Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: niqfZwG2HYHQ87hdPRl6sxSaAIC63C3L3ClKPmyME1c=
Subject key identifier: 26:B8:25:B8:D6:9E:A4:F6:0A:95:95:99:CE:5E:3D:13:81:63:1A:9D
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 0196B7B5E1DB4758460B3D9C07324EA51272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0CB8
Signing time: Sat 10 May 2025 01:01:12 +0000
Manifest this update: Sat 10 May 2025 01:01:12 +0000
Manifest next update: Sun 11 May 2025 01:01:12 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: LJSXiFBKmOV3uFUBeqXKLdKORR+3ody/NOQbiBir1cI=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:e1:db:47:58:46:0b:3d:9c:07:32:4e:a5:12:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: May 10 01:01:12 2025 GMT
Not After : May 11 01:01:12 2025 GMT
Subject: CN=26b825b8d69ea4f60a959599ce5e3d1381631a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:b3:51:e7:c5:13:79:6e:c4:65:ab:d9:79:
49:ea:17:1d:87:3b:a4:0f:4d:02:16:ff:6e:73:60:
aa:b6:71:64:f3:5c:7d:d0:92:50:c8:5f:05:cf:c5:
d1:23:93:a7:c1:33:f1:a8:aa:15:e2:a5:44:b4:1a:
b8:55:bb:d4:a6:5f:3a:91:30:ae:0c:e2:54:08:9b:
a9:cd:fe:ad:f5:e3:f4:64:aa:ae:08:72:af:75:6b:
cd:77:44:3a:14:8c:7e:65:4c:92:8e:54:0f:c9:07:
a1:4c:4b:ec:35:1d:db:88:37:8c:24:5b:0e:e8:f8:
b9:f6:42:a6:da:e0:de:90:f4:60:0e:2e:78:0d:0e:
94:d4:e4:b7:9f:ae:8f:35:93:c1:fc:e0:0b:d7:b2:
34:95:ca:7c:14:32:ba:7d:c9:60:d6:2f:47:0a:36:
f1:f6:d3:80:8d:ab:38:e8:d7:f6:d3:3b:f5:a3:69:
9f:ff:3f:7a:2a:e3:25:e6:fd:29:0b:04:e4:62:83:
99:00:20:b9:81:e1:3e:a6:e0:bd:a6:9a:73:ac:9b:
99:ae:03:01:58:1d:1b:6e:b3:aa:5b:f5:17:71:f6:
4e:73:f3:88:21:1b:5e:2a:72:1c:e5:25:68:95:71:
af:88:10:86:82:7c:25:af:22:df:5a:91:89:3b:44:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B8:25:B8:D6:9E:A4:F6:0A:95:95:99:CE:5E:3D:13:81:63:1A:9D
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:7b:bb:aa:d4:b8:c4:9f:45:87:8a:f3:84:4b:65:db:72:
3f:1c:aa:a1:51:49:7e:21:29:29:0a:60:c6:14:32:9c:8c:47:
ce:3e:17:c1:1b:35:cd:07:18:94:da:5e:25:98:49:9c:b2:62:
e6:c4:54:5b:ec:a2:a9:72:2c:39:e0:28:ca:60:24:2c:34:c1:
0f:42:52:68:57:4e:86:60:1d:a0:3d:d3:6d:54:d6:e1:39:87:
1f:c4:4c:3c:96:71:9f:d5:90:3a:c4:c3:10:09:34:8f:1e:e4:
f6:58:56:f1:f4:90:ee:e4:88:d5:b8:71:1f:77:d0:95:f9:ff:
6e:27:04:3b:7b:0b:d8:62:ec:13:47:9d:bd:d0:d9:f8:00:e6:
c1:c6:4e:24:c9:6b:17:f9:40:4b:1b:83:f7:a1:8e:92:b4:1b:
1d:eb:af:3a:fc:27:7b:cb:3c:86:17:c5:9f:8d:8f:d4:aa:7b:
46:50:5f:b3:c9:77:67:9c:ec:4a:ae:57:a2:33:c8:3b:2e:77:
d9:14:bb:5f:e5:80:3a:dd:35:e0:e6:02:cf:b3:0d:75:0c:25:
2a:30:85:56:fc:2d:d6:f4:77:71:0e:0b:fe:c5:2a:ed:28:7d:
06:91:5c:34:30:41:f8:7d:33:18:02:9f:11:4a:f4:61:b9:15:
0a:a8:6d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3teHbR1hGCz2cBzJOpRJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0
MGE1ODgwHhcNMjUwNTEwMDEwMTEyWhcNMjUwNTExMDEwMTEyWjAzMTEwLwYDVQQD
EygyNmI4MjViOGQ2OWVhNGY2MGE5NTk1OTljZTVlM2QxMzgxNjMxYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WCzUefFE3luxGWr2XlJ6hcdhzuk
D00CFv9uc2CqtnFk81x90JJQyF8Fz8XRI5OnwTPxqKoV4qVEtBq4VbvUpl86kTCu
DOJUCJupzf6t9eP0ZKquCHKvdWvNd0Q6FIx+ZUySjlQPyQehTEvsNR3biDeMJFsO
6Pi59kKm2uDekPRgDi54DQ6U1OS3n66PNZPB/OAL17I0lcp8FDK6fclg1i9HCjbx
9tOAjas46Nf20zv1o2mf/z96KuMl5v0pCwTkYoOZACC5geE+puC9pppzrJuZrgMB
WB0bbrOqW/UXcfZOc/OIIRteKnIc5SVolXGviBCGgnwlryLfWpGJO0SmSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa4JbjWnqT2CpWVmc5ePROBYxqdMB8GA1UdIwQY
MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt
MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz
LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7x7u6rU
uMSfRYeK84RLZdtyPxyqoVFJfiEpKQpgxhQynIxHzj4XwRs1zQcYlNpeJZhJnLJi
5sRUW+yiqXIsOeAoymAkLDTBD0JSaFdOhmAdoD3TbVTW4TmHH8RMPJZxn9WQOsTD
EAk0jx7k9lhW8fSQ7uSI1bhxH3fQlfn/bicEO3sL2GLsE0edvdDZ+ADmwcZOJMlr
F/lASxuD96GOkrQbHeuvOvwne8s8hhfFn42P1Kp7RlBfs8l3Z5zsSq5XojPIOy53
2RS7X+WAOt014OYCz7MNdQwlKjCFVvwt1vR3cQ4L/sUq7Sh9BpFcNDBB+H0zGAKf
EUr0YbkVCqht8w==
-----END CERTIFICATE-----
Generated at Sat May 10 08:39:50 2025 by rpki-client