Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: T7un9rCLjmZx3trqVLhg5HtTZ61YGnIHoMse8votZnQ=
Subject key identifier: 65:28:88:C0:E1:DF:E6:9B:9D:E6:92:59:F4:FE:54:42:56:46:B8:92
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 0196BA48C04146D0DB14402FA2E8F98A6075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 0537
Signing time: Sat 10 May 2025 13:00:52 +0000
Manifest this update: Sat 10 May 2025 13:00:52 +0000
Manifest next update: Sun 11 May 2025 13:00:52 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: njVJYHdWznoxhGP6xJkeqpGFXGUaJbOLl/dM609z59A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:c0:41:46:d0:db:14:40:2f:a2:e8:f9:8a:60:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: May 10 13:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=652888c0e1dfe69b9de69259f4fe54425646b892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:b9:1f:4c:b4:ba:ba:49:bf:9a:9b:6a:e5:
ce:e4:f6:85:83:7f:ba:5f:e5:a6:15:bc:de:f5:be:
ad:c3:58:72:05:9c:bd:e8:6e:8a:44:e3:23:4d:8a:
01:f2:5e:f9:aa:fa:10:7b:73:95:71:26:50:af:ed:
61:8f:fb:ed:3d:61:5e:6c:e0:2f:5f:7f:e8:7b:25:
87:4a:03:9f:ce:27:c0:45:be:43:c9:f0:e8:6a:71:
ba:6e:b2:1c:99:8e:98:7d:a5:94:e4:a9:62:8e:e5:
4b:e8:e8:d0:fd:69:4d:58:1d:12:47:96:5f:9f:77:
da:2b:c4:36:ee:65:77:1e:02:b5:79:06:07:46:4d:
03:34:af:a6:67:f8:11:37:65:c7:af:b4:9b:12:76:
8e:fb:2c:a9:48:75:42:e5:6b:b6:72:ea:2c:aa:22:
db:91:df:db:98:e4:47:b0:49:95:32:c7:be:e6:f4:
40:ea:3f:1c:b1:b8:cc:c4:fe:38:92:10:8d:5b:e0:
02:95:46:69:b6:80:76:04:02:0d:28:31:95:8d:f5:
dc:cf:82:6f:06:f7:9d:36:dd:ea:7d:3c:1a:96:26:
9e:77:f3:d4:85:a5:8e:fd:7e:48:0a:81:86:9d:7e:
68:e7:32:0a:5b:14:22:b0:35:47:8a:c9:b6:da:cc:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:28:88:C0:E1:DF:E6:9B:9D:E6:92:59:F4:FE:54:42:56:46:B8:92
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c9:c0:26:fd:ad:47:58:88:88:b5:dc:62:19:c7:84:df:22:
bc:14:3e:b0:ba:90:b3:2b:9c:8f:2d:55:a4:9e:b8:58:38:ab:
d2:09:f5:e5:6c:14:f8:8d:ab:4f:eb:41:1a:7f:02:ee:3d:f8:
ce:46:49:23:f7:df:10:4c:01:3e:66:f8:c7:78:1b:ea:e6:49:
3b:d5:61:93:56:8e:b7:71:f4:3f:5a:4b:17:49:69:3f:df:4e:
63:81:49:71:c0:99:ef:8b:a8:19:3e:cb:f2:cc:fc:60:dd:a5:
40:b2:74:15:36:7c:b0:2c:4f:97:52:cd:58:33:45:1b:50:69:
dd:27:c6:81:a7:c6:50:6a:07:e5:e7:5a:98:26:5f:1e:b8:02:
e6:c2:d3:18:39:06:df:42:e0:cd:c9:9d:a3:b8:da:38:af:06:
fc:68:00:52:92:fa:47:53:58:37:55:81:b4:87:17:76:84:fb:
ca:eb:e2:c2:fe:16:db:96:79:f0:92:4a:03:b2:55:c7:83:19:
0d:b3:a4:e1:79:e9:aa:62:34:3f:b4:50:28:f5:10:bf:b4:a9:
ee:5f:ce:c8:ec:c6:ca:b0:c8:a8:30:44:c8:d8:15:b4:f2:b9:
b6:f0:86:aa:07:5e:be:1e:0c:d6:82:01:77:2b:6d:90:6d:cf:
4c:91:15:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SMBBRtDbFEAvouj5imB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWQ4MzE5ZGVkMTVkNWYwYjZhYjQ0MTAwOWRlMTliMTlk
MTUyOWIwHhcNMjUwNTEwMTMwMDUyWhcNMjUwNTExMTMwMDUyWjAzMTEwLwYDVQQD
Eyg2NTI4ODhjMGUxZGZlNjliOWRlNjkyNTlmNGZlNTQ0MjU2NDZiODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskm5H0y0urpJv5qbauXO5PaFg3+6
X+WmFbze9b6tw1hyBZy96G6KROMjTYoB8l75qvoQe3OVcSZQr+1hj/vtPWFebOAv
X3/oeyWHSgOfzifARb5DyfDoanG6brIcmY6YfaWU5KlijuVL6OjQ/WlNWB0SR5Zf
n3faK8Q27mV3HgK1eQYHRk0DNK+mZ/gRN2XHr7SbEnaO+yypSHVC5Wu2cuosqiLb
kd/bmORHsEmVMse+5vRA6j8csbjMxP44khCNW+AClUZptoB2BAINKDGVjfXcz4Jv
BvedNt3qfTwaliaed/PUhaWO/X5ICoGGnX5o5zIKWxQisDVHism22sxnJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUoiMDh3+abneaSWfT+VEJWRriSMB8GA1UdIwQY
MBaAFOztgxne0V1fC2q0QQCd4ZsZ0VKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTct
NzA2OWY0MzgyY2FiLzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTctNzA2OWY0MzgyY2Fi
LzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsnAJv2t
R1iIiLXcYhnHhN8ivBQ+sLqQsyucjy1VpJ64WDir0gn15WwU+I2rT+tBGn8C7j34
zkZJI/ffEEwBPmb4x3gb6uZJO9Vhk1aOt3H0P1pLF0lpP99OY4FJccCZ74uoGT7L
8sz8YN2lQLJ0FTZ8sCxPl1LNWDNFG1Bp3SfGgafGUGoH5edamCZfHrgC5sLTGDkG
30Lgzcmdo7jaOK8G/GgAUpL6R1NYN1WBtIcXdoT7yuviwv4W25Z58JJKA7JVx4MZ
DbOk4XnpqmI0P7RQKPUQv7Sp7l/OyOzGyrDIqDBEyNgVtPK5tvCGqgdevh4M1oIB
dyttkG3PTJEV7Q==
-----END CERTIFICATE-----
Generated at Sat May 10 22:08:33 2025 by rpki-client