Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
File: E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json)
Hash identifier: ai80+5imFRnBmkXHkwU/rp7gcpT5r0Cd+aE40LG+bzw=
Subject key identifier: 64:25:AD:30:C3:97:44:B4:FB:CE:02:23:C4:56:33:BD:70:5B:6A:02
Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
Certificate issuer: /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Certificate serial: 0196BE5C465B34DE8DE1DD3FE1D9933A47B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
Manifest number: 0180
Signing time: Sun 11 May 2025 08:00:40 +0000
Manifest this update: Sun 11 May 2025 08:00:40 +0000
Manifest next update: Mon 12 May 2025 08:00:40 +0000
Files and hashes: 1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: RPI+j87YjA5i/p5WQzg/J4CeGrrKzFdrinXNq0HRRHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:46:5b:34:de:8d:e1:dd:3f:e1:d9:93:3a:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Validity
Not Before: May 11 08:00:40 2025 GMT
Not After : May 12 08:00:40 2025 GMT
Subject: CN=6425ad30c39744b4fbce0223c45633bd705b6a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:b2:79:98:fb:b2:5b:87:23:d6:b5:e9:a0:
a6:b3:ca:b9:6a:5e:f3:f9:66:7e:c3:2d:1d:76:28:
da:7b:04:ed:ad:4e:d1:17:b5:34:b2:90:50:e2:0e:
b4:82:36:dc:ed:f6:45:7f:c5:cf:16:42:2d:7b:a5:
df:eb:66:40:78:87:57:b9:fa:e7:85:81:8a:83:ed:
a9:63:63:bf:13:38:14:3d:8c:44:ff:8f:7d:5f:d5:
0d:11:30:ed:04:0c:b3:e0:b3:d4:8b:12:4e:56:7f:
01:89:45:27:9f:1e:d1:92:c0:a9:bc:fa:b3:e6:3e:
85:21:48:60:ac:b3:8a:2b:8b:0e:06:ac:13:39:30:
ce:aa:cd:6e:d2:b0:bf:b5:ed:6f:2a:b5:9e:28:0e:
f7:9f:ad:e9:1f:03:4a:82:2d:45:50:2c:08:a3:46:
90:63:43:ba:32:1a:bb:d1:a4:f1:fa:6b:ef:c1:ba:
a2:4f:3c:b0:4a:9e:fa:d0:0f:a3:93:b3:ef:0a:70:
3b:87:78:7f:3c:ed:f3:0e:37:78:3a:a1:2b:36:3b:
c9:c6:63:2c:63:60:4f:37:b0:6f:da:d2:43:94:00:
e5:c9:ad:6e:c4:99:86:5e:c6:b1:b2:64:cc:3a:77:
e9:58:91:da:ae:ce:86:d1:96:bc:b9:3d:14:02:92:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:AD:30:C3:97:44:B4:FB:CE:02:23:C4:56:33:BD:70:5B:6A:02
X509v3 Authority Key Identifier:
keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:29:b9:b4:bb:09:1b:3d:21:bc:ee:48:8f:c7:89:c5:72:3a:
78:1c:d3:7a:02:64:96:5e:85:64:d8:4e:0c:d5:cf:69:f9:55:
f4:4a:1e:6f:a0:8e:d4:9a:05:4a:3d:09:27:a0:7f:39:56:dd:
52:c8:ba:21:68:b8:d8:ff:f9:e9:d3:9d:50:aa:d9:d1:47:79:
75:dc:24:03:25:e3:28:d0:4f:49:60:a4:be:0e:ee:c4:77:58:
1c:c9:3d:2e:aa:ab:bd:cf:f0:2e:fc:1e:c8:dc:45:b6:a0:68:
85:6d:70:1e:4d:b7:33:32:51:67:0a:eb:1f:50:8b:d1:ad:3b:
25:1d:58:4e:80:fa:0a:c8:1f:8b:38:e1:e9:08:5f:ac:a8:d0:
9d:40:5d:f5:8f:a7:be:9b:74:cb:b0:ff:45:7d:50:75:fb:8f:
a2:53:45:7d:8a:22:a7:31:bb:81:80:c0:fc:23:10:b5:85:c3:
bc:73:b1:01:27:a0:b9:8e:ca:94:7f:cb:e7:c2:e8:bf:b5:33:
36:3e:b2:13:1a:47:9f:d9:d6:fb:98:3e:16:86:27:59:bf:32:
22:5f:a3:0f:07:79:b7:3c:dc:e8:99:b1:08:3d:dd:e7:32:35:
d8:2c:0b:55:b0:d0:65:30:bd:2e:fb:1b:f5:0a:64:61:24:af:
5e:5a:ea:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XEZbNN6N4d0/4dmTOkezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjQyMWI4MmFiN2JiYTZlMmY1NWU5MDJhOWZiODFmYTNh
ZjI5OGYwHhcNMjUwNTExMDgwMDQwWhcNMjUwNTEyMDgwMDQwWjAzMTEwLwYDVQQD
Eyg2NDI1YWQzMGMzOTc0NGI0ZmJjZTAyMjNjNDU2MzNiZDcwNWI2YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfeyeZj7sluHI9a16aCms8q5al7z
+WZ+wy0ddijaewTtrU7RF7U0spBQ4g60gjbc7fZFf8XPFkIte6Xf62ZAeIdXufrn
hYGKg+2pY2O/EzgUPYxE/499X9UNETDtBAyz4LPUixJOVn8BiUUnnx7RksCpvPqz
5j6FIUhgrLOKK4sOBqwTOTDOqs1u0rC/te1vKrWeKA73n63pHwNKgi1FUCwIo0aQ
Y0O6Mhq70aTx+mvvwbqiTzywSp760A+jk7PvCnA7h3h/PO3zDjd4OqErNjvJxmMs
Y2BPN7Bv2tJDlADlya1uxJmGXsaxsmTMOnfpWJHars6G0Za8uT0UApIIJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQlrTDDl0S0+84CI8RWM71wW2oCMB8GA1UdIwQY
MBaAFBO0Ibgqt7um4vVekCqfuB+jrymPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDct
ZGZhNzA3OTQwNTM3LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDctZGZhNzA3OTQwNTM3
LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCm5tLsJ
Gz0hvO5Ij8eJxXI6eBzTegJkll6FZNhODNXPaflV9Eoeb6CO1JoFSj0JJ6B/OVbd
Usi6IWi42P/56dOdUKrZ0Ud5ddwkAyXjKNBPSWCkvg7uxHdYHMk9Lqqrvc/wLvwe
yNxFtqBohW1wHk23MzJRZwrrH1CL0a07JR1YToD6Csgfizjh6QhfrKjQnUBd9Y+n
vpt0y7D/RX1QdfuPolNFfYoipzG7gYDA/CMQtYXDvHOxASeguY7KlH/L58Lov7Uz
Nj6yExpHn9nW+5g+FoYnWb8yIl+jDwd5tzzc6JmxCD3d5zI12CwLVbDQZTC9Lvsb
9QpkYSSvXlrqWg==
-----END CERTIFICATE-----
Generated at Sun May 11 14:50:22 2025 by rpki-client