Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: pJxm3DFG8OcZPSJMq8YwFT645cqU6XGhloiCKWKR6ac=
Subject key identifier: 2A:C8:C1:2C:F2:AB:93:73:06:7A:07:EF:4A:5D:51:C3:F3:AA:C8:44
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 0196C80414EF87F960AD25B979EEC4F631F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 11CC
Signing time: Tue 13 May 2025 05:00:32 +0000
Manifest this update: Tue 13 May 2025 05:00:32 +0000
Manifest next update: Wed 14 May 2025 05:00:32 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: melslH0kG6unZNNYsMaqS6tMSbb6kNBbimpizXR9FMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:14:ef:87:f9:60:ad:25:b9:79:ee:c4:f6:31:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: May 13 05:00:32 2025 GMT
Not After : May 14 05:00:32 2025 GMT
Subject: CN=2ac8c12cf2ab9373067a07ef4a5d51c3f3aac844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:c1:41:2b:13:89:a1:4a:11:cc:73:0a:75:
06:17:f0:83:d5:0f:e6:01:6a:1f:88:55:fe:db:22:
15:1a:a0:15:2d:07:a4:0b:b5:7a:84:db:6d:87:5d:
83:72:ea:4d:c1:e4:8f:fa:a3:7c:c2:9a:3a:72:4a:
9e:d6:89:68:8f:26:ab:82:d1:51:5d:fa:cd:ce:8f:
03:11:46:75:41:ad:17:84:35:d0:a9:58:b3:c4:d2:
97:01:7c:b0:3c:b1:02:01:b8:bc:e7:41:a2:51:f3:
b1:45:56:ed:65:a8:65:c0:11:7d:c3:03:1b:ab:f7:
99:1f:5a:78:c8:89:93:5e:33:df:84:f4:53:3d:6c:
97:13:7c:54:6d:c4:de:00:b9:c0:e9:e1:ae:43:d9:
45:5b:46:ee:ac:ac:10:ef:94:e0:45:37:c2:c6:d3:
c6:cd:e8:66:bb:81:58:88:68:5b:cd:ab:48:2f:a6:
3f:f1:8c:6b:87:31:7b:be:28:72:46:32:02:c5:21:
e8:44:32:a6:a1:95:8e:57:4f:79:53:85:eb:52:57:
d5:6d:55:b4:da:1c:04:4b:8f:2e:8f:30:e6:97:9b:
2f:a9:5f:41:8a:e5:49:21:46:8e:c9:0c:5c:b4:ca:
e4:69:9d:26:2a:b8:00:7d:4f:ef:92:54:1c:f0:29:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:C1:2C:F2:AB:93:73:06:7A:07:EF:4A:5D:51:C3:F3:AA:C8:44
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c3:8f:c6:dd:d4:32:06:35:43:0d:29:75:d0:ca:88:15:5f:
9c:45:49:be:96:8e:15:bb:44:08:eb:d0:0f:7c:2e:79:98:4b:
3c:ee:c1:d8:c0:db:e3:6e:6d:8d:81:a2:79:4a:7e:ff:76:e0:
e0:b7:7b:6d:7e:14:ff:d5:8b:51:d6:46:43:a6:cb:d6:ae:11:
bd:09:c5:d4:1f:ce:01:ef:cd:92:a5:66:17:63:a3:be:20:95:
ef:12:f4:75:aa:ba:29:05:49:5e:bb:f9:1c:fb:4c:43:ac:9c:
26:4b:94:86:8b:a5:07:d5:23:96:66:89:72:ae:06:c0:75:05:
b2:97:14:70:58:ad:4f:82:cf:47:f6:0a:0f:42:f1:c0:bc:5f:
dd:27:83:65:a9:0d:22:1c:44:a8:85:96:05:2b:09:5b:c2:a7:
43:45:ef:b8:93:09:9f:81:0c:f5:f9:f3:ab:8c:27:ec:d4:01:
02:e8:40:d8:28:92:18:3b:b5:48:4b:bc:1c:6a:1d:25:08:25:
60:0a:54:ee:28:ac:7e:26:c4:fd:35:d9:17:05:cd:f1:98:4c:
08:ca:84:59:c9:af:d6:f1:0b:69:82:f3:3e:9f:3d:9e:74:09:
65:76:9e:f1:61:0b:a3:36:5a:de:a5:93:93:95:aa:99:16:9c:
fc:f2:68:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIBBTvh/lgrSW5ee7E9jHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM3NDU5OTNjYzRiNmYxNDcwYWVhYjQ2MTRmMDg1ZDRh
ZTQwYTkwHhcNMjUwNTEzMDUwMDMyWhcNMjUwNTE0MDUwMDMyWjAzMTEwLwYDVQQD
EygyYWM4YzEyY2YyYWI5MzczMDY3YTA3ZWY0YTVkNTFjM2YzYWFjODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN7BQSsTiaFKEcxzCnUGF/CD1Q/m
AWofiFX+2yIVGqAVLQekC7V6hNtth12DcupNweSP+qN8wpo6ckqe1olojyargtFR
XfrNzo8DEUZ1Qa0XhDXQqVizxNKXAXywPLECAbi850GiUfOxRVbtZahlwBF9wwMb
q/eZH1p4yImTXjPfhPRTPWyXE3xUbcTeALnA6eGuQ9lFW0burKwQ75TgRTfCxtPG
zehmu4FYiGhbzatIL6Y/8YxrhzF7vihyRjICxSHoRDKmoZWOV095U4XrUlfVbVW0
2hwES48ujzDml5svqV9BiuVJIUaOyQxctMrkaZ0mKrgAfU/vklQc8ClD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrIwSzyq5NzBnoH70pdUcPzqshEMB8GA1UdIwQY
MBaAFO4sdFmTzEtvFHCuq0YU8IXUrkCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1Nzgt
NzcyYzkxNzdkNTI5LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1NzgtNzcyYzkxNzdkNTI5
LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsOPxt3U
MgY1Qw0pddDKiBVfnEVJvpaOFbtECOvQD3wueZhLPO7B2MDb425tjYGieUp+/3bg
4Ld7bX4U/9WLUdZGQ6bL1q4RvQnF1B/OAe/NkqVmF2OjviCV7xL0daq6KQVJXrv5
HPtMQ6ycJkuUhoulB9UjlmaJcq4GwHUFspcUcFitT4LPR/YKD0LxwLxf3SeDZakN
IhxEqIWWBSsJW8KnQ0XvuJMJn4EM9fnzq4wn7NQBAuhA2CiSGDu1SEu8HGodJQgl
YApU7iisfibE/TXZFwXN8ZhMCMqEWcmv1vELaYLzPp89nnQJZXae8WELozZa3qWT
k5WqmRac/PJoOg==
-----END CERTIFICATE-----
Generated at Tue May 13 13:41:37 2025 by rpki-client