Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: lR0ClMHr5qXJEk0AGhDIcacgeR3keSNdkrJwos064N4=
Subject key identifier: D8:CC:5A:6F:54:39:45:88:E6:D8:23:01:53:A1:26:99:18:9E:FC:88
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 0196BD815206F497EDCDD871422FFBA496C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 0421
Signing time: Sun 11 May 2025 04:01:30 +0000
Manifest this update: Sun 11 May 2025 04:01:30 +0000
Manifest next update: Mon 12 May 2025 04:01:30 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: t3tN1Mo5HM8GfkgvuyJxzh1LjyZCKDM/uNZoEi0Wzo4=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:52:06:f4:97:ed:cd:d8:71:42:2f:fb:a4:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: May 11 04:01:30 2025 GMT
Not After : May 12 04:01:30 2025 GMT
Subject: CN=d8cc5a6f54394588e6d8230153a12699189efc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:7a:fa:8b:8f:e3:9b:fb:0b:d1:aa:8b:28:
34:f9:9c:a4:9a:4a:31:17:0e:af:ea:93:9a:8f:4a:
29:08:0b:a1:91:81:47:f2:da:03:02:42:29:b8:57:
05:84:4b:ba:aa:e2:c6:ae:33:d4:77:a9:55:a4:6f:
8d:20:1e:70:99:53:22:2a:9a:8e:9c:b3:6f:f9:92:
3c:ea:38:c1:c5:c8:0b:b1:dd:c1:91:62:e8:04:df:
db:e8:61:93:20:ca:bd:ae:d2:70:56:0e:ef:19:8b:
9c:41:d4:c8:b1:9e:e9:cd:d2:69:16:9e:bc:1a:2f:
c1:ed:b4:31:d8:97:b0:ff:13:28:8e:9e:86:ba:b5:
57:75:72:f9:1b:e8:22:9d:4f:dc:96:28:85:44:d1:
81:61:bd:32:c1:4a:4d:7a:77:25:85:af:e8:9e:3d:
c9:2d:a2:35:d9:5f:e0:33:d6:e1:03:53:45:22:2a:
01:0d:a5:57:84:9d:2f:7c:9e:8b:8b:aa:df:a5:da:
27:90:b6:ae:08:f6:5c:9b:3c:db:43:d8:12:b3:b9:
6a:37:12:cd:ce:49:a0:55:5d:c1:8a:af:06:35:35:
64:3c:9f:ff:88:b5:c3:b7:1f:21:f6:b5:c7:77:ab:
4b:2f:38:92:a0:48:5f:f1:eb:a4:35:c0:46:23:e5:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:5A:6F:54:39:45:88:E6:D8:23:01:53:A1:26:99:18:9E:FC:88
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:56:22:68:73:5d:18:51:98:d4:0d:6d:7c:5c:cb:ee:9d:04:
d6:79:0d:03:1f:c2:9b:fe:71:95:38:2b:9a:48:da:4e:54:2f:
2d:46:5d:20:84:70:86:91:f2:46:ec:41:94:1f:d5:e0:7c:14:
db:dd:17:04:47:fd:c2:92:9a:ba:4e:dc:09:fd:25:7e:d0:c1:
bc:a5:d5:fe:fc:ad:76:e7:0c:bb:22:06:89:6e:d7:9a:9f:00:
6c:8e:a7:0f:de:1d:18:c4:72:28:a4:60:66:03:4f:09:8d:89:
66:2a:6c:5d:b9:98:62:b3:72:c8:4b:d5:86:da:ec:25:90:e5:
1c:6e:a2:ef:7c:1c:bc:d9:26:17:ee:7f:ce:5c:b3:73:80:9f:
53:be:55:f0:eb:bc:34:bc:4a:a9:31:76:21:60:95:b9:24:02:
5a:d2:0e:56:6a:d6:8f:5b:73:6b:04:dd:4c:30:e1:91:bf:d5:
36:2d:5a:2c:4d:f7:0a:99:fc:d5:8d:f0:32:aa:61:fe:dc:29:
40:68:bd:f5:f6:c7:20:00:28:f7:26:e2:7c:23:62:72:79:1a:
78:02:38:13:e0:6d:bc:9f:67:e3:67:7e:36:c4:49:90:cd:59:
1b:1d:ae:66:f3:ca:76:14:eb:f1:bf:18:a5:90:de:d4:91:ee:
f0:16:e1:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gVIG9JftzdhxQi/7pJbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzU1MTdiMzE2MWEwNDc3NjI0MTMzMDE2MTQyMTc2Nzlh
ODI2MDgwHhcNMjUwNTExMDQwMTMwWhcNMjUwNTEyMDQwMTMwWjAzMTEwLwYDVQQD
EyhkOGNjNWE2ZjU0Mzk0NTg4ZTZkODIzMDE1M2ExMjY5OTE4OWVmYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuit6+ouP45v7C9Gqiyg0+Zykmkox
Fw6v6pOaj0opCAuhkYFH8toDAkIpuFcFhEu6quLGrjPUd6lVpG+NIB5wmVMiKpqO
nLNv+ZI86jjBxcgLsd3BkWLoBN/b6GGTIMq9rtJwVg7vGYucQdTIsZ7pzdJpFp68
Gi/B7bQx2Jew/xMojp6GurVXdXL5G+ginU/cliiFRNGBYb0ywUpNenclha/onj3J
LaI12V/gM9bhA1NFIioBDaVXhJ0vfJ6Li6rfpdonkLauCPZcmzzbQ9gSs7lqNxLN
zkmgVV3Biq8GNTVkPJ//iLXDtx8h9rXHd6tLLziSoEhf8eukNcBGI+U74wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjMWm9UOUWI5tgjAVOhJpkYnvyIMB8GA1UdIwQY
MBaAFO91UXsxYaBHdiQTMBYUIXZ5qCYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lZWVhZWUtMDhkNy00ZTI0LTg0ZGQt
MzA3YjQ5NzFlMjY2LzEvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lZWVhZWUtMDhkNy00ZTI0LTg0ZGQtMzA3YjQ5NzFlMjY2
LzEvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlYiaHNd
GFGY1A1tfFzL7p0E1nkNAx/Cm/5xlTgrmkjaTlQvLUZdIIRwhpHyRuxBlB/V4HwU
290XBEf9wpKauk7cCf0lftDBvKXV/vytducMuyIGiW7Xmp8AbI6nD94dGMRyKKRg
ZgNPCY2JZipsXbmYYrNyyEvVhtrsJZDlHG6i73wcvNkmF+5/zlyzc4CfU75V8Ou8
NLxKqTF2IWCVuSQCWtIOVmrWj1tzawTdTDDhkb/VNi1aLE33Cpn81Y3wMqph/twp
QGi99fbHIAAo9ybifCNicnkaeAI4E+BtvJ9n42d+NsRJkM1ZGx2uZvPKdhTr8b8Y
pZDe1JHu8Bbhow==
-----END CERTIFICATE-----
Generated at Sun May 11 12:06:01 2025 by rpki-client