Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
File: De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json)
Hash identifier: c7MkXojVNrnpp3DEXnmJekpOm7wTsjTXYp+5G/sFOWc=
Subject key identifier: BD:85:1B:2D:52:B5:81:BB:5F:3F:7D:74:FC:71:09:97:AA:FF:C1:E5
Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
Certificate issuer: /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Certificate serial: 0196C9BBA067A447B65EAF5FF3A28E9F1221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
Manifest number: 107C
Signing time: Tue 13 May 2025 13:00:38 +0000
Manifest this update: Tue 13 May 2025 13:00:38 +0000
Manifest next update: Wed 14 May 2025 13:00:38 +0000
Files and hashes: 1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: L3s83FLI3Yp3T7mu0NOa6lnIj9UG14+pgc/jMIF0eGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:a0:67:a4:47:b6:5e:af:5f:f3:a2:8e:9f:12:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Validity
Not Before: May 13 13:00:38 2025 GMT
Not After : May 14 13:00:38 2025 GMT
Subject: CN=bd851b2d52b581bb5f3f7d74fc710997aaffc1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:9f:01:2d:e7:51:81:37:a7:16:50:8d:94:
85:c7:0c:55:8e:4f:b0:ea:37:21:53:09:ff:ca:cb:
dc:20:2d:c5:2e:a3:ad:cc:4f:17:81:83:ec:7b:2d:
42:bc:e8:80:04:3d:c5:1e:74:65:a4:2a:0f:ca:d3:
bb:4a:88:9f:f4:23:11:4b:3e:9a:19:f5:50:b3:23:
b5:f0:c9:74:76:84:a5:b7:5a:66:89:8c:85:bd:fa:
96:2e:4a:ad:13:a4:88:87:ab:96:d9:2d:11:b2:c5:
00:6e:1b:73:f1:d1:fc:78:ba:05:db:14:69:21:6f:
3c:c9:66:61:19:fc:35:3f:82:73:b4:eb:3b:5f:5c:
fb:d2:ee:57:a2:f8:4c:54:36:8b:9f:1d:e5:10:cc:
1a:d3:cf:ad:ec:ac:83:31:04:c6:2d:30:5b:65:72:
cf:55:88:ab:b4:de:d0:86:78:cf:e8:3d:23:70:aa:
98:67:8d:50:08:bc:7b:74:aa:14:8f:18:f2:2b:f0:
7f:01:15:89:3c:40:23:13:1b:bf:04:42:e3:4d:63:
1e:14:2c:fd:9c:15:c1:08:35:38:e6:00:0c:43:a5:
23:50:ab:0d:2b:a6:83:86:f0:51:b4:7b:b9:66:e3:
ba:cb:f2:a2:29:2c:3a:c0:c0:2d:72:53:f8:50:be:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:1B:2D:52:B5:81:BB:5F:3F:7D:74:FC:71:09:97:AA:FF:C1:E5
X509v3 Authority Key Identifier:
keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:e3:5d:e6:74:f6:1c:dc:47:48:50:1e:9d:6e:f0:09:47:
64:10:d2:ac:13:68:29:36:f4:ce:5c:ec:a1:d7:4d:77:0b:2c:
8c:dc:24:53:23:b7:b2:71:03:4d:5d:a0:fb:12:99:cb:11:75:
50:b3:e8:a1:95:46:10:eb:20:fd:52:5b:b7:13:97:b5:81:8e:
67:b5:30:1f:9f:d7:82:0e:76:c3:13:4f:d5:21:49:cf:f1:d7:
0e:d5:83:7f:d0:be:dc:d5:24:cc:38:e3:d3:b4:2b:02:2c:85:
d7:05:da:f4:f1:65:6b:38:28:f0:9d:fb:58:eb:fe:73:cf:e0:
a3:c4:04:ac:b3:e5:05:e3:66:35:84:88:30:b2:57:3e:05:30:
67:aa:af:df:a8:75:d8:c8:dd:2b:af:17:69:c3:31:9f:92:f7:
a8:fe:77:d1:c7:1a:26:62:8f:1c:d1:91:bd:0e:e4:84:75:89:
c8:1f:1b:1b:39:6a:12:e9:8a:60:b2:8a:91:1d:97:bc:96:a7:
0a:69:51:1f:f5:b6:d9:57:5f:13:ef:db:df:f9:87:c4:e7:04:
05:90:b1:96:f8:b2:d9:2e:77:b9:5b:ff:2a:df:62:06:c5:aa:
71:fa:1f:5a:0a:94:82:1a:84:8d:cd:f0:85:63:ee:7f:ea:f6:
98:6f:09:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJu6BnpEe2Xq9f86KOnxIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZWY5ZWMxYzAzMDdjNjA3M2NlOGFmODNmMDk5NjhjYWI3
YWJiZWYwHhcNMjUwNTEzMTMwMDM4WhcNMjUwNTE0MTMwMDM4WjAzMTEwLwYDVQQD
EyhiZDg1MWIyZDUyYjU4MWJiNWYzZjdkNzRmYzcxMDk5N2FhZmZjMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquKfAS3nUYE3pxZQjZSFxwxVjk+w
6jchUwn/ysvcIC3FLqOtzE8XgYPsey1CvOiABD3FHnRlpCoPytO7Soif9CMRSz6a
GfVQsyO18Ml0doSlt1pmiYyFvfqWLkqtE6SIh6uW2S0RssUAbhtz8dH8eLoF2xRp
IW88yWZhGfw1P4JztOs7X1z70u5XovhMVDaLnx3lEMwa08+t7KyDMQTGLTBbZXLP
VYirtN7QhnjP6D0jcKqYZ41QCLx7dKoUjxjyK/B/ARWJPEAjExu/BELjTWMeFCz9
nBXBCDU45gAMQ6UjUKsNK6aDhvBRtHu5ZuO6y/KiKSw6wMAtclP4UL6DKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2FGy1StYG7Xz99dPxxCZeq/8HlMB8GA1UdIwQY
MBaAFA3vnsHAMHxgc86K+D8JloyrervvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAt
N2M5MzViNWQ5NzJlLzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAtN2M5MzViNWQ5NzJl
LzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjafjXeZ0
9hzcR0hQHp1u8AlHZBDSrBNoKTb0zlzsoddNdwssjNwkUyO3snEDTV2g+xKZyxF1
ULPooZVGEOsg/VJbtxOXtYGOZ7UwH5/Xgg52wxNP1SFJz/HXDtWDf9C+3NUkzDjj
07QrAiyF1wXa9PFlazgo8J37WOv+c8/go8QErLPlBeNmNYSIMLJXPgUwZ6qv36h1
2MjdK68XacMxn5L3qP530ccaJmKPHNGRvQ7khHWJyB8bGzlqEumKYLKKkR2XvJan
CmlRH/W22VdfE+/b3/mHxOcEBZCxlviy2S53uVv/Kt9iBsWqcfofWgqUghqEjc3w
hWPuf+r2mG8Jqg==
-----END CERTIFICATE-----
Generated at Tue May 13 17:19:45 2025 by rpki-client