Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: K7RqwQSypaKMPys5xQ2k5bZf32OZ+i2oNNIeubA1S08=
Subject key identifier: 0A:58:E5:4A:8B:4B:70:3C:0E:BA:68:4A:67:B9:CB:6E:5C:62:02:B8
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 0196C314DDC14F6E8D29CF4B9BA4CAF05863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 0399
Signing time: Mon 12 May 2025 06:00:46 +0000
Manifest this update: Mon 12 May 2025 06:00:46 +0000
Manifest next update: Tue 13 May 2025 06:00:46 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: GnyGlsFeGZc+CeA8vGgfos3fQWBXQD/tjbLZGg1Qkpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:dd:c1:4f:6e:8d:29:cf:4b:9b:a4:ca:f0:58:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: May 12 06:00:46 2025 GMT
Not After : May 13 06:00:46 2025 GMT
Subject: CN=0a58e54a8b4b703c0eba684a67b9cb6e5c6202b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:a7:de:f2:59:6d:b8:c7:0a:e2:1a:7a:cc:
e3:a4:b9:9d:35:1e:c3:e8:7a:5c:43:82:a0:0d:55:
a8:a6:0e:e1:eb:d0:48:bb:d1:66:30:0c:75:e2:3b:
65:b2:2e:16:86:29:03:36:21:f5:d2:db:da:08:fd:
09:cd:53:56:12:c3:eb:6c:4f:57:83:8b:0f:aa:1f:
74:95:8b:45:b6:7e:94:b7:39:51:27:98:20:5e:a5:
d6:43:62:45:48:cf:1b:5b:82:c1:90:c8:c0:2a:5d:
5f:8a:0c:83:93:6e:53:11:5e:c7:e7:9c:73:d5:6d:
cb:67:f1:e0:01:0a:b1:1f:b0:83:33:b4:52:16:19:
58:dd:6a:df:41:54:ef:f0:92:fb:09:3f:da:37:c0:
61:1a:56:ed:85:68:bb:f4:56:05:f7:94:9b:07:db:
e9:4d:ca:7e:e5:a5:e7:83:7a:31:c6:9b:1b:66:35:
ca:0a:99:ab:25:83:4d:58:58:90:52:05:1c:da:a3:
f3:7c:18:cb:ab:5f:0f:40:2e:68:fb:ad:d6:bd:58:
9b:b8:c3:34:1c:4d:6d:4e:bd:b1:4f:a9:1c:c5:d9:
be:19:30:80:86:36:13:a5:89:01:56:3e:6b:5e:95:
74:85:79:c6:86:30:fd:6e:01:e2:77:57:e4:7a:40:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:E5:4A:8B:4B:70:3C:0E:BA:68:4A:67:B9:CB:6E:5C:62:02:B8
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8f:7e:93:34:4b:a6:a1:81:b6:f6:dc:56:6b:d5:dd:d3:4e:
98:aa:9e:dc:a4:a8:e8:16:bf:6d:99:b6:18:6c:a1:3f:1d:11:
9e:34:2c:39:27:81:69:86:09:bc:8e:b5:4b:5d:c7:ea:ca:83:
b4:0e:5d:d3:be:e4:3d:b5:7b:58:53:47:64:ed:85:d3:e8:99:
5a:d3:34:34:9d:2e:f5:0d:59:df:aa:50:8c:c5:54:5a:fc:f8:
e2:2e:e9:13:3e:bf:05:af:9d:dc:43:a8:74:1e:35:73:7a:61:
01:62:f3:01:93:2c:f7:da:11:04:19:91:99:a4:b0:0b:4b:d8:
38:01:b4:32:5f:fb:55:c6:5e:ca:3d:34:e3:d7:b5:10:12:b4:
15:80:a8:84:dd:7f:10:18:b9:77:f8:bc:c2:f5:f2:16:38:68:
01:06:98:d4:20:4c:0f:f8:10:ba:57:30:d2:d7:e7:46:74:97:
17:d8:b5:a7:9e:ea:20:35:e9:9f:b0:9d:61:e5:db:e6:c6:1c:
09:8d:a5:b2:25:89:a2:78:21:0e:40:df:f7:05:96:f0:de:e4:
d8:a5:03:b0:96:5e:95:4c:f6:c3:ae:52:28:da:1d:4c:77:5a:
db:66:15:66:d6:9f:0c:a0:ce:8c:39:e8:3d:89:fb:e3:d0:d6:
cf:a0:12:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDFN3BT26NKc9Lm6TK8FhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmQ0MjJhMWRkZWUwMTZlZTVmNWEyMzEwMWI5MzA0M2Fm
NzY0ZWQwHhcNMjUwNTEyMDYwMDQ2WhcNMjUwNTEzMDYwMDQ2WjAzMTEwLwYDVQQD
EygwYTU4ZTU0YThiNGI3MDNjMGViYTY4NGE2N2I5Y2I2ZTVjNjIwMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvCn3vJZbbjHCuIaeszjpLmdNR7D
6HpcQ4KgDVWopg7h69BIu9FmMAx14jtlsi4WhikDNiH10tvaCP0JzVNWEsPrbE9X
g4sPqh90lYtFtn6UtzlRJ5ggXqXWQ2JFSM8bW4LBkMjAKl1figyDk25TEV7H55xz
1W3LZ/HgAQqxH7CDM7RSFhlY3WrfQVTv8JL7CT/aN8BhGlbthWi79FYF95SbB9vp
Tcp+5aXng3oxxpsbZjXKCpmrJYNNWFiQUgUc2qPzfBjLq18PQC5o+63WvVibuMM0
HE1tTr2xT6kcxdm+GTCAhjYTpYkBVj5rXpV0hXnGhjD9bgHid1fkekCaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApY5UqLS3A8DrpoSme5y25cYgK4MB8GA1UdIwQY
MBaAFHj9Qiod3uAW7l9aIxAbkwQ692TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MDJhZTctMDg1OC00NDQ4LTgwNzkt
MmViMThiODg0MWU3LzEvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85MDJhZTctMDg1OC00NDQ4LTgwNzktMmViMThiODg0MWU3
LzEvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApI9+kzRL
pqGBtvbcVmvV3dNOmKqe3KSo6Ba/bZm2GGyhPx0RnjQsOSeBaYYJvI61S13H6sqD
tA5d077kPbV7WFNHZO2F0+iZWtM0NJ0u9Q1Z36pQjMVUWvz44i7pEz6/Ba+d3EOo
dB41c3phAWLzAZMs99oRBBmRmaSwC0vYOAG0Ml/7VcZeyj0049e1EBK0FYCohN1/
EBi5d/i8wvXyFjhoAQaY1CBMD/gQulcw0tfnRnSXF9i1p57qIDXpn7CdYeXb5sYc
CY2lsiWJonghDkDf9wWW8N7k2KUDsJZelUz2w65SKNodTHda22YVZtafDKDOjDno
PYn749DWz6ASfw==
-----END CERTIFICATE-----
Generated at Mon May 12 11:36:49 2025 by rpki-client