d:dd:6a:a0:7f:4e:35:83:c4:cb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: May 14 04:01:09 2025 GMT
Not After : May 15 04:01:09 2025 GMT
Subject: CN=0d0759edb24002a3a142fb44e1a363fd173d6efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:fb:f4:be:6a:2b:38:4f:c7:e0:1d:71:85:
d1:88:50:ef:c6:58:61:74:e2:15:ff:4b:3b:0c:3b:
74:df:a1:3f:ba:8a:d8:73:b2:24:9e:9d:43:8f:a9:
b2:ea:62:88:eb:b4:2f:94:f0:64:13:66:b8:32:16:
57:05:fb:b8:e4:37:d2:69:c8:3c:46:ab:22:44:c8:
07:4f:55:e6:25:b7:8a:fd:b7:24:48:37:52:62:8d:
b2:1e:1a:85:8d:e8:26:f7:3c:2c:25:f9:20:bd:4e:
2a:27:50:26:36:56:3d:59:cf:41:31:b1:6d:bf:6b:
9e:5d:1f:38:3c:b9:bc:e1:b5:8a:e2:f5:b5:47:df:
15:5e:23:c5:90:a3:81:02:c9:59:29:fb:0b:82:69:
3a:8f:25:aa:b1:42:7c:75:ff:27:0c:80:2c:49:8f:
cc:35:41:f1:8c:1a:07:22:bd:26:65:fd:a8:cd:d9:
d7:d2:ae:bf:c6:2e:3d:18:8d:52:8d:12:5c:bf:94:
0b:67:54:bc:68:ab:97:d1:ee:57:53:b9:79:17:48:
08:cb:2e:76:d5:d3:71:2d:5e:69:46:91:6f:09:64:
95:20:ef:5b:79:7a:1d:af:12:00:fa:0a:19:2c:72:
3e:3f:e8:68:77:c1:ee:8e:96:f5:58:f4:b1:62:99:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:59:ED:B2:40:02:A3:A1:42:FB:44:E1:A3:63:FD:17:3D:6E:FC
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:53:f2:ff:26:ed:8f:b4:b8:cd:2a:b5:80:94:8a:9a:58:
15:9f:5d:45:96:72:23:34:fb:cb:0c:89:48:49:06:af:77:e1:
74:31:e8:c2:9c:40:5e:5c:ad:a9:e9:7a:0d:fd:99:b3:6d:8e:
a4:6f:0e:94:bf:4b:3b:7f:b0:d5:cc:f3:2b:eb:5d:38:fc:59:
13:06:7b:da:e2:7e:31:de:78:d0:f8:d3:cf:09:1c:bd:75:25:
fa:e5:3c:15:87:18:3a:19:fa:7f:c3:36:41:13:20:4a:f4:a8:
96:e5:68:ed:97:32:dd:4a:ad:4b:f1:b4:5d:86:cc:8c:d4:ff:
d1:bc:b9:f5:30:9b:4a:49:a5:9a:43:82:37:5f:d2:72:96:06:
4b:25:b9:af:ee:58:33:d2:9a:d4:54:85:7e:f0:27:a6:b2:99:
e5:43:8c:0a:18:35:d1:0e:67:25:ae:83:60:d9:85:33:ac:61:
04:db:44:c3:8a:21:8d:75:d7:50:94:fb:96:24:50:c4:1d:19:
f2:71:7c:b4:a1:40:8f:42:fe:31:8c:ad:ad:ea:f6:31:39:4b:
09:b6:c8:1e:98:b8:a0:0f:09:c3:32:07:68:c3:7c:11:30:8b:
86:56:61:96:ab:00:83:85:74:3b:82:8f:cf:97:81:f8:cc:62:
78:3b:06:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM9BNSUx3daqB/TjWDxMu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2
ODRjYmMwHhcNMjUwNTE0MDQwMTA5WhcNMjUwNTE1MDQwMTA5WjAzMTEwLwYDVQQD
EygwZDA3NTllZGIyNDAwMmEzYTE0MmZiNDRlMWEzNjNmZDE3M2Q2ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP779L5qKzhPx+AdcYXRiFDvxlhh
dOIV/0s7DDt036E/uorYc7Iknp1Dj6my6mKI67QvlPBkE2a4MhZXBfu45DfSacg8
RqsiRMgHT1XmJbeK/bckSDdSYo2yHhqFjegm9zwsJfkgvU4qJ1AmNlY9Wc9BMbFt
v2ueXR84PLm84bWK4vW1R98VXiPFkKOBAslZKfsLgmk6jyWqsUJ8df8nDIAsSY/M
NUHxjBoHIr0mZf2ozdnX0q6/xi49GI1SjRJcv5QLZ1S8aKuX0e5XU7l5F0gIyy52
1dNxLV5pRpFvCWSVIO9beXodrxIA+goZLHI+P+hod8Hujpb1WPSxYpme+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0HWe2yQAKjoUL7ROGjY/0XPW78MB8GA1UdIwQY
MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt
MzQ0MzQ2NGI5MjA5LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5
LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbudT8v8m
7Y+0uM0qtYCUippYFZ9dRZZyIzT7ywyJSEkGr3fhdDHowpxAXlytqel6Df2Zs22O
pG8OlL9LO3+w1czzK+tdOPxZEwZ72uJ+Md540PjTzwkcvXUl+uU8FYcYOhn6f8M2
QRMgSvSoluVo7Zcy3UqtS/G0XYbMjNT/0by59TCbSkmlmkOCN1/ScpYGSyW5r+5Y
M9Ka1FSFfvAnprKZ5UOMChg10Q5nJa6DYNmFM6xhBNtEw4ohjXXXUJT7liRQxB0Z
8nF8tKFAj0L+MYytrer2MTlLCbbIHpi4oA8JwzIHaMN8ETCLhlZhlqsAg4V0O4KP
z5eB+MxieDsGDA==
-----END CERTIFICATE-----
Generated at Wed May 14 12:39:29 2025 by rpki-client