Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: 7xijBuC++UJgTx/1EJSfOEDMsIXSvCRo3yIh8WviF5Q=
Subject key identifier: C8:4A:0F:20:43:63:2B:3D:9B:B1:D0:6A:49:4B:9C:54:4C:03:06:AC
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 0196B06A27EAA7F83646E0BB224B4EA13668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 0CDA
Signing time: Thu 08 May 2025 15:01:09 +0000
Manifest this update: Thu 08 May 2025 15:01:09 +0000
Manifest next update: Fri 09 May 2025 15:01:09 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: G0jYJDjjTBFmGfBog7eRsc2pk6MF9oESckh5nVcNaFs=)
2: lTwE90XrCNGA5eJTFjnSjOK1bSM.roa (hash: /sO0aTlcuRH7YD2SVxbEfIzYX6MelmZ8Ycirgk+wG1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:6a:27:ea:a7:f8:36:46:e0:bb:22:4b:4e:a1:36:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: May 8 15:01:09 2025 GMT
Not After : May 9 15:01:09 2025 GMT
Subject: CN=c84a0f2043632b3d9bb1d06a494b9c544c0306ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:f5:8b:5f:90:9b:db:4c:2d:2e:3d:01:b2:
f8:36:01:37:43:f5:c6:1c:48:18:ec:44:15:e6:e6:
f6:cf:bc:5d:79:a2:2c:cc:04:00:39:57:7b:9d:be:
e5:97:97:cb:b6:e4:28:34:db:72:7f:80:d2:98:7a:
86:4c:a5:85:1b:cd:47:59:3e:4a:aa:47:c8:a7:7f:
2f:c1:78:22:55:c8:6f:41:7d:a0:fd:87:2c:89:10:
49:c8:2f:6d:43:74:e0:71:d8:85:ce:13:20:41:ea:
f7:f4:62:73:7e:de:59:5c:7c:54:dc:f8:24:6d:f4:
95:03:be:34:fc:4a:22:6f:48:e0:2b:0b:83:08:32:
d0:8a:fe:83:5a:58:23:6c:6e:35:94:f0:f4:80:1e:
78:53:4b:6f:57:69:78:ce:bf:64:a4:3f:18:14:15:
93:6f:d8:1f:4c:39:12:83:91:46:b2:e2:6c:fd:a0:
d3:27:da:7c:cb:80:24:65:8c:00:2f:59:76:15:09:
61:73:77:67:7b:47:a7:95:33:27:5e:a7:9d:23:c6:
4a:7d:cd:c3:67:9b:48:a3:77:0e:10:9e:5f:0b:32:
7e:7d:30:62:89:03:0c:62:9e:e1:10:3c:cd:2a:26:
a0:ef:40:93:21:97:f5:51:5d:ba:9d:ec:57:19:b9:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:0F:20:43:63:2B:3D:9B:B1:D0:6A:49:4B:9C:54:4C:03:06:AC
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2c:7a:0d:ab:41:7b:84:61:f7:14:07:7c:72:ea:7f:85:e6:
e8:8e:f7:34:da:62:0d:37:32:a7:61:df:13:62:aa:72:a4:2c:
ac:02:02:82:a6:fd:ac:3f:bb:42:96:60:62:d2:dd:7c:e4:41:
bf:c4:06:78:42:2e:f4:0d:d8:f1:88:d3:61:c6:11:70:ba:c9:
0b:0c:84:67:93:25:79:f3:14:13:97:77:c3:c1:c9:4b:b6:b6:
21:6e:27:cc:e7:fb:8a:65:76:f6:96:39:a5:70:5e:25:68:56:
62:07:0b:4e:f8:be:d5:d2:83:dc:6c:09:71:ce:17:6a:35:46:
ad:3d:5d:f0:88:75:9c:98:c9:cc:b4:04:29:09:fc:72:df:56:
10:cd:41:f2:37:68:a5:af:ac:53:e2:dc:6c:ed:37:25:c2:c0:
5e:4b:7e:9e:c3:73:73:30:99:1b:73:eb:82:cb:8f:46:94:fc:
ca:e7:27:43:10:c5:31:ba:b5:d0:c7:0c:04:bc:66:05:c7:90:
58:e7:68:82:36:d0:34:77:27:34:2d:35:01:07:f4:be:95:37:
cf:a4:57:9d:d0:52:0f:ee:56:7d:77:42:a4:36:ec:49:35:57:
1c:f6:be:7e:6e:6a:40:4c:af:18:f4:21:56:9c:51:90:11:93:
ec:aa:4a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawaifqp/g2RuC7IktOoTZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjlhZDAxNDA3MmRlNjYxNzQzOGZiMWFmYmU0MWEyZGJk
YzgxMWMwHhcNMjUwNTA4MTUwMTA5WhcNMjUwNTA5MTUwMTA5WjAzMTEwLwYDVQQD
EyhjODRhMGYyMDQzNjMyYjNkOWJiMWQwNmE0OTRiOWM1NDRjMDMwNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL31i1+Qm9tMLS49AbL4NgE3Q/XG
HEgY7EQV5ub2z7xdeaIszAQAOVd7nb7ll5fLtuQoNNtyf4DSmHqGTKWFG81HWT5K
qkfIp38vwXgiVchvQX2g/YcsiRBJyC9tQ3TgcdiFzhMgQer39GJzft5ZXHxU3Pgk
bfSVA740/Eoib0jgKwuDCDLQiv6DWlgjbG41lPD0gB54U0tvV2l4zr9kpD8YFBWT
b9gfTDkSg5FGsuJs/aDTJ9p8y4AkZYwAL1l2FQlhc3dne0enlTMnXqedI8ZKfc3D
Z5tIo3cOEJ5fCzJ+fTBiiQMMYp7hEDzNKiag70CTIZf1UV26nexXGbmWvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhKDyBDYys9m7HQaklLnFRMAwasMB8GA1UdIwQY
MBaAFBEprQFAct5mF0OPsa++QaLb3IEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzIt
YWM4ODE0OTdlMGEyLzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzItYWM4ODE0OTdlMGEy
LzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSx6DatB
e4Rh9xQHfHLqf4Xm6I73NNpiDTcyp2HfE2KqcqQsrAICgqb9rD+7QpZgYtLdfORB
v8QGeEIu9A3Y8YjTYcYRcLrJCwyEZ5MlefMUE5d3w8HJS7a2IW4nzOf7imV29pY5
pXBeJWhWYgcLTvi+1dKD3GwJcc4XajVGrT1d8Ih1nJjJzLQEKQn8ct9WEM1B8jdo
pa+sU+LcbO03JcLAXkt+nsNzczCZG3PrgsuPRpT8yucnQxDFMbq10McMBLxmBceQ
WOdogjbQNHcnNC01AQf0vpU3z6RXndBSD+5WfXdCpDbsSTVXHPa+fm5qQEyvGPQh
VpxRkBGT7KpKfg==
-----END CERTIFICATE-----
Generated at Thu May 8 20:46:37 2025 by rpki-client