Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File: eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier: K4wKAJD5VePLMdRXHSGgECKdPTEmYUY7P2fycfUCXm4=
Subject key identifier: 3B:27:86:28:44:08:C1:89:C7:7B:CA:06:9C:3D:3C:69:97:41:63:43
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 0196C615AD4F07CC5D10783DE8FBE9519A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 20:00:31 +0000
Manifest this update: Mon 12 May 2025 20:00:31 +0000
Manifest next update: Tue 13 May 2025 20:00:31 +0000
Files and hashes: 1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: YQytE47AMvuLkzd1hFxTmDdw7NRiEDKDANQckcfO3HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:ad:4f:07:cc:5d:10:78:3d:e8:fb:e9:51:9a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: May 12 20:00:31 2025 GMT
Not After : May 13 20:00:31 2025 GMT
Subject: CN=3b2786284408c189c77bca069c3d3c6997416343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:40:01:1d:59:01:4d:ea:5e:50:cf:d8:d9:
7b:19:69:bf:6f:dc:d5:76:0b:0d:79:1a:53:e2:b6:
10:bb:78:22:14:de:eb:53:55:49:d9:10:9c:92:9b:
0d:40:9b:67:77:b2:d4:45:8c:5b:29:d6:48:58:89:
76:56:ef:91:dc:be:eb:25:29:06:14:ca:ab:33:9d:
15:4c:40:6f:35:b1:49:69:f0:d0:2d:50:22:7d:fc:
44:51:01:ab:6b:4e:75:c9:70:f7:f4:a8:98:9e:ca:
11:c4:79:2d:10:3e:1e:35:60:0a:7d:e7:13:ca:19:
2b:65:59:bf:28:0c:04:16:67:22:5e:f9:27:92:ba:
5a:66:8a:69:93:ee:83:94:e7:87:3e:55:43:ba:1f:
6c:16:58:55:5a:91:09:88:65:fb:0e:72:32:00:11:
37:3d:63:24:f3:c0:f9:e4:43:cf:7d:f7:5d:42:f9:
f2:d0:e7:c2:19:37:d0:23:2b:16:63:57:53:be:3d:
39:13:45:65:7c:37:66:78:63:a0:0f:31:09:81:61:
58:e9:b4:20:1b:c2:c3:1a:75:9e:34:43:ea:a0:6d:
9a:da:7a:4f:f4:e9:b7:00:aa:44:80:d1:c8:37:b9:
38:2f:16:42:9a:10:12:e0:1a:52:31:ea:88:d9:b0:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:86:28:44:08:C1:89:C7:7B:CA:06:9C:3D:3C:69:97:41:63:43
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:10:a9:14:d8:6b:08:8f:46:6e:41:ba:21:4c:31:70:0d:
e5:a8:6f:0d:06:78:ab:ff:8a:99:92:1a:8b:87:4c:a0:54:58:
9f:91:83:8c:c1:bf:6e:27:32:dd:7f:e8:93:a4:19:04:d5:0d:
0c:24:99:a0:d8:51:c4:50:d9:ef:53:be:db:c4:3c:07:44:bf:
fb:23:b8:b5:a2:97:01:a1:3d:de:43:98:47:c6:d9:d8:ea:42:
a1:da:32:a0:6f:6c:4d:f6:7e:52:d9:bc:00:ff:16:8a:ba:f5:
a2:6a:7a:38:af:b8:c0:32:dc:de:83:24:af:99:9a:58:3f:97:
83:7f:d2:14:89:89:e2:92:e7:b1:26:be:b5:77:8b:c8:8a:e1:
02:d7:29:0b:a6:0e:f4:ad:08:cf:97:6d:4a:cc:f5:66:d9:74:
ff:04:8e:09:1c:14:8b:69:9b:b3:87:f4:62:c0:11:37:75:e6:
b7:9d:78:61:51:fa:8f:b8:ab:ce:be:46:e3:bc:d0:55:bd:d9:
39:a4:1c:2b:c6:f3:d9:f1:5f:a7:c5:2a:7a:1d:4a:67:f3:bb:
f6:21:c0:f4:52:ba:9c:02:62:46:64:b6:b2:c2:1a:ec:2b:f0:
cf:e1:e8:35:52:c9:83:30:b0:24:9e:60:a3:e3:6e:1c:12:4e:
2a:44:5b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFa1PB8xdEHg96PvpUZqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NmE3N2VlNTJkY2VkNTI3Mzg5M2E3MWI5ZGJjYTNjNmU5
NjQ5NWYwHhcNMjUwNTEyMjAwMDMxWhcNMjUwNTEzMjAwMDMxWjAzMTEwLwYDVQQD
EygzYjI3ODYyODQ0MDhjMTg5Yzc3YmNhMDY5YzNkM2M2OTk3NDE2MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYBAAR1ZAU3qXlDP2Nl7GWm/b9zV
dgsNeRpT4rYQu3giFN7rU1VJ2RCckpsNQJtnd7LURYxbKdZIWIl2Vu+R3L7rJSkG
FMqrM50VTEBvNbFJafDQLVAiffxEUQGra051yXD39KiYnsoRxHktED4eNWAKfecT
yhkrZVm/KAwEFmciXvknkrpaZoppk+6DlOeHPlVDuh9sFlhVWpEJiGX7DnIyABE3
PWMk88D55EPPffddQvny0OfCGTfQIysWY1dTvj05E0VlfDdmeGOgDzEJgWFY6bQg
G8LDGnWeNEPqoG2a2npP9Om3AKpEgNHIN7k4LxZCmhAS4BpSMeqI2bAYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsnhihECMGJx3vKBpw9PGmXQWNDMB8GA1UdIwQY
MBaAFHlqd+5S3O1Sc4k6cbnbyjxulklfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgt
M2YzMGNhMDg2ODcyLzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgtM2YzMGNhMDg2ODcy
LzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxYQqRTY
awiPRm5BuiFMMXAN5ahvDQZ4q/+KmZIai4dMoFRYn5GDjMG/bicy3X/ok6QZBNUN
DCSZoNhRxFDZ71O+28Q8B0S/+yO4taKXAaE93kOYR8bZ2OpCodoyoG9sTfZ+Utm8
AP8Wirr1omp6OK+4wDLc3oMkr5maWD+Xg3/SFImJ4pLnsSa+tXeLyIrhAtcpC6YO
9K0Iz5dtSsz1Ztl0/wSOCRwUi2mbs4f0YsARN3Xmt514YVH6j7irzr5G47zQVb3Z
OaQcK8bz2fFfp8Uqeh1KZ/O79iHA9FK6nAJiRmS2ssIa7Cvwz+HoNVLJgzCwJJ5g
o+NuHBJOKkRbow==
-----END CERTIFICATE-----
Generated at Tue May 13 00:24:45 2025 by rpki-client