Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: IIUhyhQqz3VH9TSzBNQBRhIe9lGTE06ZCMgBIWbsFUY=
Subject key identifier: FF:FB:48:CB:0A:8B:9D:53:94:59:55:E7:18:B3:0D:2E:2C:3A:37:4A
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 0196BA48C42822332496AC4772922A5D0CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 13:00:53 +0000
Manifest this update: Sat 10 May 2025 13:00:53 +0000
Manifest next update: Sun 11 May 2025 13:00:53 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: VZrHaodGVLPU93YOtWe2QnfFiLbr3kaNJ3Z/N0QaTtw=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:c4:28:22:33:24:96:ac:47:72:92:2a:5d:0c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: May 10 13:00:53 2025 GMT
Not After : May 11 13:00:53 2025 GMT
Subject: CN=fffb48cb0a8b9d53945955e718b30d2e2c3a374a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:11:83:9b:9f:40:f9:75:08:92:18:e5:36:
22:22:16:92:36:b2:d7:20:1f:8f:dc:37:3d:05:cb:
0e:f1:e4:1c:e3:6a:0b:ee:be:5d:83:9f:64:c3:d2:
cc:8f:de:44:f3:b4:8d:0e:9d:e7:8f:5e:54:69:c3:
d4:f0:92:95:6e:26:d3:d4:ac:a6:4a:b5:5c:f5:0f:
22:47:48:0e:88:6b:9d:81:a4:89:6a:ae:60:57:14:
0b:ef:43:2b:76:dd:a7:b3:42:f2:30:83:5b:33:55:
3c:af:6b:99:b7:36:cc:16:54:c6:9e:bf:67:82:ab:
2a:19:dd:69:f3:c6:47:3a:8e:7d:71:89:da:e0:df:
4d:25:14:7d:6f:53:a7:03:69:cf:41:a1:7d:a0:30:
05:5c:a4:5e:81:23:db:ed:ec:35:8b:c3:1d:e9:68:
d2:7a:97:c2:fa:32:f8:34:5f:20:bf:f2:21:ba:06:
7c:7e:f0:52:69:53:1c:f6:7c:04:7e:d0:82:c0:e5:
ea:12:3b:20:43:b0:e2:97:5e:d5:7d:19:a3:3b:2d:
86:08:3c:34:54:76:3f:75:e5:bd:08:75:79:96:24:
85:e8:62:af:38:e6:d9:21:f8:25:56:c0:71:a4:d8:
d7:08:f8:58:42:89:02:04:fc:c6:6e:a6:09:ee:0b:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:48:CB:0A:8B:9D:53:94:59:55:E7:18:B3:0D:2E:2C:3A:37:4A
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:61:2f:31:8c:62:9b:38:4d:ab:02:b1:59:4b:90:d6:aa:8e:
bf:e6:34:49:b9:9b:e1:52:6b:89:ef:d8:1f:e7:f6:39:5e:b2:
a7:e3:71:1a:ac:1d:f1:06:e8:cb:20:d9:aa:96:0a:51:2e:0b:
08:a2:65:e4:cc:64:8a:50:25:c5:07:ab:5b:72:c8:35:8f:bc:
ec:01:85:25:6c:aa:0a:e6:16:40:4e:f0:de:10:3f:48:a5:2d:
d7:3f:b5:ef:f3:34:6e:03:4c:d3:3a:0e:fe:70:86:1c:8a:c2:
05:b3:79:e7:9e:d2:41:0b:85:ea:0a:c9:a9:57:08:32:43:89:
84:49:e0:5f:62:54:d7:d3:84:4d:ff:f9:43:87:56:3e:d8:2d:
77:37:08:e8:34:5e:d8:6d:8e:dc:9e:b8:c2:8f:9f:c2:d7:0a:
35:41:3c:dd:6a:a1:a4:e8:7c:b9:7b:21:83:63:d7:fb:8e:0b:
e3:f1:24:c8:0a:81:29:f1:f4:09:64:d4:06:be:12:59:11:8e:
1a:c1:af:ab:0b:a3:88:40:f1:0a:08:9d:03:1d:da:72:62:d3:
26:34:09:70:24:89:22:ae:f4:a5:74:5a:24:61:b5:e6:cf:40:
27:77:97:21:ba:5f:eb:72:f5:f7:f1:30:b9:59:ed:61:b7:60:
ef:a2:f3:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SMQoIjMklqxHcpIqXQztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjUwNTEwMTMwMDUzWhcNMjUwNTExMTMwMDUzWjAzMTEwLwYDVQQD
EyhmZmZiNDhjYjBhOGI5ZDUzOTQ1OTU1ZTcxOGIzMGQyZTJjM2EzNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn64Rg5ufQPl1CJIY5TYiIhaSNrLX
IB+P3Dc9BcsO8eQc42oL7r5dg59kw9LMj95E87SNDp3nj15UacPU8JKVbibT1Kym
SrVc9Q8iR0gOiGudgaSJaq5gVxQL70Mrdt2ns0LyMINbM1U8r2uZtzbMFlTGnr9n
gqsqGd1p88ZHOo59cYna4N9NJRR9b1OnA2nPQaF9oDAFXKRegSPb7ew1i8Md6WjS
epfC+jL4NF8gv/IhugZ8fvBSaVMc9nwEftCCwOXqEjsgQ7Dil17VfRmjOy2GCDw0
VHY/deW9CHV5liSF6GKvOObZIfglVsBxpNjXCPhYQokCBPzGbqYJ7gtkHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/7SMsKi51TlFlV5xizDS4sOjdKMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWEvMYxi
mzhNqwKxWUuQ1qqOv+Y0Sbmb4VJrie/YH+f2OV6yp+NxGqwd8QboyyDZqpYKUS4L
CKJl5MxkilAlxQerW3LINY+87AGFJWyqCuYWQE7w3hA/SKUt1z+17/M0bgNM0zoO
/nCGHIrCBbN5557SQQuF6grJqVcIMkOJhEngX2JU19OETf/5Q4dWPtgtdzcI6DRe
2G2O3J64wo+fwtcKNUE83WqhpOh8uXshg2PX+44L4/EkyAqBKfH0CWTUBr4SWRGO
GsGvqwujiEDxCgidAx3acmLTJjQJcCSJIq70pXRaJGG15s9AJ3eXIbpf63L19/Ew
uVntYbdg76LzJQ==
-----END CERTIFICATE-----
Generated at Sat May 10 22:20:38 2025 by rpki-client