Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File: fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier: DKaTJKm9JLCa9PP31GvofQ9wP/4GLElZJTtOia/S/ws=
Subject key identifier: E3:D1:FB:CA:A9:E7:90:8F:B3:9E:AE:8E:11:50:51:A6:E6:62:41:EB
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer: /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial: 0196BA48A00C5AB7EC36E469B82FE17C8265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number: 0525
Signing time: Sat 10 May 2025 13:00:43 +0000
Manifest this update: Sat 10 May 2025 13:00:43 +0000
Manifest next update: Sun 11 May 2025 13:00:43 +0000
Files and hashes: 1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: 9rg8Kg/UCjqZtklpnq/wcqmzSnHGBvlXlCd5wL/Bch0=)
2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:a0:0c:5a:b7:ec:36:e4:69:b8:2f:e1:7c:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Validity
Not Before: May 10 13:00:43 2025 GMT
Not After : May 11 13:00:43 2025 GMT
Subject: CN=e3d1fbcaa9e7908fb39eae8e115051a6e66241eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:58:12:3e:17:f5:b5:58:76:a0:82:38:08:80:
12:e6:0a:64:ab:76:73:b5:a9:16:3c:b2:65:64:9f:
c4:ce:b2:7c:5b:b9:14:99:2f:88:21:f6:81:95:17:
9a:3d:f9:58:bf:08:e6:85:a0:d3:79:ad:f5:f9:4a:
af:ea:24:17:53:a0:86:1d:eb:0a:f6:70:14:5f:11:
56:7c:8f:7b:b7:ce:66:02:16:50:db:38:90:cf:e2:
83:a3:70:cd:49:13:4b:b5:79:64:77:bf:80:84:4e:
51:6f:8c:29:9c:13:31:34:b0:1c:f5:20:6f:b0:ee:
09:89:36:dc:06:4b:9b:ca:5f:3e:e4:77:5d:09:64:
51:1b:1d:33:ed:e1:48:7a:d4:84:59:05:a3:a3:08:
e3:ab:32:a2:21:12:e0:37:76:43:b5:d7:cd:8d:5a:
26:e5:38:9e:91:97:0f:1e:95:ac:61:d1:c6:7e:82:
7c:73:39:ea:b9:12:50:cb:cd:af:8b:ac:29:c5:54:
3c:0a:e3:d0:8a:f8:53:16:49:a5:e2:f1:e7:51:31:
45:d0:f2:81:4d:b1:79:8b:c1:50:17:a1:c6:7e:94:
77:7c:52:3f:12:f5:fc:d9:f3:32:a0:1c:bc:ce:40:
3b:9c:81:72:83:2e:eb:8f:d7:c7:47:77:ce:a4:e5:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D1:FB:CA:A9:E7:90:8F:B3:9E:AE:8E:11:50:51:A6:E6:62:41:EB
X509v3 Authority Key Identifier:
keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7c:f7:62:17:04:1e:2d:30:da:5f:29:ed:42:af:a3:54:14:
38:66:11:97:65:c6:e7:38:f6:60:b8:5d:f2:1a:97:60:65:58:
a2:57:a3:b2:ae:e3:b7:15:63:02:f1:8f:c9:2e:ac:b2:36:68:
15:05:87:9d:dc:32:2e:26:14:3e:a5:5c:a0:cc:d4:4c:7c:38:
6c:44:a3:b7:8b:97:45:ac:52:93:4f:b3:87:90:18:c4:4a:9b:
3d:0b:f2:8f:0a:ab:5f:c1:06:fa:57:72:b8:a4:dc:b2:6b:46:
ef:6a:1f:a0:42:1a:b8:38:54:16:66:b1:0f:e9:b5:88:37:3d:
2c:92:96:b5:43:4f:27:2c:be:d2:c4:e2:4c:dc:e1:3f:f1:09:
32:5a:ef:27:d9:1f:45:3d:67:74:55:27:0a:4e:a1:68:4a:37:
5d:3f:69:79:4b:ea:53:18:d5:c0:2d:00:05:a0:55:95:25:80:
6d:86:0e:ae:8c:0a:af:74:9d:fd:ed:6c:69:15:51:42:b2:99:
f7:c4:ca:42:6a:40:a7:6b:7a:e2:fc:6f:89:ec:16:57:22:87:
19:06:62:77:2e:2c:50:c0:bf:65:3b:87:03:b2:c1:7c:2c:06:
78:eb:be:80:6b:20:13:3e:31:b9:82:6b:41:dc:03:41:c2:9a:
d5:fd:35:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SKAMWrfsNuRpuC/hfIJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjc5NDJjZTBhYTBmZDI3YTBjZGNiNzMxMzRkZWZkY2M2
MTQ0ZTEwHhcNMjUwNTEwMTMwMDQzWhcNMjUwNTExMTMwMDQzWjAzMTEwLwYDVQQD
EyhlM2QxZmJjYWE5ZTc5MDhmYjM5ZWFlOGUxMTUwNTFhNmU2NjI0MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FgSPhf1tVh2oII4CIAS5gpkq3Zz
takWPLJlZJ/EzrJ8W7kUmS+IIfaBlReaPflYvwjmhaDTea31+Uqv6iQXU6CGHesK
9nAUXxFWfI97t85mAhZQ2ziQz+KDo3DNSRNLtXlkd7+AhE5Rb4wpnBMxNLAc9SBv
sO4JiTbcBkubyl8+5HddCWRRGx0z7eFIetSEWQWjowjjqzKiIRLgN3ZDtdfNjVom
5TiekZcPHpWsYdHGfoJ8cznquRJQy82vi6wpxVQ8CuPQivhTFkml4vHnUTFF0PKB
TbF5i8FQF6HGfpR3fFI/EvX82fMyoBy8zkA7nIFygy7rj9fHR3fOpOV+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPR+8qp55CPs56ujhFQUabmYkHrMB8GA1UdIwQY
MBaAFH1nlCzgqg/SegzctzE03v3MYUThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldlVUxPQ3FEOUo2RE55M01UVGVfY3hoUk9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kM2UzOTMtZDhlOC00OTA2LTkxNzct
MWUwYjFmN2NhNmNmLzEvZldlVUxPQ3FEOUo2RE55M01UVGVfY3hoUk9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kM2UzOTMtZDhlOC00OTA2LTkxNzctMWUwYjFmN2NhNmNm
LzEvZldlVUxPQ3FEOUo2RE55M01UVGVfY3hoUk9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXz3YhcE
Hi0w2l8p7UKvo1QUOGYRl2XG5zj2YLhd8hqXYGVYolejsq7jtxVjAvGPyS6ssjZo
FQWHndwyLiYUPqVcoMzUTHw4bESjt4uXRaxSk0+zh5AYxEqbPQvyjwqrX8EG+ldy
uKTcsmtG72ofoEIauDhUFmaxD+m1iDc9LJKWtUNPJyy+0sTiTNzhP/EJMlrvJ9kf
RT1ndFUnCk6haEo3XT9peUvqUxjVwC0ABaBVlSWAbYYOrowKr3Sd/e1saRVRQrKZ
98TKQmpAp2t64vxviewWVyKHGQZidy4sUMC/ZTuHA7LBfCwGeOu+gGsgEz4xuYJr
QdwDQcKa1f01mw==
-----END CERTIFICATE-----
Generated at Sat May 10 16:50:24 2025 by rpki-client