Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: lot5xO3gIYNgXTLpG1KTqUg2vgvdiwCeDpG3WW1/sf8=
Subject key identifier: 77:2B:62:C8:59:88:79:45:BB:F3:D9:86:19:4C:D7:E4:E1:76:49:13
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 0196BD80CE5FC9CAC12961DF30B622722D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 14C2
Signing time: Sun 11 May 2025 04:00:57 +0000
Manifest this update: Sun 11 May 2025 04:00:57 +0000
Manifest next update: Mon 12 May 2025 04:00:57 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: qMJRyhFv/yp7e6vqFdec4ddfBrWoNWZ1qy6QzuE+5Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:ce:5f:c9:ca:c1:29:61:df:30:b6:22:72:2d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: May 11 04:00:57 2025 GMT
Not After : May 12 04:00:57 2025 GMT
Subject: CN=772b62c859887945bbf3d986194cd7e4e1764913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:ec:ee:99:99:d2:74:7a:f0:10:31:b7:70:
4d:97:52:9c:21:c3:ec:fd:23:3d:2b:ea:f3:ef:f1:
20:98:24:2e:59:87:76:eb:49:75:57:a0:3f:f7:4b:
cc:dd:f5:93:87:bc:50:25:c9:3f:da:87:63:0b:e8:
ed:77:3d:47:f2:70:f1:3b:80:81:29:83:7a:80:0a:
01:9e:9a:9f:1d:71:98:3b:fd:2c:86:87:d6:45:10:
77:c0:1c:1f:4d:3c:03:5f:23:1a:7f:ea:65:9a:77:
5b:49:17:62:2f:45:61:fc:ee:3a:37:6b:b9:87:06:
63:04:bd:2b:7f:c0:37:07:c8:90:9d:c9:2d:4d:e2:
49:b6:70:82:fe:43:ce:06:0d:7c:b8:67:75:64:f7:
1d:fe:23:a1:78:cd:a8:7d:ba:49:fc:2f:31:b2:c5:
e7:5e:f6:f8:75:0c:bb:f7:20:4e:c0:3d:89:3c:ab:
cc:e5:e8:da:99:c2:8a:21:1d:f6:c9:e2:2d:de:8b:
c8:ec:3c:b8:55:9e:1c:1b:c1:c9:19:98:68:b3:b3:
2d:f7:35:9e:e3:3f:e0:52:f7:8c:f8:cd:14:5a:98:
a3:2c:90:13:cc:0b:b1:00:45:14:f1:06:56:30:67:
26:25:97:bd:15:0a:9d:81:02:3f:e3:b4:59:33:1f:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:62:C8:59:88:79:45:BB:F3:D9:86:19:4C:D7:E4:E1:76:49:13
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e6:05:2d:38:72:98:18:bf:09:d1:5d:a2:06:bd:08:8a:d5:
a7:75:12:83:19:74:6f:07:21:d8:a0:6d:7f:14:36:49:c2:ec:
7c:53:cd:e7:a9:f4:74:8d:bc:f7:c3:de:c1:04:7c:00:f6:1d:
34:b7:e8:00:2e:2e:d8:5c:20:37:cb:38:bd:5d:f0:84:a9:3e:
63:aa:59:e4:e4:7f:a8:49:e3:32:58:68:02:90:8b:86:40:09:
71:a7:e6:ba:46:82:b2:39:e2:59:b7:67:15:42:f7:21:f7:ee:
22:db:c4:78:e1:41:10:cd:ce:38:a6:b3:39:f4:58:73:06:71:
88:b5:f9:84:62:d1:07:c1:17:d8:25:09:7c:c1:af:63:dc:1f:
36:e2:75:bd:86:d8:77:0b:bb:55:31:47:3a:26:6c:6d:19:21:
c0:75:4d:57:11:16:65:0c:55:b9:06:0d:a0:d5:7a:c4:91:97:
36:2d:1b:15:b0:18:fd:c2:83:47:e2:a5:76:c4:d5:cc:c2:92:
a3:35:98:cb:39:82:64:fc:78:5f:9e:34:53:c8:4e:54:72:98:
ac:b9:8c:44:9b:d9:9a:28:54:7f:a0:2a:95:97:2d:0d:5f:bb:
a7:59:89:2f:a6:19:08:bb:fd:44:53:3b:3b:8b:bc:e9:dd:91:
86:3b:7c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gM5fycrBKWHfMLYici2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk
YjlkNzgwHhcNMjUwNTExMDQwMDU3WhcNMjUwNTEyMDQwMDU3WjAzMTEwLwYDVQQD
Eyg3NzJiNjJjODU5ODg3OTQ1YmJmM2Q5ODYxOTRjZDdlNGUxNzY0OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnubs7pmZ0nR68BAxt3BNl1KcIcPs
/SM9K+rz7/EgmCQuWYd260l1V6A/90vM3fWTh7xQJck/2odjC+jtdz1H8nDxO4CB
KYN6gAoBnpqfHXGYO/0shofWRRB3wBwfTTwDXyMaf+plmndbSRdiL0Vh/O46N2u5
hwZjBL0rf8A3B8iQncktTeJJtnCC/kPOBg18uGd1ZPcd/iOheM2ofbpJ/C8xssXn
Xvb4dQy79yBOwD2JPKvM5ejamcKKIR32yeIt3ovI7Dy4VZ4cG8HJGZhos7Mt9zWe
4z/gUveM+M0UWpijLJATzAuxAEUU8QZWMGcmJZe9FQqdgQI/47RZMx+EmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcrYshZiHlFu/PZhhlM1+ThdkkTMB8GA1UdIwQY
MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt
OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex
LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOYFLThy
mBi/CdFdoga9CIrVp3USgxl0bwch2KBtfxQ2ScLsfFPN56n0dI2898PewQR8APYd
NLfoAC4u2FwgN8s4vV3whKk+Y6pZ5OR/qEnjMlhoApCLhkAJcafmukaCsjniWbdn
FUL3IffuItvEeOFBEM3OOKazOfRYcwZxiLX5hGLRB8EX2CUJfMGvY9wfNuJ1vYbY
dwu7VTFHOiZsbRkhwHVNVxEWZQxVuQYNoNV6xJGXNi0bFbAY/cKDR+KldsTVzMKS
ozWYyzmCZPx4X540U8hOVHKYrLmMRJvZmihUf6AqlZctDV+7p1mJL6YZCLv9RFM7
O4u86d2Rhjt8og==
-----END CERTIFICATE-----
Generated at Sun May 11 14:45:06 2025 by rpki-client