Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier: jmtReHQ/aoXDUt2r0kslCHjayfwThnlK8km/3Q27SZg=
Subject key identifier: 6F:2C:76:B8:E6:90:AE:E5:62:3E:E9:36:BE:BD:61:77:5C:97:5B:CC
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 0196C3B94A2EE2C575F73ABB1FA284155B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number: 0965
Signing time: Mon 12 May 2025 09:00:22 +0000
Manifest this update: Mon 12 May 2025 09:00:22 +0000
Manifest next update: Tue 13 May 2025 09:00:22 +0000
Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: rliSCpUcS3+Y5D8x+qZhMfLfv8tzot03M0rPsZ2kQN4=)
2: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (hash: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:4a:2e:e2:c5:75:f7:3a:bb:1f:a2:84:15:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: May 12 09:00:22 2025 GMT
Not After : May 13 09:00:22 2025 GMT
Subject: CN=6f2c76b8e690aee5623ee936bebd61775c975bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:48:2b:05:e6:c4:54:02:49:0f:f5:c6:2a:
6a:00:90:4f:a1:da:56:88:d1:24:f9:01:4f:fc:bf:
3b:76:4b:a2:5a:ea:5f:9d:a4:14:1a:d3:4b:ce:74:
2d:ad:c7:2c:63:7e:02:80:d0:cf:92:bf:9c:3e:ed:
91:d8:3d:c8:1f:ee:be:47:83:0e:11:e3:bb:ff:8c:
09:e0:da:ec:e2:a2:96:0c:ac:b8:bb:a5:31:67:71:
02:bf:2d:b3:a3:09:31:35:b6:79:72:4b:b2:4f:46:
e5:b9:1b:65:7e:51:3b:a1:44:c3:81:2b:78:eb:85:
30:bf:49:ab:1e:7e:1b:9e:e5:79:8d:12:1a:fe:9a:
3d:f2:cd:fd:a4:1f:13:0b:67:09:26:f0:31:e3:06:
a7:94:92:9b:48:46:db:09:6c:dc:a4:25:57:67:86:
60:80:ac:7b:18:4f:1c:2e:bc:47:19:9a:2f:83:ec:
ea:8b:5e:b7:ff:42:e6:48:35:06:b3:0d:6a:31:4a:
1a:61:94:47:09:75:30:52:69:07:0d:d6:ba:67:54:
e9:3c:95:0d:59:63:10:bb:8e:4c:2e:48:f7:c1:87:
c8:4b:76:82:0f:71:9c:a8:4d:21:37:a0:b1:34:19:
05:7e:66:72:78:bf:e4:9d:01:87:32:e1:0d:f8:0d:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:76:B8:E6:90:AE:E5:62:3E:E9:36:BE:BD:61:77:5C:97:5B:CC
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c7:52:cb:69:48:b2:f6:73:ad:87:3f:6d:7b:f3:dc:2a:cf:
5e:00:87:20:de:54:07:3e:a5:cc:c1:fb:2f:f7:5e:e3:65:b1:
03:5b:70:e1:6e:19:33:ba:f6:f3:d7:3d:fa:59:5c:06:95:4b:
ab:35:d8:d1:7b:20:65:e4:33:38:61:e3:a8:1c:2c:f8:71:92:
9a:da:27:49:c7:7d:08:20:3e:79:65:25:05:6b:32:07:6b:8f:
20:18:67:65:00:83:43:73:1d:1a:e4:86:eb:36:0b:61:77:54:
11:57:f8:07:85:5b:09:dd:30:c8:58:ad:fe:0f:b7:c8:2d:f3:
57:04:e1:33:01:63:d4:ac:39:fd:59:05:c1:a3:7d:c6:63:18:
92:3b:52:0f:b7:fe:57:95:d0:db:9c:11:17:35:3c:34:f1:a5:
37:f3:e8:a7:74:3c:65:ea:17:17:45:9f:d8:d6:92:e5:8b:ed:
72:1c:77:f1:d9:31:f3:51:d6:be:d9:0e:ba:1b:92:9f:32:dd:
9c:55:11:a9:c5:38:51:8e:90:bb:5c:e7:2d:2c:60:ca:07:7b:
64:47:55:27:82:85:65:ee:ed:a1:76:b1:ef:a7:7a:92:b4:41:
58:cd:3e:3b:b4:61:77:a8:83:c8:a6:c8:32:1b:d4:c7:1f:1b:
57:02:5d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDuUou4sV19zq7H6KEFVsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNjdhODQwZTQxYWM2NmY4ZjM1OWNjYmQ2NTM1NGM5MTcw
NDJiYmYwHhcNMjUwNTEyMDkwMDIyWhcNMjUwNTEzMDkwMDIyWjAzMTEwLwYDVQQD
Eyg2ZjJjNzZiOGU2OTBhZWU1NjIzZWU5MzZiZWJkNjE3NzVjOTc1YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SdIKwXmxFQCSQ/1xipqAJBPodpW
iNEk+QFP/L87dkuiWupfnaQUGtNLznQtrccsY34CgNDPkr+cPu2R2D3IH+6+R4MO
EeO7/4wJ4Nrs4qKWDKy4u6UxZ3ECvy2zowkxNbZ5ckuyT0bluRtlflE7oUTDgSt4
64Uwv0mrHn4bnuV5jRIa/po98s39pB8TC2cJJvAx4wanlJKbSEbbCWzcpCVXZ4Zg
gKx7GE8cLrxHGZovg+zqi163/0LmSDUGsw1qMUoaYZRHCXUwUmkHDda6Z1TpPJUN
WWMQu45MLkj3wYfIS3aCD3GcqE0hN6CxNBkFfmZyeL/knQGHMuEN+A2uLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8sdrjmkK7lYj7pNr69YXdcl1vMMB8GA1UdIwQY
MBaAFOtnqEDkGsZvjzWcy9ZTVMkXBCu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMt
MzRmY2M0MTg3MTQ0LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMtMzRmY2M0MTg3MTQ0
LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMdSy2lI
svZzrYc/bXvz3CrPXgCHIN5UBz6lzMH7L/de42WxA1tw4W4ZM7r289c9+llcBpVL
qzXY0XsgZeQzOGHjqBws+HGSmtonScd9CCA+eWUlBWsyB2uPIBhnZQCDQ3MdGuSG
6zYLYXdUEVf4B4VbCd0wyFit/g+3yC3zVwThMwFj1Kw5/VkFwaN9xmMYkjtSD7f+
V5XQ25wRFzU8NPGlN/Pop3Q8ZeoXF0Wf2NaS5Yvtchx38dkx81HWvtkOuhuSnzLd
nFURqcU4UY6Qu1znLSxgygd7ZEdVJ4KFZe7toXax76d6krRBWM0+O7Rhd6iDyKbI
MhvUxx8bVwJdQQ==
-----END CERTIFICATE-----
Generated at Mon May 12 11:08:50 2025 by rpki-client