Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier: 0lMZq3fqd7qns9lE+pYMO3Ea3cCvha4pJ0nNPTs/WN0=
Subject key identifier: BA:DB:56:43:37:78:7C:9F:96:E5:B5:73:9C:64:B9:4E:89:D7:34:D0
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 0196A4666BBEC179B0F284F89B15D3F65858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number: 1241
Signing time: Tue 06 May 2025 07:01:37 +0000
Manifest this update: Tue 06 May 2025 07:01:37 +0000
Manifest next update: Wed 07 May 2025 07:01:37 +0000
Files and hashes: 1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=)
2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=)
3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: AF8IYDvpVx1roGDyn+ZtPn6dqBBwHag5VZkE8LSwzBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:66:6b:be:c1:79:b0:f2:84:f8:9b:15:d3:f6:58:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: May 6 07:01:37 2025 GMT
Not After : May 7 07:01:37 2025 GMT
Subject: CN=badb564337787c9f96e5b5739c64b94e89d734d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:d6:c3:ac:97:d0:36:dc:54:3f:b9:25:82:
4f:01:de:54:b9:ef:69:a3:28:8d:30:1d:20:cf:c0:
92:c4:a9:dc:96:cf:da:c0:45:41:a7:cf:38:44:07:
d8:9e:c0:75:db:48:b2:33:92:a3:62:82:9e:1e:69:
49:de:80:ec:e0:93:e5:64:b3:fe:f0:13:28:6a:69:
8a:c9:28:ac:ef:6c:e5:23:93:1e:2e:3a:26:8c:84:
80:48:1e:6b:3b:1b:29:e8:d5:86:66:83:d1:c2:6e:
0f:6c:ee:35:f0:4d:5f:7b:06:70:ed:3e:10:a0:fd:
4c:9c:e2:ed:83:f7:b9:ce:3d:12:fb:71:9a:ff:2c:
8f:7f:fa:d1:d7:e3:cd:ed:52:11:cb:cf:c7:cd:9e:
fc:f5:ab:78:e9:e5:5c:f2:78:6d:bd:9f:68:a0:e8:
58:7b:53:3d:59:d1:fe:a8:c5:dd:e7:5d:ba:77:7e:
72:d2:25:75:35:eb:a9:5d:5f:6b:5c:41:07:48:95:
79:bc:7a:b2:60:d3:6c:3d:65:67:0c:7d:8c:80:ed:
20:4d:53:70:20:79:a7:b1:88:96:47:35:d4:78:20:
6d:97:09:f4:c4:9e:b1:2a:69:32:6e:99:40:3c:84:
53:d3:44:d6:01:09:2c:e2:79:06:11:0a:a7:90:5d:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:56:43:37:78:7C:9F:96:E5:B5:73:9C:64:B9:4E:89:D7:34:D0
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:5d:e6:dc:c7:44:45:c6:f0:e0:f1:cd:a4:a5:eb:4e:10:
60:c9:70:44:03:ad:1a:74:2c:9b:95:c8:cc:59:bb:59:86:56:
ad:b7:c7:42:eb:a1:fa:e3:51:40:1e:b5:3b:7b:2d:1d:b7:24:
36:59:1e:fa:de:bd:af:bb:4c:b3:7f:61:e4:2d:8b:76:0d:23:
f0:be:1a:16:e9:eb:14:93:c4:23:23:28:f8:95:3b:62:65:78:
01:62:57:de:0a:4d:70:81:32:29:3d:71:fb:75:4a:a0:e1:b5:
2e:b4:26:12:cb:b1:94:34:d9:29:35:d3:09:d3:72:0b:41:be:
05:d7:6b:67:93:29:74:d3:17:ec:41:a4:60:66:33:c1:cf:eb:
81:0e:76:b9:3c:80:fa:e0:0e:f9:61:95:39:69:2b:c4:af:a6:
26:fc:a6:49:b4:d9:7a:2b:b5:8f:4c:1d:c8:8f:24:89:9e:50:
41:bb:5b:64:2e:a2:be:e1:4a:cf:7e:03:b9:03:e5:4b:53:44:
4d:83:5d:03:5b:0b:63:6f:f3:49:dd:39:b5:76:41:67:b3:5c:
21:94:19:a3:d4:b7:ad:4f:08:ee:b9:35:06:6d:f3:de:58:35:
25:c5:d4:59:4a:63:96:b7:6f:50:f6:49:bd:ce:2a:7f:21:7e:
cc:e5:7a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakZmu+wXmw8oT4mxXT9lhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmIzNzBiMGM5YTA2ZmQ4MmNiNzEwMGQ5MDM4NTliMDlm
NTAzMzMwHhcNMjUwNTA2MDcwMTM3WhcNMjUwNTA3MDcwMTM3WjAzMTEwLwYDVQQD
EyhiYWRiNTY0MzM3Nzg3YzlmOTZlNWI1NzM5YzY0Yjk0ZTg5ZDczNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcHWw6yX0DbcVD+5JYJPAd5Uue9p
oyiNMB0gz8CSxKncls/awEVBp884RAfYnsB120iyM5KjYoKeHmlJ3oDs4JPlZLP+
8BMoammKySis72zlI5MeLjomjISASB5rOxsp6NWGZoPRwm4PbO418E1fewZw7T4Q
oP1MnOLtg/e5zj0S+3Ga/yyPf/rR1+PN7VIRy8/HzZ789at46eVc8nhtvZ9ooOhY
e1M9WdH+qMXd5126d35y0iV1NeupXV9rXEEHSJV5vHqyYNNsPWVnDH2MgO0gTVNw
IHmnsYiWRzXUeCBtlwn0xJ6xKmkybplAPIRT00TWAQks4nkGEQqnkF1rCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrbVkM3eHyfluW1c5xkuU6J1zTQMB8GA1UdIwQY
MBaAFHm7NwsMmgb9gstxANkDhZsJ9QMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYt
NTNmMjVkNDM2ZTJjLzEvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYtNTNmMjVkNDM2ZTJj
LzEvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlld5tzH
REXG8ODxzaSl604QYMlwRAOtGnQsm5XIzFm7WYZWrbfHQuuh+uNRQB61O3stHbck
Nlke+t69r7tMs39h5C2Ldg0j8L4aFunrFJPEIyMo+JU7YmV4AWJX3gpNcIEyKT1x
+3VKoOG1LrQmEsuxlDTZKTXTCdNyC0G+BddrZ5MpdNMX7EGkYGYzwc/rgQ52uTyA
+uAO+WGVOWkrxK+mJvymSbTZeiu1j0wdyI8kiZ5QQbtbZC6ivuFKz34DuQPlS1NE
TYNdA1sLY2/zSd05tXZBZ7NcIZQZo9S3rU8I7rk1Bm3z3lg1JcXUWUpjlrdvUPZJ
vc4qfyF+zOV6nA==
-----END CERTIFICATE-----
Generated at Tue May 6 13:40:39 2025 by rpki-client