Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
File: EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json)
Hash identifier: Iw0geVrqbY0XB2LAfjDtvnpBTpkNYqcHpv+Prlcy+es=
Subject key identifier: 52:C2:7E:CE:EE:F1:02:D2:08:45:85:9C:8A:DF:4E:0B:D4:E9:50:BB
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial: 0196C04A74A1294B7036C88BE31B38FC9D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 17:00:27 +0000
Manifest this update: Sun 11 May 2025 17:00:27 +0000
Manifest next update: Mon 12 May 2025 17:00:27 +0000
Files and hashes: 1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: RSrjrU89+ZzxoZA0RZ3sy3Lhof4/WDzGx1D656yFSQA=)
2: Pjo3RDAsopUeM78b85_QPN1-7VI.roa (hash: I/2zLP79cKW8Js/ksFDd8QdVZcG00HVdVbP2kBa1g/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:74:a1:29:4b:70:36:c8:8b:e3:1b:38:fc:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Validity
Not Before: May 11 17:00:27 2025 GMT
Not After : May 12 17:00:27 2025 GMT
Subject: CN=52c27eceeef102d20845859c8adf4e0bd4e950bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:c0:a1:31:09:a4:eb:7e:7a:86:98:2d:64:
69:b9:ce:6b:86:e1:67:70:ef:60:c0:2d:83:d7:59:
12:20:f9:e5:86:10:bc:4a:1f:33:b0:8a:d2:54:5a:
94:23:07:12:dd:1a:d0:19:b6:9e:e4:90:e2:b5:37:
b6:b8:65:e0:be:d8:aa:46:d2:f6:01:de:3a:54:3d:
02:79:10:d6:f6:68:b7:8e:63:fd:71:36:55:da:fb:
b5:d0:bb:59:91:2d:f5:21:ae:73:75:72:dd:8d:55:
c2:96:90:ce:f3:91:4c:c4:d3:13:b2:74:c3:15:e8:
53:ac:3f:5d:91:8b:37:c3:52:35:b8:a9:57:68:9f:
88:2e:06:22:8f:af:d8:08:de:05:a5:57:67:59:2e:
a2:a9:1b:33:c8:fd:83:f3:ea:5d:4d:5e:bb:58:81:
81:f2:75:2c:17:d9:82:d9:92:33:b8:5d:5d:aa:e5:
ed:b9:49:61:e8:70:78:3c:7e:97:97:95:b5:d1:f4:
45:aa:2d:c3:e9:68:cb:1c:41:44:41:e1:c7:13:fc:
4b:a5:5f:9e:a9:d5:36:7b:7d:d0:63:bb:5f:e1:4e:
20:78:b0:2b:86:29:14:fe:b8:23:00:46:c1:a4:4b:
57:de:d2:82:44:3b:1f:ad:0c:f1:e6:4d:f9:00:e8:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C2:7E:CE:EE:F1:02:D2:08:45:85:9C:8A:DF:4E:0B:D4:E9:50:BB
X509v3 Authority Key Identifier:
keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:4e:f5:a6:cc:b0:56:b2:91:d3:38:49:e1:93:9b:aa:59:
d0:bf:81:aa:e9:80:6e:f2:f5:6b:82:50:f7:d2:72:58:a5:90:
4b:76:db:6a:9d:e1:2f:9e:41:d8:52:5a:fd:94:49:5f:c6:d5:
07:39:a4:0e:9a:6e:f5:ca:6e:a6:b5:43:c6:47:a0:3a:5c:87:
4d:4f:2e:1f:48:61:9a:4a:65:f9:c3:d4:0b:73:cd:e4:30:88:
11:74:7e:00:34:e0:89:4e:79:2f:53:22:c1:69:62:69:be:1c:
c0:28:6d:d0:35:c8:32:d7:2e:bb:b0:d3:a6:a0:61:d4:77:6f:
0f:7d:8f:68:c1:f4:17:c1:04:30:fe:9d:51:2f:4e:56:b2:54:
86:e0:b4:31:6d:0b:3e:89:f3:a8:02:8b:45:25:d3:ab:b4:b8:
92:3c:ec:84:90:f7:31:7c:0a:61:ae:f8:fd:1e:1d:49:57:b2:
f4:a6:d7:35:71:af:e0:17:ac:c7:1f:b5:99:71:67:17:29:53:
6d:13:08:8f:8a:b4:84:12:fa:28:8e:ec:5a:ae:7c:fd:b4:ba:
69:4f:16:d2:3d:19:48:de:70:74:2a:a3:dd:72:b5:04:09:68:
0b:ad:c7:e5:b5:04:05:df:13:ae:f8:12:f7:68:41:dc:d6:c3:
6b:88:56:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASnShKUtwNsiL4xs4/J0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDBjMGQ3YTU5YWMyZjU5ODA0ZTdjMzUxNWYxNGNkMmZk
NTBkOTcwHhcNMjUwNTExMTcwMDI3WhcNMjUwNTEyMTcwMDI3WjAzMTEwLwYDVQQD
Eyg1MmMyN2VjZWVlZjEwMmQyMDg0NTg1OWM4YWRmNGUwYmQ0ZTk1MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt47AoTEJpOt+eoaYLWRpuc5rhuFn
cO9gwC2D11kSIPnlhhC8Sh8zsIrSVFqUIwcS3RrQGbae5JDitTe2uGXgvtiqRtL2
Ad46VD0CeRDW9mi3jmP9cTZV2vu10LtZkS31Ia5zdXLdjVXClpDO85FMxNMTsnTD
FehTrD9dkYs3w1I1uKlXaJ+ILgYij6/YCN4FpVdnWS6iqRszyP2D8+pdTV67WIGB
8nUsF9mC2ZIzuF1dquXtuUlh6HB4PH6Xl5W10fRFqi3D6WjLHEFEQeHHE/xLpV+e
qdU2e33QY7tf4U4geLArhikU/rgjAEbBpEtX3tKCRDsfrQzx5k35AOhLLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLCfs7u8QLSCEWFnIrfTgvU6VC7MB8GA1UdIwQY
MBaAFBAAwNelmsL1mATnw1FfFM0v1Q2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2It
ZWEzODQyMGIyNTc5LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2ItZWEzODQyMGIyNTc5
LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhVO9abM
sFaykdM4SeGTm6pZ0L+BqumAbvL1a4JQ99JyWKWQS3bbap3hL55B2FJa/ZRJX8bV
BzmkDppu9cpuprVDxkegOlyHTU8uH0hhmkpl+cPUC3PN5DCIEXR+ADTgiU55L1Mi
wWliab4cwCht0DXIMtcuu7DTpqBh1HdvD32PaMH0F8EEMP6dUS9OVrJUhuC0MW0L
PonzqAKLRSXTq7S4kjzshJD3MXwKYa74/R4dSVey9KbXNXGv4Besxx+1mXFnFylT
bRMIj4q0hBL6KI7sWq58/bS6aU8W0j0ZSN5wdCqj3XK1BAloC63H5bUEBd8TrvgS
92hB3NbDa4hW4Q==
-----END CERTIFICATE-----
Generated at Sun May 11 19:14:44 2025 by rpki-client