Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: Za7pMFd4PqT1LHm1yOR3KIazUHyjxd8LCbNc6UaooZw=
Subject key identifier: 12:80:8E:8F:00:B3:2D:71:A8:24:DC:5D:F9:7F:AE:8F:FF:AB:68:67
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 0196BD4949B22BF55071C768397BB219EE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 10B2
Signing time: Sun 11 May 2025 03:00:18 +0000
Manifest this update: Sun 11 May 2025 03:00:18 +0000
Manifest next update: Mon 12 May 2025 03:00:18 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: Mt3Lmh8JvFQvshPPo3Zj8PnDY/b48rGj2byA2LxD0EI=)
2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:49:b2:2b:f5:50:71:c7:68:39:7b:b2:19:ee:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: May 11 03:00:18 2025 GMT
Not After : May 12 03:00:18 2025 GMT
Subject: CN=12808e8f00b32d71a824dc5df97fae8fffab6867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:7f:f1:5a:79:4f:56:04:c3:17:91:c3:ba:
38:6c:d7:9b:f8:cd:31:e3:a9:f5:06:11:0c:6d:5e:
9e:eb:2f:71:d8:47:96:4d:f2:5d:bf:dd:41:22:ec:
17:f2:34:db:75:37:bb:bb:7c:58:0a:57:4a:80:8c:
9b:01:ca:bd:5b:ca:e6:9a:5b:45:61:74:37:f7:f7:
ed:f3:cd:41:8c:a8:8e:4f:ab:78:25:ac:c5:70:fb:
c2:e1:95:c7:46:71:73:23:75:5f:46:a8:e2:1b:95:
8f:1e:14:c3:24:3c:52:7a:03:91:ba:d5:05:60:97:
4d:f8:ac:6e:4f:fe:7c:37:cd:f8:63:35:81:7f:f0:
15:c7:c4:e1:20:1a:fd:27:ae:6e:71:66:75:3c:c3:
46:f7:89:c0:41:b9:9e:87:51:4d:b5:dd:e6:7b:98:
18:61:f4:8a:01:16:ae:12:57:1e:52:22:83:9b:0d:
4a:b8:b4:fc:ee:64:7c:9c:4e:7c:5c:f3:2a:ce:4e:
f5:46:b9:fe:3e:f5:a5:1f:1e:b4:99:0b:a4:97:64:
7d:93:49:63:8d:93:5e:2b:84:92:60:5b:65:87:ba:
0e:dc:e9:ee:3e:68:a0:09:96:f4:e5:87:f7:a1:b4:
fe:c2:99:82:be:80:cf:2d:2d:1e:d4:b2:d7:a6:75:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:80:8E:8F:00:B3:2D:71:A8:24:DC:5D:F9:7F:AE:8F:FF:AB:68:67
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:eb:52:05:58:58:75:39:00:55:af:e4:89:51:5e:98:8c:3f:
2d:60:51:35:f1:95:d6:38:73:9a:44:85:bb:b9:c6:c4:d9:cd:
a6:a4:c1:3b:87:d0:29:cf:1c:dd:c7:cd:1a:9a:6e:c2:cc:5f:
f3:70:52:c8:91:2a:90:ac:95:00:31:a0:c8:c3:63:ae:15:ae:
05:97:c6:ae:a4:f1:46:48:40:61:ac:fe:66:85:4f:e8:66:c2:
6c:7b:5d:67:57:b0:7b:6f:f8:c1:36:8a:7c:a8:b6:ad:04:7e:
c5:dd:2a:f5:6b:e1:6a:46:4e:cb:cc:49:94:e4:4a:0e:ea:54:
01:f0:27:9c:27:65:4a:00:84:1a:e7:ff:a3:37:c7:bf:9b:22:
76:78:c7:d0:d4:63:7b:cf:b4:01:a9:cb:20:4c:ae:c8:ee:fe:
f0:c0:4f:d9:2c:9d:6e:6c:4b:20:9b:18:88:f4:8d:71:13:11:
b9:84:7f:a4:d2:c8:de:4b:bf:9c:75:08:f4:56:28:8d:b8:a2:
3e:34:1f:11:9f:79:4c:97:aa:e1:5b:5f:04:d2:72:20:f2:5b:
86:f5:95:6e:a3:2c:a7:6e:92:a4:02:f9:16:70:f8:72:57:3e:
0e:08:d1:be:aa:62:e4:e2:90:c0:a5:50:0f:59:f4:a1:fb:2c:
44:45:1a:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SUmyK/VQccdoOXuyGe6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjRmNmI5MDE2N2I3MWJkNjYzZmEwMzkxZTAzOGEwMTU1
YmI5MzkwHhcNMjUwNTExMDMwMDE4WhcNMjUwNTEyMDMwMDE4WjAzMTEwLwYDVQQD
EygxMjgwOGU4ZjAwYjMyZDcxYTgyNGRjNWRmOTdmYWU4ZmZmYWI2ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstB/8Vp5T1YEwxeRw7o4bNeb+M0x
46n1BhEMbV6e6y9x2EeWTfJdv91BIuwX8jTbdTe7u3xYCldKgIybAcq9W8rmmltF
YXQ39/ft881BjKiOT6t4JazFcPvC4ZXHRnFzI3VfRqjiG5WPHhTDJDxSegORutUF
YJdN+KxuT/58N834YzWBf/AVx8ThIBr9J65ucWZ1PMNG94nAQbmeh1FNtd3me5gY
YfSKARauElceUiKDmw1KuLT87mR8nE58XPMqzk71Rrn+PvWlHx60mQukl2R9k0lj
jZNeK4SSYFtlh7oO3OnuPmigCZb05Yf3obT+wpmCvoDPLS0e1LLXpnVsGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKAjo8Asy1xqCTcXfl/ro//q2hnMB8GA1UdIwQY
MBaAFBO09rkBZ7cb1mP6A5HgOKAVW7k5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODkt
Y2IzZmE0MDdlMGY0LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODktY2IzZmE0MDdlMGY0
LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPetSBVhY
dTkAVa/kiVFemIw/LWBRNfGV1jhzmkSFu7nGxNnNpqTBO4fQKc8c3cfNGppuwsxf
83BSyJEqkKyVADGgyMNjrhWuBZfGrqTxRkhAYaz+ZoVP6GbCbHtdZ1ewe2/4wTaK
fKi2rQR+xd0q9WvhakZOy8xJlORKDupUAfAnnCdlSgCEGuf/ozfHv5sidnjH0NRj
e8+0AanLIEyuyO7+8MBP2SydbmxLIJsYiPSNcRMRuYR/pNLI3ku/nHUI9FYojbii
PjQfEZ95TJeq4VtfBNJyIPJbhvWVbqMsp26SpAL5FnD4clc+DgjRvqpi5OKQwKVQ
D1n0ofssREUaLg==
-----END CERTIFICATE-----
Generated at Sun May 11 12:49:04 2025 by rpki-client