Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File: V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier: aZ9h7ocK2xvu6Ka2L7YQzO2j682Ex3wOWN2DVuQxhPg=
Subject key identifier: 1E:C6:BF:3A:81:D7:3D:FF:A0:D2:57:0B:59:AA:60:52:E1:9D:95:7A
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial: 0196B85A33A7C41F1AAFD428C57CC577E9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number: 1118
Signing time: Sat 10 May 2025 04:00:41 +0000
Manifest this update: Sat 10 May 2025 04:00:41 +0000
Manifest next update: Sun 11 May 2025 04:00:41 +0000
Files and hashes: 1: K1RXDd41ejHM6gE_h4XPr9eqXqg.roa (hash: HFPOwF7yl1DzvJdGJnqBFfDZ3/PqP2JlTX3PgCcBwh0=)
2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: xK+w9eEy2qTyLoitITLPsF9jkuTAv+PSHJl5UVvzITA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:33:a7:c4:1f:1a:af:d4:28:c5:7c:c5:77:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Validity
Not Before: May 10 04:00:41 2025 GMT
Not After : May 11 04:00:41 2025 GMT
Subject: CN=1ec6bf3a81d73dffa0d2570b59aa6052e19d957a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:ac:5d:a8:b5:86:71:73:60:5d:2c:c4:e2:
b6:74:02:fa:a6:d2:be:43:62:5b:07:d3:72:56:8f:
b6:26:be:46:ad:4c:33:d2:48:c7:2f:fa:d2:65:8e:
32:f8:ac:91:56:1d:2c:77:4b:93:d4:a9:40:04:ad:
43:7b:0f:41:d1:cf:25:44:8b:96:ce:35:7c:91:4e:
88:b3:64:b2:5f:8a:7b:a2:89:a6:d8:e0:46:ce:61:
81:7a:28:9d:cb:39:04:a9:e9:23:42:85:14:79:10:
40:af:10:1d:3c:78:63:69:27:b3:37:9f:50:1f:08:
ff:16:6d:79:53:e3:b2:52:49:be:39:4f:0e:69:1c:
d7:7c:33:1c:5f:21:e2:de:a6:0d:20:24:97:ad:9a:
50:0f:03:50:51:85:f9:62:81:36:95:98:96:2d:e0:
7c:52:7e:02:c1:ca:19:62:8b:f4:18:71:a4:a1:40:
c1:07:bb:c1:38:9f:4e:7c:b0:75:1b:e5:33:b3:a9:
c9:e0:21:a7:a8:cd:97:96:c4:60:10:e9:03:3f:98:
e8:72:59:6e:ce:b4:0c:cd:00:72:21:4f:46:bb:0b:
40:82:94:6c:b1:84:b8:26:5f:87:fb:15:ae:7d:ab:
be:e4:4d:49:c1:49:b1:25:2b:8b:a7:b7:6f:d0:e7:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C6:BF:3A:81:D7:3D:FF:A0:D2:57:0B:59:AA:60:52:E1:9D:95:7A
X509v3 Authority Key Identifier:
keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:b7:1f:ec:b1:d9:1e:d2:5a:b7:89:bb:fe:51:7d:4b:c0:
4d:62:56:d8:45:0b:91:13:42:a0:1f:48:2d:4b:59:7f:28:0c:
a6:6a:ef:49:bf:4d:42:9f:03:56:ca:a0:0f:89:32:ec:74:66:
6f:8d:a8:7e:67:cb:66:3e:bc:82:9f:b7:2f:b7:74:32:01:d4:
16:d6:32:2c:e2:68:5d:ff:5e:55:f2:0b:a8:6f:88:24:eb:cd:
de:2e:dc:11:1a:8f:ae:2a:fb:fb:ba:7b:da:df:81:1c:59:e3:
a9:e6:b0:61:7e:bc:bc:16:b8:dc:35:2d:4f:2f:07:a3:9f:c8:
e0:f1:02:2b:36:5f:3f:52:c3:bc:04:fa:4d:55:fd:2b:8e:c1:
04:db:34:c5:cd:4b:42:ad:2c:97:7b:ae:c3:7a:9d:7b:ef:91:
a3:de:64:bd:7b:a3:32:8d:99:11:5b:90:fe:cc:6b:12:4c:11:
82:81:eb:99:9e:7d:f8:be:1e:f1:08:3e:64:93:22:7e:99:ef:
88:1a:44:fb:35:3a:20:24:6d:bb:1e:db:c9:c2:30:3f:e6:0c:
c6:f1:4e:a8:f6:53:7f:34:43:51:fc:9f:2c:11:02:ff:b9:0a:
b6:18:7f:f5:79:aa:17:ad:de:fb:e7:51:a9:06:c6:7c:c3:7f:
e3:33:12:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WjOnxB8ar9QoxXzFd+m0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzExZjIwODgzYTYyYmMwNjM5MWJhN2IyNTgyY2U3MmIz
ZmU5MWMwHhcNMjUwNTEwMDQwMDQxWhcNMjUwNTExMDQwMDQxWjAzMTEwLwYDVQQD
EygxZWM2YmYzYTgxZDczZGZmYTBkMjU3MGI1OWFhNjA1MmUxOWQ5NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMCsXai1hnFzYF0sxOK2dAL6ptK+
Q2JbB9NyVo+2Jr5GrUwz0kjHL/rSZY4y+KyRVh0sd0uT1KlABK1Dew9B0c8lRIuW
zjV8kU6Is2SyX4p7oomm2OBGzmGBeiidyzkEqekjQoUUeRBArxAdPHhjaSezN59Q
Hwj/Fm15U+OyUkm+OU8OaRzXfDMcXyHi3qYNICSXrZpQDwNQUYX5YoE2lZiWLeB8
Un4CwcoZYov0GHGkoUDBB7vBOJ9OfLB1G+Uzs6nJ4CGnqM2XlsRgEOkDP5jocllu
zrQMzQByIU9GuwtAgpRssYS4Jl+H+xWufau+5E1JwUmxJSuLp7dv0OfqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7GvzqB1z3/oNJXC1mqYFLhnZV6MB8GA1UdIwQY
MBaAFFdxHyCIOmK8Bjkbp7JYLOcrP+kcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMt
NzE0ZDE5NThiNzdiLzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMtNzE0ZDE5NThiNzdi
LzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSy3H+yx
2R7SWreJu/5RfUvATWJW2EULkRNCoB9ILUtZfygMpmrvSb9NQp8DVsqgD4ky7HRm
b42ofmfLZj68gp+3L7d0MgHUFtYyLOJoXf9eVfILqG+IJOvN3i7cERqPrir7+7p7
2t+BHFnjqeawYX68vBa43DUtTy8Ho5/I4PECKzZfP1LDvAT6TVX9K47BBNs0xc1L
Qq0sl3uuw3qde++Ro95kvXujMo2ZEVuQ/sxrEkwRgoHrmZ59+L4e8Qg+ZJMifpnv
iBpE+zU6ICRtux7bycIwP+YMxvFOqPZTfzRDUfyfLBEC/7kKthh/9XmqF63e++dR
qQbGfMN/4zMSNA==
-----END CERTIFICATE-----
Generated at Sat May 10 14:41:30 2025 by rpki-client