Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: Aaifeabc1I5k2jvzRbPBNxFycIbvJ7kCNQdqBaaIKKQ=
Subject key identifier: 43:AB:91:B5:41:85:D7:B9:C1:DC:09:59:40:BB:E2:37:73:8B:42:9D
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 0196BBC916D21A817E329C4EBA012EEA3000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 20:00:39 +0000
Manifest this update: Sat 10 May 2025 20:00:39 +0000
Manifest next update: Sun 11 May 2025 20:00:39 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: s3Ph4hPK8OmcLxl4ruNUHHQOdUyuFSnhADs7zMuiSDo=)
2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:16:d2:1a:81:7e:32:9c:4e:ba:01:2e:ea:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: May 10 20:00:39 2025 GMT
Not After : May 11 20:00:39 2025 GMT
Subject: CN=43ab91b54185d7b9c1dc095940bbe237738b429d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:7a:8a:c6:3a:e2:35:fe:12:1d:76:4f:a0:
53:09:0a:e3:6b:84:c6:74:31:be:89:d6:5e:2f:60:
be:32:cf:ee:2a:e6:35:22:84:1f:2e:be:37:a4:4d:
8b:52:c4:ae:aa:b1:b9:4a:b8:7a:2c:62:a2:f9:7b:
8a:46:7e:4e:b9:54:56:c9:d5:d0:75:46:74:9a:cc:
f6:31:ef:ff:c4:84:bd:55:8a:a9:af:68:22:72:0c:
0c:1f:08:a6:68:3a:b2:c6:9d:dc:a4:73:09:fc:8a:
b5:54:ee:85:4f:56:70:e6:07:14:4e:db:07:d8:0a:
58:81:00:c8:55:4a:2d:93:27:a4:55:b6:c5:8e:57:
cf:bc:ae:56:48:0a:e0:1e:84:a8:dd:25:9d:99:27:
cd:07:20:79:4d:bf:63:a3:d7:55:bf:da:cc:96:73:
2d:eb:0a:03:6a:57:c0:db:02:2b:4b:58:61:39:38:
ed:f7:cb:b0:00:07:65:07:fc:25:55:b2:ac:67:9f:
04:d9:66:35:28:9f:88:b9:91:45:82:37:8a:eb:86:
6b:db:6b:0e:4f:ae:1c:de:96:f3:f5:f6:0a:00:5b:
1e:c9:78:f9:18:68:9e:dd:09:78:b8:18:ef:3e:13:
1c:d0:3e:09:9a:eb:49:a6:2c:f9:da:05:5d:b8:14:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:91:B5:41:85:D7:B9:C1:DC:09:59:40:BB:E2:37:73:8B:42:9D
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c6:37:9b:b4:2d:0c:fa:17:a8:b7:0c:3c:de:23:d9:4f:cd:
9e:a5:44:fb:ff:d6:bd:ab:d1:fd:ec:c3:99:d6:a5:44:d4:1f:
cc:28:0a:40:cf:44:11:ca:71:a0:42:3f:85:c6:1e:7e:fb:a9:
5e:ed:e7:61:0a:0c:cd:36:ee:41:e5:fd:43:4d:44:1e:d9:c2:
de:d5:dc:95:d8:54:a5:28:46:fd:0d:7a:32:6c:91:4b:78:cb:
60:ab:d7:37:51:17:2e:77:07:f8:f3:5a:dd:33:d0:73:4b:fa:
9a:3b:64:a8:a7:b6:44:13:7f:17:87:15:51:3f:04:d5:d4:94:
50:19:7c:72:9e:27:98:fa:14:49:c4:27:8c:bb:02:d8:8d:5b:
4c:87:a4:44:b6:20:58:37:03:af:b2:7d:81:09:d6:5f:3b:20:
7e:2f:d6:a8:97:b6:ab:6d:a6:73:74:e3:f5:51:4a:71:d0:74:
21:55:11:cb:8a:e3:61:fe:f4:ca:f4:a4:33:8c:13:d1:42:ce:
30:dc:01:db:67:69:16:2f:4c:fe:a0:eb:01:77:6a:82:8b:8a:
9e:06:b6:27:e6:e4:5a:e5:cc:03:8b:15:98:ae:ec:bb:a2:7c:
4b:61:18:fe:92:81:41:9e:3f:73:fb:7b:d8:c5:c3:b8:e6:53:
e1:c1:c6:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yRbSGoF+MpxOugEu6jAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3
MDc5NjUwHhcNMjUwNTEwMjAwMDM5WhcNMjUwNTExMjAwMDM5WjAzMTEwLwYDVQQD
Eyg0M2FiOTFiNTQxODVkN2I5YzFkYzA5NTk0MGJiZTIzNzczOGI0MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrN6isY64jX+Eh12T6BTCQrja4TG
dDG+idZeL2C+Ms/uKuY1IoQfLr43pE2LUsSuqrG5Srh6LGKi+XuKRn5OuVRWydXQ
dUZ0msz2Me//xIS9VYqpr2gicgwMHwimaDqyxp3cpHMJ/Iq1VO6FT1Zw5gcUTtsH
2ApYgQDIVUotkyekVbbFjlfPvK5WSArgHoSo3SWdmSfNByB5Tb9jo9dVv9rMlnMt
6woDalfA2wIrS1hhOTjt98uwAAdlB/wlVbKsZ58E2WY1KJ+IuZFFgjeK64Zr22sO
T64c3pbz9fYKAFseyXj5GGie3Ql4uBjvPhMc0D4JmutJpiz52gVduBQLKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOrkbVBhde5wdwJWUC74jdzi0KdMB8GA1UdIwQY
MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt
OTZmMjE2ODkzZGVjLzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj
LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMY3m7Qt
DPoXqLcMPN4j2U/NnqVE+//WvavR/ezDmdalRNQfzCgKQM9EEcpxoEI/hcYefvup
Xu3nYQoMzTbuQeX9Q01EHtnC3tXcldhUpShG/Q16MmyRS3jLYKvXN1EXLncH+PNa
3TPQc0v6mjtkqKe2RBN/F4cVUT8E1dSUUBl8cp4nmPoUScQnjLsC2I1bTIekRLYg
WDcDr7J9gQnWXzsgfi/WqJe2q22mc3Tj9VFKcdB0IVURy4rjYf70yvSkM4wT0ULO
MNwB22dpFi9M/qDrAXdqgouKnga2J+bkWuXMA4sVmK7su6J8S2EY/pKBQZ4/c/t7
2MXDuOZT4cHGmQ==
-----END CERTIFICATE-----
Generated at Sun May 11 03:14:36 2025 by rpki-client