Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: ngXIdy13uodSgUbW5+cLXVodc6gMwYt29yNTee1SJ1A=
Subject key identifier: A5:F8:EF:8E:12:11:28:E0:5C:8A:3F:81:A0:5B:C9:87:8C:60:4C:1D
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 0196C42708AC0AFEC4F213A3D8EA5F7E7066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 11:00:14 +0000
Manifest this update: Mon 12 May 2025 11:00:14 +0000
Manifest next update: Tue 13 May 2025 11:00:14 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: MHIgfS0DQ8NVNeHIEYHFHzIuLbrG9JH+vLZ98tIz6iQ=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:08:ac:0a:fe:c4:f2:13:a3:d8:ea:5f:7e:70:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: May 12 11:00:14 2025 GMT
Not After : May 13 11:00:14 2025 GMT
Subject: CN=a5f8ef8e121128e05c8a3f81a05bc9878c604c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:85:38:8b:5b:be:e8:91:8f:97:cb:e7:07:
38:88:df:22:a5:66:67:1e:40:fa:84:9b:f0:ac:b1:
da:1b:79:62:87:29:da:56:8a:5f:28:e1:29:b1:73:
5f:08:59:c8:61:88:ef:24:a2:79:b6:3e:0b:dd:16:
88:8a:84:7b:e3:10:46:af:22:03:57:58:75:6a:85:
bc:d6:ec:d0:9a:47:54:6c:41:5b:48:b8:58:82:3d:
58:92:e1:af:34:cb:7a:0e:ea:75:75:c4:ac:22:65:
8b:7d:d2:65:54:d6:a1:08:76:2b:46:79:84:ff:41:
10:47:ac:2e:72:43:94:b0:97:0e:ff:c6:58:55:3c:
ec:0c:70:7b:2f:88:ba:7e:24:96:f4:3b:be:09:97:
aa:3a:0b:3e:41:e9:32:2b:c1:b4:af:fa:e4:16:ae:
9d:a2:b9:96:e2:24:8d:2e:26:2b:a5:47:ae:3c:d5:
2a:f9:92:4c:a9:a2:70:05:b9:ac:06:b7:eb:2a:ce:
8b:0d:1b:72:25:ff:86:c4:51:ea:a9:08:47:f3:59:
ef:2c:f9:bb:c6:a1:1a:c3:75:3f:a0:29:a8:28:8f:
40:45:f7:a1:c5:18:bd:6c:c0:a6:32:52:7d:21:2e:
1a:e6:0b:95:c2:e4:7f:00:4d:e8:ae:93:bd:52:74:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F8:EF:8E:12:11:28:E0:5C:8A:3F:81:A0:5B:C9:87:8C:60:4C:1D
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:c5:5f:f4:f8:50:1d:21:1b:68:d4:86:db:67:49:1f:56:
ed:28:35:49:de:d7:ce:eb:0b:41:f4:d4:70:96:80:39:42:01:
54:bc:30:52:f8:74:33:e6:22:86:7d:b0:01:84:01:68:e7:f4:
48:f2:c4:da:26:88:15:1d:68:d2:11:f3:6a:6b:1f:5d:4c:f9:
bb:12:02:0e:0a:76:7f:82:02:67:c5:e9:85:1a:bd:67:38:85:
bd:73:28:f1:c7:5b:1c:f5:10:78:ca:0a:19:96:a0:6d:60:a6:
1d:13:b3:69:f9:aa:3d:03:b9:f5:e3:1b:b1:38:44:b0:a9:c7:
5d:f7:5f:d3:5e:82:76:23:4e:36:24:77:d7:4c:7e:20:f2:7b:
da:0d:8d:78:21:94:f4:5a:31:9d:da:e0:b5:95:ad:1f:e9:8b:
ed:26:64:50:0f:9d:a3:8c:4a:50:ea:0d:b7:e4:e8:f1:66:ef:
44:2d:a9:8c:26:f4:56:69:57:85:50:04:23:5a:c1:c8:ae:ee:
43:af:45:7b:33:ee:1a:d6:72:16:04:97:9d:43:8b:59:42:33:
01:f1:75:ce:05:9b:e9:7a:20:0b:e4:b7:73:a0:cb:2c:30:a1:
bf:7f:68:d2:03:ac:05:6b:03:a1:f7:a9:57:5d:af:79:70:aa:
a3:c9:6a:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJwisCv7E8hOj2OpffnBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMmE4YWMzMDI4YjcwOTExY2I2MTExZmZkYTNhMmVmZTU1
ODg2MmQwHhcNMjUwNTEyMTEwMDE0WhcNMjUwNTEzMTEwMDE0WjAzMTEwLwYDVQQD
EyhhNWY4ZWY4ZTEyMTEyOGUwNWM4YTNmODFhMDViYzk4NzhjNjA0YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhSFOItbvuiRj5fL5wc4iN8ipWZn
HkD6hJvwrLHaG3lihynaVopfKOEpsXNfCFnIYYjvJKJ5tj4L3RaIioR74xBGryID
V1h1aoW81uzQmkdUbEFbSLhYgj1YkuGvNMt6Dup1dcSsImWLfdJlVNahCHYrRnmE
/0EQR6wuckOUsJcO/8ZYVTzsDHB7L4i6fiSW9Du+CZeqOgs+QekyK8G0r/rkFq6d
ormW4iSNLiYrpUeuPNUq+ZJMqaJwBbmsBrfrKs6LDRtyJf+GxFHqqQhH81nvLPm7
xqEaw3U/oCmoKI9ARfehxRi9bMCmMlJ9IS4a5guVwuR/AE3orpO9UnSpowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX4744SESjgXIo/gaBbyYeMYEwdMB8GA1UdIwQY
MBaAFHsqisMCi3CRHLYRH/2jou/lWIYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEt
ODU4ZGQxYjE2MTdmLzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEtODU4ZGQxYjE2MTdm
LzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLTFX/T4
UB0hG2jUhttnSR9W7Sg1Sd7XzusLQfTUcJaAOUIBVLwwUvh0M+Yihn2wAYQBaOf0
SPLE2iaIFR1o0hHzamsfXUz5uxICDgp2f4ICZ8XphRq9ZziFvXMo8cdbHPUQeMoK
GZagbWCmHROzafmqPQO59eMbsThEsKnHXfdf016CdiNONiR310x+IPJ72g2NeCGU
9FoxndrgtZWtH+mL7SZkUA+do4xKUOoNt+To8WbvRC2pjCb0VmlXhVAEI1rByK7u
Q69FezPuGtZyFgSXnUOLWUIzAfF1zgWb6XogC+S3c6DLLDChv39o0gOsBWsDofep
V12veXCqo8lqSQ==
-----END CERTIFICATE-----
Generated at Mon May 12 20:34:18 2025 by rpki-client