Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: wgRXB6mQP96635GgtE6I6w49Az7drBerwgd3+6a5d0c=
Subject key identifier: 53:BC:4E:A2:62:D5:55:49:11:02:AD:A4:87:D6:FD:C8:07:1E:66:77
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 0196A4656A7B811A263C2720CA135635CADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 079A
Signing time: Tue 06 May 2025 07:00:31 +0000
Manifest this update: Tue 06 May 2025 07:00:31 +0000
Manifest next update: Wed 07 May 2025 07:00:31 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: 4ZztAcKY/omQCeQcgasvFPRi0cY7U8q2B/mozTZux58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:6a:7b:81:1a:26:3c:27:20:ca:13:56:35:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: May 6 07:00:31 2025 GMT
Not After : May 7 07:00:31 2025 GMT
Subject: CN=53bc4ea262d555491102ada487d6fdc8071e6677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:36:4e:9f:0f:87:9a:8e:e9:75:02:94:82:
f8:ab:50:bf:10:62:eb:76:d7:48:bb:01:63:30:9a:
d0:a5:da:e2:5e:f8:ff:17:3d:cc:bb:4f:76:31:25:
ad:a5:fe:af:ec:56:3b:59:8b:e8:17:88:05:b1:53:
1c:2e:c9:84:8f:41:1b:c0:76:38:52:fb:db:c7:93:
a2:10:e1:eb:ad:05:8f:f8:ff:2e:dd:0d:88:d6:c3:
d5:b6:a1:b0:89:b5:06:f8:02:ca:5f:8d:42:20:d8:
fe:38:78:17:2a:2c:35:83:b2:b8:c9:d3:21:ea:b0:
1c:88:14:2a:95:53:36:b2:d3:12:11:ec:10:b2:f6:
f9:1a:d3:63:a7:68:e3:ef:4f:06:a1:20:e0:05:ae:
97:fa:75:6c:f3:c2:73:5d:5a:15:25:9d:a0:9f:63:
24:b6:48:b8:47:b4:cc:0f:9f:f0:9c:b3:d7:10:d5:
33:b1:58:b7:53:9e:e4:9a:ea:8b:75:6a:93:32:79:
d3:a6:2e:c0:67:55:21:08:b0:62:30:67:99:46:a7:
12:d8:58:24:ac:8d:ad:b6:f6:c5:c6:31:a7:e5:3e:
2d:8c:73:25:df:6d:30:a9:61:a4:2e:68:d5:2f:38:
da:39:2f:c0:34:3b:2e:17:18:83:35:96:73:03:8a:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:4E:A2:62:D5:55:49:11:02:AD:A4:87:D6:FD:C8:07:1E:66:77
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a9:79:28:0b:a3:3a:24:8d:d2:60:72:60:6e:3d:40:57:d5:
2f:8f:80:f8:0a:8e:c6:27:70:7a:0c:b2:8a:e3:4a:cb:c6:a8:
d0:88:6a:7c:50:0d:e9:c9:c8:ce:4c:34:bc:8d:f1:6f:6a:6f:
6a:0f:7a:79:78:f0:1f:8c:bf:3a:54:9e:b6:50:20:6d:e5:49:
94:99:0f:fb:0c:05:ff:6f:cc:ac:7f:33:93:ba:b5:46:69:42:
67:39:34:5a:81:7e:d7:e3:05:fc:3f:35:65:05:57:66:28:e2:
32:4d:7e:64:56:0b:e6:5d:f5:9b:48:ab:1f:fc:85:76:4d:e0:
72:c8:f4:9f:54:c3:a7:0c:3f:a2:09:1e:6f:87:3a:fd:4c:f6:
b0:bf:62:e4:8b:c8:69:24:06:26:13:b6:e8:79:5c:39:ea:da:
5e:66:84:7c:d9:e8:ba:f7:7a:b3:77:f2:43:f7:c4:ef:e1:ee:
b5:07:4f:4c:e3:8b:9e:b2:32:63:4b:13:ea:da:b2:24:67:d2:
ee:02:b9:e3:80:8b:5d:4f:a5:a9:91:e8:10:da:c3:22:0f:cb:
41:ce:77:33:a8:55:2c:ad:44:d2:ce:ff:30:5f:0a:85:8b:d0:
cd:bf:6e:7b:56:6e:c7:54:a2:a2:5f:2c:82:f4:4c:57:28:ef:
b7:b6:f4:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakZWp7gRomPCcgyhNWNcrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjUwNTA2MDcwMDMxWhcNMjUwNTA3MDcwMDMxWjAzMTEwLwYDVQQD
Eyg1M2JjNGVhMjYyZDU1NTQ5MTEwMmFkYTQ4N2Q2ZmRjODA3MWU2Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLk2Tp8Ph5qO6XUClIL4q1C/EGLr
dtdIuwFjMJrQpdriXvj/Fz3Mu092MSWtpf6v7FY7WYvoF4gFsVMcLsmEj0EbwHY4
Uvvbx5OiEOHrrQWP+P8u3Q2I1sPVtqGwibUG+ALKX41CINj+OHgXKiw1g7K4ydMh
6rAciBQqlVM2stMSEewQsvb5GtNjp2jj708GoSDgBa6X+nVs88JzXVoVJZ2gn2Mk
tki4R7TMD5/wnLPXENUzsVi3U57kmuqLdWqTMnnTpi7AZ1UhCLBiMGeZRqcS2Fgk
rI2ttvbFxjGn5T4tjHMl320wqWGkLmjVLzjaOS/ANDsuFxiDNZZzA4oQ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO8TqJi1VVJEQKtpIfW/cgHHmZ3MB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Kl5KAuj
OiSN0mByYG49QFfVL4+A+AqOxidwegyyiuNKy8ao0IhqfFAN6cnIzkw0vI3xb2pv
ag96eXjwH4y/OlSetlAgbeVJlJkP+wwF/2/MrH8zk7q1RmlCZzk0WoF+1+MF/D81
ZQVXZijiMk1+ZFYL5l31m0irH/yFdk3gcsj0n1TDpww/ogkeb4c6/Uz2sL9i5IvI
aSQGJhO26HlcOeraXmaEfNnouvd6s3fyQ/fE7+HutQdPTOOLnrIyY0sT6tqyJGfS
7gK544CLXU+lqZHoENrDIg/LQc53M6hVLK1E0s7/MF8KhYvQzb9ue1Zux1Siol8s
gvRMVyjvt7b0vg==
-----END CERTIFICATE-----
Generated at Tue May 6 15:45:33 2025 by rpki-client