Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: zZfN6MwR/oxJXmVXM+vBc8OfuQE+d+eYLvz964gxXtQ=
Subject key identifier: B5:70:A4:AB:60:88:2C:F1:00:F8:D7:92:95:76:1E:DE:D4:A4:6E:06
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 0196C34B89B8E9BA72E345A3B3B54307DD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 02AD
Signing time: Mon 12 May 2025 07:00:29 +0000
Manifest this update: Mon 12 May 2025 07:00:29 +0000
Manifest next update: Tue 13 May 2025 07:00:29 +0000
Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: T45/mpLPuV2/RqRmtXdXq0KeTIy+H6oiaipig8IraDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:89:b8:e9:ba:72:e3:45:a3:b3:b5:43:07:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: May 12 07:00:29 2025 GMT
Not After : May 13 07:00:29 2025 GMT
Subject: CN=b570a4ab60882cf100f8d79295761eded4a46e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:d2:9e:7c:f8:c9:0d:9b:a1:92:f1:e0:44:
92:24:f6:3c:00:71:34:9b:73:df:99:b4:eb:b8:fc:
70:b0:25:03:ca:2e:5c:37:3a:e8:5e:f9:30:af:2c:
43:e0:40:55:3f:a3:c5:07:70:ae:d4:e0:54:dd:69:
2a:88:44:d4:c7:2a:07:af:fa:67:10:20:95:37:d4:
de:50:a1:54:11:ba:e7:50:9b:30:29:38:31:56:07:
a2:2a:54:21:3a:a4:3f:bc:9e:29:bb:45:89:4a:e3:
a5:b8:0b:63:e3:1d:98:b8:2a:45:2f:d7:6f:51:59:
c3:1b:b1:7a:0b:65:3b:1e:5b:e2:9d:3d:dd:44:e3:
66:72:c2:fe:e5:c3:86:a3:48:31:0c:f1:6f:21:70:
43:1a:1e:14:51:dd:6c:c1:e3:99:b5:70:49:d0:72:
42:4d:f5:d5:79:7e:3c:c9:f9:db:08:af:62:30:18:
08:6d:8b:26:f0:59:56:2e:33:30:de:1a:7f:ee:16:
94:ce:8a:bf:42:9d:5f:28:c2:7e:c1:64:87:25:c7:
aa:6d:2b:a5:8d:25:68:1f:d6:3e:45:5b:2b:98:76:
80:3b:b4:d9:3b:8b:e7:d3:36:e8:b1:d9:db:27:b7:
b0:e2:17:a0:ed:f0:3a:75:87:0c:79:68:43:11:5b:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:A4:AB:60:88:2C:F1:00:F8:D7:92:95:76:1E:DE:D4:A4:6E:06
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1f:4d:39:ba:d9:2c:69:ca:b3:e4:7d:ef:c1:75:a6:99:fd:
e7:53:86:08:78:fb:e0:2d:e5:b4:1d:69:af:d8:52:1f:ea:07:
6b:f8:39:a1:c6:83:19:f8:04:bf:24:45:07:1d:f2:57:f0:5b:
2f:0b:6e:84:e2:df:d2:fd:bf:03:64:55:7b:54:23:1f:b9:f0:
1f:7a:58:51:24:8c:83:1f:6d:6e:67:ee:ce:98:28:a1:ab:59:
aa:b4:b9:15:f6:ed:13:db:1b:1a:54:8a:73:d7:b9:a2:91:4f:
e5:4f:4a:ca:1b:19:31:d8:d4:a1:e4:ed:34:18:7c:83:68:b9:
39:22:e6:f5:ae:0c:30:65:82:8d:b8:d4:c4:ef:4a:e3:15:79:
d6:6a:8e:41:cc:79:b1:c0:ea:9a:f7:56:2d:16:fd:1f:68:c6:
a9:05:fc:3d:d0:a3:43:69:ed:a8:1f:92:14:00:2a:8e:d5:3d:
13:6b:0d:65:ef:cc:d1:c5:dc:3f:89:b6:9f:96:7f:f2:37:30:
ce:b1:83:2a:fd:fa:9e:92:ea:6a:28:b7:73:e4:2d:25:24:da:
73:c3:b9:de:28:19:75:cc:b6:7f:42:94:8a:74:b0:0b:05:ea:
b6:e1:04:4f:cf:61:8d:4b:13:a2:73:71:d9:df:3b:96:2c:9f:
5f:34:ff:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS4m46bpy40Wjs7VDB91kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1
NTQ2Y2MwHhcNMjUwNTEyMDcwMDI5WhcNMjUwNTEzMDcwMDI5WjAzMTEwLwYDVQQD
EyhiNTcwYTRhYjYwODgyY2YxMDBmOGQ3OTI5NTc2MWVkZWQ0YTQ2ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0bSnnz4yQ2boZLx4ESSJPY8AHE0
m3PfmbTruPxwsCUDyi5cNzroXvkwryxD4EBVP6PFB3Cu1OBU3WkqiETUxyoHr/pn
ECCVN9TeUKFUEbrnUJswKTgxVgeiKlQhOqQ/vJ4pu0WJSuOluAtj4x2YuCpFL9dv
UVnDG7F6C2U7HlvinT3dRONmcsL+5cOGo0gxDPFvIXBDGh4UUd1sweOZtXBJ0HJC
TfXVeX48yfnbCK9iMBgIbYsm8FlWLjMw3hp/7haUzoq/Qp1fKMJ+wWSHJceqbSul
jSVoH9Y+RVsrmHaAO7TZO4vn0zbosdnbJ7ew4heg7fA6dYcMeWhDEVsfzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVwpKtgiCzxAPjXkpV2Ht7UpG4GMB8GA1UdIwQY
MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt
NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1
LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJh9NObrZ
LGnKs+R978F1ppn951OGCHj74C3ltB1pr9hSH+oHa/g5ocaDGfgEvyRFBx3yV/Bb
LwtuhOLf0v2/A2RVe1QjH7nwH3pYUSSMgx9tbmfuzpgooatZqrS5FfbtE9sbGlSK
c9e5opFP5U9KyhsZMdjUoeTtNBh8g2i5OSLm9a4MMGWCjbjUxO9K4xV51mqOQcx5
scDqmvdWLRb9H2jGqQX8PdCjQ2ntqB+SFAAqjtU9E2sNZe/M0cXcP4m2n5Z/8jcw
zrGDKv36npLqaii3c+QtJSTac8O53igZdcy2f0KUinSwCwXqtuEET89hjUsTonNx
2d87liyfXzT/EQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:41:18 2025 by rpki-client