Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier: llm3BQrwokgodkdrzRupQQx4F0GAvIzXMguQhTNL/70=
Subject key identifier: D6:1D:EA:A4:D9:A7:A9:CA:EE:56:15:80:66:C5:9B:9D:58:F4:21:B8
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 0196C0B88FE21CFED1FDE58C77D11871AEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number: 07E6
Signing time: Sun 11 May 2025 19:00:42 +0000
Manifest this update: Sun 11 May 2025 19:00:42 +0000
Manifest next update: Mon 12 May 2025 19:00:42 +0000
Files and hashes: 1: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: lGUKvM5vLPN8jM18DehxCtkAcNLSJSCAn8FHxpWO+8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:8f:e2:1c:fe:d1:fd:e5:8c:77:d1:18:71:ae:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: May 11 19:00:42 2025 GMT
Not After : May 12 19:00:42 2025 GMT
Subject: CN=d61deaa4d9a7a9caee56158066c59b9d58f421b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:f0:b7:74:87:6b:70:90:d6:a7:1c:88:51:
e7:71:a5:d2:2c:e7:c6:85:df:43:90:62:91:23:50:
fc:75:75:ec:61:4a:cd:ca:a6:46:1f:42:b4:84:8c:
29:52:e4:58:07:42:97:bc:9c:36:97:4b:7e:06:a0:
c2:4f:06:8a:e0:02:e9:35:d2:e4:0b:2a:ea:74:f3:
3b:57:76:0d:16:37:5c:d8:03:0e:d5:8e:6b:82:db:
bd:11:54:39:1a:04:e5:51:88:7f:a5:fe:d3:ff:2a:
f6:20:82:aa:24:20:73:3e:38:55:17:9f:27:4b:a1:
a1:5d:d6:64:bb:e3:9d:73:a8:d2:03:65:24:5a:75:
84:28:24:37:63:c6:50:47:07:8d:49:5c:f1:38:f2:
07:0d:ba:20:2c:0c:34:f5:e7:93:93:12:a8:ff:9a:
8c:ee:7d:a8:2c:aa:f9:fc:7f:e2:8e:aa:7f:2d:eb:
48:c9:3b:d7:5a:c2:5a:1d:80:b8:74:b8:e0:20:ff:
19:7b:73:c8:af:eb:e7:a4:b9:da:27:72:c5:b5:bc:
54:b7:0c:64:5e:73:0c:3e:ba:d0:8b:3c:84:91:cb:
02:e5:b0:c0:e5:da:4a:09:f9:ea:8c:91:08:bb:de:
33:f0:65:96:ae:c5:1b:cd:15:fe:36:a4:89:b0:04:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:EA:A4:D9:A7:A9:CA:EE:56:15:80:66:C5:9B:9D:58:F4:21:B8
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:24:18:bc:43:f3:4e:db:06:42:ce:2b:81:ed:b2:0d:37:
3d:f0:47:05:7d:fc:62:7b:3b:db:45:6e:3c:1d:c0:8c:6a:8c:
8c:e8:72:55:9a:9c:42:e4:86:3f:02:73:b3:ed:12:b3:4f:e4:
76:38:0c:25:81:bd:77:8e:51:db:77:41:3c:59:8a:c0:c6:75:
85:b7:94:84:c4:3d:e6:4f:ee:c7:86:41:54:5c:c4:3f:2c:89:
74:a7:85:55:c8:b0:a3:72:04:9a:41:18:83:c1:96:25:94:2e:
84:99:df:88:8a:59:b4:36:6e:34:00:c5:61:eb:d0:80:59:48:
2e:d9:7c:b7:d0:ad:37:4a:b6:6f:80:0d:29:bd:e2:f7:e3:50:
83:e9:46:50:b0:f1:9c:aa:b7:fb:34:db:e0:f9:38:62:21:37:
ae:f4:ee:e3:7d:28:06:b0:26:3b:dc:5c:ff:c3:6e:a2:92:34:
2c:bb:b5:82:79:9c:c3:46:ca:91:07:3d:ff:c2:d9:90:ec:04:
5e:64:34:28:10:22:e7:23:fe:34:2f:be:b5:01:56:fc:40:b6:
61:f9:9b:94:96:0f:1d:9d:8a:f5:06:18:45:03:65:e6:02:7a:
30:2b:62:58:83:b1:86:71:49:f2:05:84:1f:79:a7:e6:bc:56:
6b:ea:ff:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuI/iHP7R/eWMd9EYca7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTI2NjlmODE5ZWJkOGRkMmViYmE5M2YyZGQyZDNlMWEy
N2MyMzEwHhcNMjUwNTExMTkwMDQyWhcNMjUwNTEyMTkwMDQyWjAzMTEwLwYDVQQD
EyhkNjFkZWFhNGQ5YTdhOWNhZWU1NjE1ODA2NmM1OWI5ZDU4ZjQyMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo7wt3SHa3CQ1qcciFHncaXSLOfG
hd9DkGKRI1D8dXXsYUrNyqZGH0K0hIwpUuRYB0KXvJw2l0t+BqDCTwaK4ALpNdLk
CyrqdPM7V3YNFjdc2AMO1Y5rgtu9EVQ5GgTlUYh/pf7T/yr2IIKqJCBzPjhVF58n
S6GhXdZku+Odc6jSA2UkWnWEKCQ3Y8ZQRweNSVzxOPIHDbogLAw09eeTkxKo/5qM
7n2oLKr5/H/ijqp/LetIyTvXWsJaHYC4dLjgIP8Ze3PIr+vnpLnaJ3LFtbxUtwxk
XnMMPrrQizyEkcsC5bDA5dpKCfnqjJEIu94z8GWWrsUbzRX+NqSJsASVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYd6qTZp6nK7lYVgGbFm51Y9CG4MB8GA1UdIwQY
MBaAFHiSZp+Bnr2N0uu6k/LdLT4aJ8IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMt
YjhhMjhjYmVmNGFkLzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMtYjhhMjhjYmVmNGFk
LzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbokGLxD
807bBkLOK4Htsg03PfBHBX38Yns720VuPB3AjGqMjOhyVZqcQuSGPwJzs+0Ss0/k
djgMJYG9d45R23dBPFmKwMZ1hbeUhMQ95k/ux4ZBVFzEPyyJdKeFVciwo3IEmkEY
g8GWJZQuhJnfiIpZtDZuNADFYevQgFlILtl8t9CtN0q2b4ANKb3i9+NQg+lGULDx
nKq3+zTb4Pk4YiE3rvTu430oBrAmO9xc/8NuopI0LLu1gnmcw0bKkQc9/8LZkOwE
XmQ0KBAi5yP+NC++tQFW/EC2YfmblJYPHZ2K9QYYRQNl5gJ6MCtiWIOxhnFJ8gWE
H3mn5rxWa+r/PQ==
-----END CERTIFICATE-----
Generated at Mon May 12 05:35:53 2025 by rpki-client