Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: bY0YaixPRsAruq3J6H/Z7Mo+/LOPZGcGky30CbcQ3jA=
Subject key identifier: 23:28:A9:C1:C5:32:53:48:4D:07:B9:8E:B4:2B:BF:BB:66:2D:2D:6F
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 0196C0EF687F969FD7451D67774D6E354CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 20:00:37 +0000
Manifest this update: Sun 11 May 2025 20:00:37 +0000
Manifest next update: Mon 12 May 2025 20:00:37 +0000
Files and hashes: 1: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: ZjsG6gVvSC5zMv6OmvbCAJX2iCkyrejF5ZH3M77RS+U=)
2: hpKUEYSoGHkE0FTfiYlqZGeAk1A.roa (hash: aS+EY09klLsP1Q0iTAqB6odVzuvAAWvABKFa+TlzvPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:68:7f:96:9f:d7:45:1d:67:77:4d:6e:35:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: May 11 20:00:37 2025 GMT
Not After : May 12 20:00:37 2025 GMT
Subject: CN=2328a9c1c53253484d07b98eb42bbfbb662d2d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:1f:de:64:d2:1a:67:f0:84:68:12:49:4b:
de:89:1f:81:ef:fc:36:38:90:17:e3:98:a1:cd:3f:
1c:9f:4c:3c:73:59:8b:a1:54:dd:6f:95:a7:6c:85:
be:f7:f1:08:81:31:95:e6:97:1f:a0:bf:71:ca:ed:
7a:e5:e6:76:04:9d:cb:7c:f9:f0:34:14:3d:69:5d:
98:62:cc:4d:79:2a:f4:d7:8c:6f:05:a6:3d:eb:96:
63:6d:ff:70:80:c9:4a:b1:04:71:3f:40:8d:2e:44:
ac:35:25:de:25:e0:9b:bd:3c:96:36:72:6f:1e:69:
47:70:02:23:07:63:7f:c0:35:e7:3f:0a:53:78:d8:
09:3e:ff:2e:7a:18:fa:83:f6:c5:c9:c0:96:67:94:
a9:1b:18:12:81:29:33:87:78:04:61:2c:d1:12:46:
8c:3f:95:02:b1:0c:67:31:1f:36:10:d2:28:2f:65:
9f:62:fc:b3:0f:bd:83:b2:d7:73:36:e7:1a:80:30:
bb:ce:87:23:42:8d:ea:56:c1:63:40:82:1a:f4:fb:
c8:5f:34:c1:cd:c5:70:39:2a:04:d9:30:e4:28:56:
f3:1a:6a:16:d2:91:a7:24:ae:db:59:c7:93:d9:8e:
a8:62:e0:fa:05:fc:97:5b:a6:87:23:39:7f:d7:9b:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:A9:C1:C5:32:53:48:4D:07:B9:8E:B4:2B:BF:BB:66:2D:2D:6F
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5d:32:ed:24:94:fe:a8:ab:29:72:a1:70:e9:0e:7f:0e:f4:
b4:1b:27:d4:b8:e5:e7:85:42:02:69:a9:63:b8:21:ef:7d:08:
97:c4:d0:d3:82:bc:d9:5f:27:01:31:ea:88:00:68:b0:f4:29:
83:8e:e8:2b:19:73:e0:52:8b:e4:81:d1:13:eb:27:df:80:b2:
26:ca:68:70:c3:ec:5a:78:5c:b1:ef:c6:55:4f:92:a4:7b:d2:
84:e5:06:06:3c:6a:a9:7e:99:48:99:20:21:ec:55:46:41:f2:
db:f7:c9:91:ca:1b:ee:2b:94:a8:c8:ea:0a:c9:37:a5:43:2d:
20:c3:8c:88:e9:9c:be:6a:87:2a:f6:2b:58:4b:1f:33:9f:83:
48:d8:7d:94:99:0d:fb:67:63:2f:f6:6d:3b:5d:de:18:90:44:
b8:49:04:28:c1:bb:35:b4:de:23:e3:f8:71:39:20:69:72:dd:
8a:db:00:ea:38:15:8b:48:b1:ea:3c:77:f1:15:84:9f:f3:4c:
5e:34:4b:4f:6a:7d:07:73:89:ee:d3:9b:a4:fa:61:49:74:70:
bb:43:85:67:88:28:34:f6:f2:0c:7c:95:b6:ac:f3:53:1a:62:
3a:2c:1a:88:7c:59:96:23:54:40:68:1a:cd:16:07:4c:17:59:
f3:21:1f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA72h/lp/XRR1nd01uNUzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjQzNThjNGYxNmMxOWZmYWQzN2YzY2FmZTBjOGY2YWNi
ZjY1YjEwHhcNMjUwNTExMjAwMDM3WhcNMjUwNTEyMjAwMDM3WjAzMTEwLwYDVQQD
EygyMzI4YTljMWM1MzI1MzQ4NGQwN2I5OGViNDJiYmZiYjY2MmQyZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7If3mTSGmfwhGgSSUveiR+B7/w2
OJAX45ihzT8cn0w8c1mLoVTdb5WnbIW+9/EIgTGV5pcfoL9xyu165eZ2BJ3LfPnw
NBQ9aV2YYsxNeSr014xvBaY965Zjbf9wgMlKsQRxP0CNLkSsNSXeJeCbvTyWNnJv
HmlHcAIjB2N/wDXnPwpTeNgJPv8uehj6g/bFycCWZ5SpGxgSgSkzh3gEYSzREkaM
P5UCsQxnMR82ENIoL2WfYvyzD72DstdzNucagDC7zocjQo3qVsFjQIIa9PvIXzTB
zcVwOSoE2TDkKFbzGmoW0pGnJK7bWceT2Y6oYuD6BfyXW6aHIzl/15vhKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMoqcHFMlNITQe5jrQrv7tmLS1vMB8GA1UdIwQY
MBaAFHskNYxPFsGf+tN/PK/gyPasv2WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYt
MGQ3YzUyMTU0MTgzLzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYtMGQ3YzUyMTU0MTgz
LzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC10y7SSU
/qirKXKhcOkOfw70tBsn1Ljl54VCAmmpY7gh730Il8TQ04K82V8nATHqiABosPQp
g47oKxlz4FKL5IHRE+sn34CyJspocMPsWnhcse/GVU+SpHvShOUGBjxqqX6ZSJkg
IexVRkHy2/fJkcob7iuUqMjqCsk3pUMtIMOMiOmcvmqHKvYrWEsfM5+DSNh9lJkN
+2djL/ZtO13eGJBEuEkEKMG7NbTeI+P4cTkgaXLditsA6jgVi0ix6jx38RWEn/NM
XjRLT2p9B3OJ7tObpPphSXRwu0OFZ4goNPbyDHyVtqzzUxpiOiwaiHxZliNUQGga
zRYHTBdZ8yEf0A==
-----END CERTIFICATE-----
Generated at Sun May 11 22:00:47 2025 by rpki-client