Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: EVkolmnOA6AthpvvOBx6Zr2FN8o3p85FaAcUn+Kz+eg=
Subject key identifier: 61:46:DD:D1:B3:B4:82:3F:7B:DB:F3:8C:93:32:85:34:D6:07:32:2E
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 0196CB3C0CA4F0952BF77D910483126226A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 1045
Signing time: Tue 13 May 2025 20:00:32 +0000
Manifest this update: Tue 13 May 2025 20:00:32 +0000
Manifest next update: Wed 14 May 2025 20:00:32 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: MIAmfpdirUbf/SUNBGNewT1nKDKu0mHPFG4riLjKaLg=)
2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:0c:a4:f0:95:2b:f7:7d:91:04:83:12:62:26:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: May 13 20:00:32 2025 GMT
Not After : May 14 20:00:32 2025 GMT
Subject: CN=6146ddd1b3b4823f7bdbf38c93328534d607322e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:a0:c4:dd:25:77:7a:1b:0f:87:0d:9e:c5:
7b:ed:2e:cb:a0:50:36:dd:db:26:3c:62:e0:b6:bd:
89:1e:9b:2f:1f:eb:e4:ef:1d:97:38:0a:04:fa:0a:
ba:50:fb:2c:b0:0d:67:73:46:c7:c6:46:eb:be:80:
74:1a:bc:bd:da:d3:44:34:dc:bb:c5:86:6e:f0:aa:
9c:0c:a8:86:fe:68:be:07:37:42:98:9a:eb:4a:9f:
e0:f6:97:b0:be:7b:4f:09:06:f0:2d:37:52:0c:47:
b9:3f:f1:31:48:14:06:bb:d1:c9:9f:00:a2:59:ab:
f7:25:c7:70:86:3a:0c:88:ce:30:4a:ea:6a:ed:37:
86:bf:52:ed:03:ab:c8:c7:c0:f8:58:3e:bb:14:a2:
bb:d1:ee:49:41:50:e0:6d:fe:c5:ce:1f:e6:28:1a:
94:a1:ae:8a:9c:27:d6:63:ad:38:2e:b2:92:0b:dc:
f0:66:49:e1:e3:43:cf:ff:f4:bf:e7:e1:0d:37:b2:
a1:3a:c7:02:6c:94:69:1b:50:ce:22:55:88:12:05:
68:f3:46:3f:8b:8e:2c:0b:59:db:5a:34:a3:94:5c:
a3:17:ec:11:41:21:fc:9f:ea:8d:8b:92:2e:ef:8c:
c1:5f:85:94:15:b4:bf:25:68:07:74:42:f2:36:5c:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:46:DD:D1:B3:B4:82:3F:7B:DB:F3:8C:93:32:85:34:D6:07:32:2E
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b8:7c:10:1b:7a:75:66:63:99:98:71:64:f2:76:b2:27:8b:
93:98:2a:a1:01:fd:67:8d:94:cd:13:45:64:53:61:5e:fa:33:
39:06:07:d4:05:c7:61:8b:9a:b5:a1:4d:51:d8:27:61:c0:74:
67:5e:dd:ab:93:5a:00:7b:01:c3:c9:a1:55:e0:3a:50:fc:45:
e8:07:24:ac:3c:0b:a5:49:c8:fa:45:61:28:3d:87:b4:04:ad:
87:14:36:3d:d7:96:af:2c:79:21:d5:62:1e:02:39:c3:93:74:
5c:53:c9:52:c4:99:08:c9:51:be:81:c5:94:d6:47:7c:a2:3b:
b3:32:85:79:1a:5d:c1:bb:d6:1d:bc:6f:92:c1:f9:dc:80:10:
ef:94:14:d4:74:36:e6:5d:f8:2d:72:5e:79:cc:1c:59:97:48:
09:88:01:2a:ed:4f:f7:f2:5b:e7:80:37:bc:c8:c6:fb:c4:6b:
d8:be:f8:79:0b:5d:c0:53:04:dc:67:38:0b:ce:9b:08:74:e7:
3e:b1:67:95:a9:1c:a4:a5:d7:7d:60:51:57:29:70:1c:22:e5:
89:f1:e5:ec:ce:38:97:32:10:40:f3:be:89:dd:ca:6d:83:0a:
97:ba:6e:a5:1e:c9:c0:e5:a0:5c:23:94:ed:40:51:fa:9c:ef:
70:ba:1d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLPAyk8JUr932RBIMSYiajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjUwNTEzMjAwMDMyWhcNMjUwNTE0MjAwMDMyWjAzMTEwLwYDVQQD
Eyg2MTQ2ZGRkMWIzYjQ4MjNmN2JkYmYzOGM5MzMyODUzNGQ2MDczMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkCgxN0ld3obD4cNnsV77S7LoFA2
3dsmPGLgtr2JHpsvH+vk7x2XOAoE+gq6UPsssA1nc0bHxkbrvoB0Gry92tNENNy7
xYZu8KqcDKiG/mi+BzdCmJrrSp/g9pewvntPCQbwLTdSDEe5P/ExSBQGu9HJnwCi
Wav3JcdwhjoMiM4wSupq7TeGv1LtA6vIx8D4WD67FKK70e5JQVDgbf7Fzh/mKBqU
oa6KnCfWY604LrKSC9zwZknh40PP//S/5+ENN7KhOscCbJRpG1DOIlWIEgVo80Y/
i44sC1nbWjSjlFyjF+wRQSH8n+qNi5Iu74zBX4WUFbS/JWgHdELyNlwWfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFG3dGztII/e9vzjJMyhTTWBzIuMB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLh8EBt6
dWZjmZhxZPJ2sieLk5gqoQH9Z42UzRNFZFNhXvozOQYH1AXHYYuataFNUdgnYcB0
Z17dq5NaAHsBw8mhVeA6UPxF6AckrDwLpUnI+kVhKD2HtASthxQ2PdeWryx5IdVi
HgI5w5N0XFPJUsSZCMlRvoHFlNZHfKI7szKFeRpdwbvWHbxvksH53IAQ75QU1HQ2
5l34LXJeecwcWZdICYgBKu1P9/Jb54A3vMjG+8Rr2L74eQtdwFME3Gc4C86bCHTn
PrFnlakcpKXXfWBRVylwHCLlifHl7M44lzIQQPO+id3KbYMKl7pupR7JwOWgXCOU
7UBR+pzvcLodoQ==
-----END CERTIFICATE-----
Generated at Tue May 13 22:02:55 2025 by rpki-client