Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier: LSAP/0EvAK/nXYL/5SsjlhnCPD01hFRZb3B+feag2zI=
Subject key identifier: F9:FF:BE:97:00:EB:2A:E7:CD:0C:EF:A6:68:8C:EC:9B:35:07:97:B0
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial: 0196B7B523ED0651C42E83F82236BD2F2F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number: 0A7D
Signing time: Sat 10 May 2025 01:00:23 +0000
Manifest this update: Sat 10 May 2025 01:00:23 +0000
Manifest next update: Sun 11 May 2025 01:00:23 +0000
Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: QB6JxhZEh/OPbML4E+hL4fGICnTRvN1o9kK/OXo7Wmo=)
2: iEka4Vv56ltOb2j3jT-ILWz-_Es.roa (hash: eHAQPRCUs+jzFQIPkgWCN2IRqlhuSuMwK3wcNPLkVsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:23:ed:06:51:c4:2e:83:f8:22:36:bd:2f:2f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Validity
Not Before: May 10 01:00:23 2025 GMT
Not After : May 11 01:00:23 2025 GMT
Subject: CN=f9ffbe9700eb2ae7cd0cefa6688cec9b350797b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:43:dd:99:4d:50:f7:02:ae:30:51:15:45:
bf:8c:11:42:45:11:71:b8:8e:1a:d3:06:2e:35:31:
b9:06:fe:54:4c:bb:6c:a1:74:c1:a7:b2:f5:01:91:
0b:d4:09:e5:6f:cd:b7:12:8d:07:6b:ba:d1:f7:c4:
7f:20:51:74:00:3e:5b:bb:e0:b6:00:2d:8c:2e:73:
34:fc:6f:96:9d:e9:7d:1e:4b:d2:23:02:a9:47:2f:
9b:c8:23:3f:3a:18:3c:d4:a7:6d:09:4f:44:af:5a:
97:08:d1:29:df:6e:4c:35:03:40:e2:ce:d0:c2:04:
a1:0e:5a:0f:2b:35:e2:c2:6a:0c:04:f4:fb:01:ec:
15:b4:e7:48:6d:ff:8d:80:0a:3c:2d:84:d2:8e:cf:
1a:6d:ca:a2:b9:e4:d0:e3:3a:e6:b9:66:dd:6a:13:
1d:81:40:80:fd:24:38:10:b1:5c:3c:5f:9a:c6:da:
9d:50:aa:b1:be:e9:21:4c:33:72:5b:f8:93:39:e4:
db:98:07:e2:1d:35:9f:9b:1d:3f:a0:f7:8e:44:9a:
52:cb:43:00:44:b7:0f:1d:22:aa:18:20:3e:d1:b2:
ae:94:d2:8a:a9:97:ca:ac:44:1d:12:a3:3a:3b:be:
c5:b3:18:bc:3d:7b:2a:12:56:e7:21:b9:10:55:5e:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FF:BE:97:00:EB:2A:E7:CD:0C:EF:A6:68:8C:EC:9B:35:07:97:B0
X509v3 Authority Key Identifier:
keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:50:cd:3f:5e:3b:39:99:4c:c4:52:d5:53:de:4f:b5:50:4a:
27:47:a8:0e:d4:b2:a3:06:7c:f1:fc:ba:35:4b:8a:53:43:c1:
23:e3:f2:06:23:c7:2b:fa:b0:14:5f:d7:22:74:24:78:5a:88:
c2:58:5b:68:0f:cb:08:29:04:c0:42:a1:a0:77:85:dc:ba:d5:
52:c2:ec:a6:0d:05:e5:73:03:18:39:2b:7c:9f:14:fe:6e:f3:
71:cc:a2:c6:a4:31:e5:f0:3a:82:fe:ef:cd:79:f2:41:7c:64:
0c:f0:f1:75:8f:18:71:64:1c:8b:89:88:e2:aa:6c:82:63:84:
e6:b7:d3:fa:6a:1d:53:c5:36:12:70:3c:c5:b8:36:a7:85:67:
1d:f7:87:53:2a:95:6d:b6:73:fb:c1:f0:f4:c1:bd:d0:cb:8e:
f2:a2:22:07:93:40:d6:25:d9:5f:ae:15:e2:37:f6:9e:d3:be:
be:60:84:d5:8f:d9:d7:6b:db:25:f2:bf:a1:63:a8:f5:0a:fe:
9b:8e:a3:3e:e8:d4:dc:d2:42:41:f4:35:9d:3b:a7:8c:ee:b3:
6c:ee:c1:6b:4f:22:23:a2:b1:4d:8c:82:88:be:61:2c:df:ad:
10:86:6c:f2:60:ea:f3:5e:95:45:da:e0:87:2d:db:ee:50:16:
1f:e3:02:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tSPtBlHELoP4Ija9Ly94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE5Zjg4YjBkYzFiODkwMjU0ZGI5NGE5YjYyMDQ2ZDZi
ZTc5NGIwHhcNMjUwNTEwMDEwMDIzWhcNMjUwNTExMDEwMDIzWjAzMTEwLwYDVQQD
EyhmOWZmYmU5NzAwZWIyYWU3Y2QwY2VmYTY2ODhjZWM5YjM1MDc5N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPRD3ZlNUPcCrjBRFUW/jBFCRRFx
uI4a0wYuNTG5Bv5UTLtsoXTBp7L1AZEL1Anlb823Eo0Ha7rR98R/IFF0AD5bu+C2
AC2MLnM0/G+Wnel9HkvSIwKpRy+byCM/Ohg81KdtCU9Er1qXCNEp325MNQNA4s7Q
wgShDloPKzXiwmoMBPT7AewVtOdIbf+NgAo8LYTSjs8abcqiueTQ4zrmuWbdahMd
gUCA/SQ4ELFcPF+axtqdUKqxvukhTDNyW/iTOeTbmAfiHTWfmx0/oPeORJpSy0MA
RLcPHSKqGCA+0bKulNKKqZfKrEQdEqM6O77Fsxi8PXsqElbnIbkQVV7U0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn/vpcA6yrnzQzvpmiM7Js1B5ewMB8GA1UdIwQY
MBaAFBHRn4iw3BuJAlTblKm2IEbWvnlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQt
NDhiNDk1NWYwNjAwLzEvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQtNDhiNDk1NWYwNjAw
LzEvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1DNP147
OZlMxFLVU95PtVBKJ0eoDtSyowZ88fy6NUuKU0PBI+PyBiPHK/qwFF/XInQkeFqI
wlhbaA/LCCkEwEKhoHeF3LrVUsLspg0F5XMDGDkrfJ8U/m7zccyixqQx5fA6gv7v
zXnyQXxkDPDxdY8YcWQci4mI4qpsgmOE5rfT+modU8U2EnA8xbg2p4VnHfeHUyqV
bbZz+8Hw9MG90MuO8qIiB5NA1iXZX64V4jf2ntO+vmCE1Y/Z12vbJfK/oWOo9Qr+
m46jPujU3NJCQfQ1nTunjO6zbO7Ba08iI6KxTYyCiL5hLN+tEIZs8mDq816VRdrg
hy3b7lAWH+MC1w==
-----END CERTIFICATE-----
Generated at Sat May 10 10:42:33 2025 by rpki-client