Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier: OPKbDm4mmBHfuI9Lf933HMST86Y3I0vTOF7lopL+Ghc=
Subject key identifier: 6C:AE:97:D7:24:E3:05:55:2C:AA:7F:77:A1:B9:FF:02:93:B9:56:78
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial: 0196CDCF8B36A7CECB433B3250C82A950460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number: 055D
Signing time: Wed 14 May 2025 08:00:52 +0000
Manifest this update: Wed 14 May 2025 08:00:52 +0000
Manifest next update: Thu 15 May 2025 08:00:52 +0000
Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: lTByQns5Re9NuL+r7WuEQocuAIpl5hQ86y3jF84chkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:8b:36:a7:ce:cb:43:3b:32:50:c8:2a:95:04:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Validity
Not Before: May 14 08:00:52 2025 GMT
Not After : May 15 08:00:52 2025 GMT
Subject: CN=6cae97d724e305552caa7f77a1b9ff0293b95678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:f7:d2:30:21:ae:14:9f:51:33:04:13:6f:
b0:cd:fc:d8:d5:94:a1:48:db:51:10:36:62:cb:8a:
3c:45:20:55:89:b5:86:76:1e:d3:a0:9b:df:39:06:
f0:87:92:de:dd:48:f8:4c:73:64:bc:29:cf:73:e9:
a7:0e:76:29:98:c7:6c:a7:8a:42:a0:52:f0:4b:e7:
a2:9e:27:3c:58:20:78:5b:85:69:f3:eb:c5:2c:1d:
4f:82:5a:d2:58:15:37:5d:6a:a6:36:fc:6a:44:93:
b6:87:96:aa:b0:0e:9b:eb:23:4d:78:d9:77:fb:34:
40:16:cd:9c:67:3e:a3:20:60:59:60:ee:25:26:11:
89:de:7c:31:75:f6:aa:28:eb:62:5c:c0:b8:9a:7e:
c2:8e:1d:61:57:29:c5:7f:fb:f7:15:13:38:c6:77:
e9:f5:9f:db:37:45:e5:65:88:66:a5:f2:be:3a:2f:
69:dd:aa:51:cc:ee:2d:49:f3:ea:f2:2c:95:42:e5:
0e:bc:72:f7:a4:01:0a:71:8a:7e:0f:7d:b2:9a:e5:
f0:ec:97:81:90:38:cd:62:f7:04:a0:85:da:be:aa:
74:64:cf:4d:f0:f8:2e:f6:31:b8:1b:1f:06:8c:60:
c6:19:56:2a:ca:f4:b9:44:9a:6a:df:0a:67:ae:84:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:97:D7:24:E3:05:55:2C:AA:7F:77:A1:B9:FF:02:93:B9:56:78
X509v3 Authority Key Identifier:
keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:44:4c:6b:ca:17:7b:ba:06:c4:ab:05:ac:36:c3:a9:ab:
02:b3:c2:bf:10:fa:99:1f:44:98:bd:5c:8d:a0:b6:fc:b1:9d:
48:7e:79:33:de:04:04:45:c5:da:e6:0c:e3:64:fd:3e:1b:a0:
63:0b:9f:5d:b8:bf:c2:22:bc:4c:ad:37:22:2c:b9:0f:59:08:
61:08:dd:8e:ef:d2:41:d4:86:12:7b:b6:48:78:2d:92:a5:cf:
87:1f:46:fe:60:d3:36:24:fd:b4:79:ad:97:8e:3d:c2:49:eb:
5f:d2:01:d5:73:52:48:fd:83:c9:af:12:d0:6e:72:78:0a:e5:
78:24:f6:be:b7:08:37:e9:4b:31:10:a2:6d:df:3f:13:ac:7e:
d6:e3:a1:e0:39:1e:10:46:66:19:60:62:ff:49:47:99:c8:00:
88:9e:35:d7:d8:af:e2:3e:cb:1e:dc:30:1f:1a:5d:ec:b4:58:
0f:67:21:0c:e4:3e:16:e5:56:a1:23:30:50:49:f8:99:02:7d:
12:07:0e:19:0c:e1:dd:c2:f6:1a:87:96:c9:bd:ee:63:42:40:
3c:31:e6:2b:b8:49:80:14:29:e5:84:4e:dd:ad:fa:c7:6a:fe:
91:33:5a:0d:42:60:5f:0b:d9:b8:08:89:9f:a9:de:09:45:7d:
cf:db:2d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNz4s2p87LQzsyUMgqlQRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzQ3N2M1MmFhYzEwZGFjMmVkZDQxNzNhYjZkOTRkNWUy
NGRlZjUwHhcNMjUwNTE0MDgwMDUyWhcNMjUwNTE1MDgwMDUyWjAzMTEwLwYDVQQD
Eyg2Y2FlOTdkNzI0ZTMwNTU1MmNhYTdmNzdhMWI5ZmYwMjkzYjk1Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt730jAhrhSfUTMEE2+wzfzY1ZSh
SNtREDZiy4o8RSBVibWGdh7ToJvfOQbwh5Le3Uj4THNkvCnPc+mnDnYpmMdsp4pC
oFLwS+einic8WCB4W4Vp8+vFLB1PglrSWBU3XWqmNvxqRJO2h5aqsA6b6yNNeNl3
+zRAFs2cZz6jIGBZYO4lJhGJ3nwxdfaqKOtiXMC4mn7Cjh1hVynFf/v3FRM4xnfp
9Z/bN0XlZYhmpfK+Oi9p3apRzO4tSfPq8iyVQuUOvHL3pAEKcYp+D32ymuXw7JeB
kDjNYvcEoIXavqp0ZM9N8Pgu9jG4Gx8GjGDGGVYqyvS5RJpq3wpnroQ9nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyul9ck4wVVLKp/d6G5/wKTuVZ4MB8GA1UdIwQY
MBaAFHs0d8UqrBDawu3UFzq22U1eJN71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpSM3hTcXNFTnJDN2RRWE9yYlpUVjRrM3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iY2EzNDctOTgzYS00YzFhLTg4Yjgt
Y2M2OWEyMzg2ZWRjLzEvZXpSM3hTcXNFTnJDN2RRWE9yYlpUVjRrM3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iY2EzNDctOTgzYS00YzFhLTg4YjgtY2M2OWEyMzg2ZWRj
LzEvZXpSM3hTcXNFTnJDN2RRWE9yYlpUVjRrM3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtdETGvK
F3u6BsSrBaw2w6mrArPCvxD6mR9EmL1cjaC2/LGdSH55M94EBEXF2uYM42T9Phug
YwufXbi/wiK8TK03Iiy5D1kIYQjdju/SQdSGEnu2SHgtkqXPhx9G/mDTNiT9tHmt
l449wknrX9IB1XNSSP2Dya8S0G5yeArleCT2vrcIN+lLMRCibd8/E6x+1uOh4Dke
EEZmGWBi/0lHmcgAiJ4119iv4j7LHtwwHxpd7LRYD2chDOQ+FuVWoSMwUEn4mQJ9
EgcOGQzh3cL2GoeWyb3uY0JAPDHmK7hJgBQp5YRO3a36x2r+kTNaDUJgXwvZuAiJ
n6neCUV9z9stgw==
-----END CERTIFICATE-----
Generated at Wed May 14 16:01:45 2025 by rpki-client