Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: RvySaVKZ2DIkMXuiua0bOipN+Uf6c3poyJDT8m0zY6Y=
Subject key identifier: E3:2F:1D:94:33:44:B9:D8:3E:47:C0:F4:CB:18:1C:BD:AE:BE:A3:DC
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 0196CF86B7C05DE4985E63EDB0859E08A37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 02C1
Signing time: Wed 14 May 2025 16:00:34 +0000
Manifest this update: Wed 14 May 2025 16:00:34 +0000
Manifest next update: Thu 15 May 2025 16:00:34 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: Pnjnk2Iz2oOBZT6enGX1pE+sZTLy1wjRMVT+SmfXI2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:86:b7:c0:5d:e4:98:5e:63:ed:b0:85:9e:08:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: May 14 16:00:34 2025 GMT
Not After : May 15 16:00:34 2025 GMT
Subject: CN=e32f1d943344b9d83e47c0f4cb181cbdaebea3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:ac:b5:5c:fe:a3:44:d0:d9:9c:8d:cf:6b:
ff:8f:5d:21:63:fb:76:84:3c:bb:e1:d2:b2:27:83:
ea:33:5d:86:38:f0:e7:cb:48:91:44:0a:93:ea:9b:
51:f4:b2:5d:65:65:97:90:2d:a5:c5:9f:6e:06:05:
4b:3b:01:26:59:1f:fa:d4:c1:a3:8a:46:db:8c:ef:
35:e5:9f:2d:b2:79:af:0a:5e:08:e1:07:f7:1a:19:
87:a1:f6:bc:c8:34:63:db:e0:eb:be:dd:f0:47:53:
68:50:22:f0:6d:81:15:61:9b:be:00:b4:56:dd:3f:
0f:72:e6:ef:5e:8a:5c:63:a6:77:61:2b:15:e0:be:
16:d6:a1:0d:ba:20:67:33:db:52:ee:71:93:0a:19:
04:f0:00:36:5f:82:a6:e3:cf:a4:07:18:1c:9e:19:
9e:9f:0e:4c:51:97:d3:16:df:9f:42:75:95:82:d0:
7e:00:a3:48:c1:13:34:11:86:5d:1c:a9:55:b8:ea:
f4:e6:cf:bd:52:3e:5d:90:9c:b5:55:12:04:32:ac:
e6:88:c6:83:6d:d0:ac:fa:e3:e8:e1:ce:75:a9:ca:
98:c7:eb:03:b0:0a:e0:15:8b:d7:94:bc:7d:17:8a:
2a:c2:f7:7e:19:f2:c3:c9:35:7c:9e:54:93:23:a4:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:1D:94:33:44:B9:D8:3E:47:C0:F4:CB:18:1C:BD:AE:BE:A3:DC
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:eb:e2:f4:e1:84:48:f4:db:24:25:8b:01:c4:89:59:3a:de:
b7:c2:c9:8b:75:03:79:3c:07:f8:07:5b:3f:b8:f1:89:7b:9e:
26:e4:60:0a:b6:54:69:0f:22:40:b6:cb:8f:2e:55:99:ea:14:
52:75:6a:f6:ce:5b:8c:4b:a7:22:50:23:ed:6a:e8:48:f0:55:
5b:1e:cc:b5:f8:25:86:c3:08:1e:0b:ee:49:25:8c:d5:e9:cb:
b5:9c:21:b7:77:8b:f0:4b:e5:f6:f9:89:c6:ff:c7:c1:6a:37:
5c:a6:1a:8a:9c:46:70:d0:59:22:f2:5e:d8:d7:57:2b:4c:5c:
f0:33:16:05:71:52:cd:1f:05:6d:c3:33:67:3f:fb:3d:0b:18:
a8:0b:31:a9:10:8c:31:1c:6e:d1:03:59:f1:68:46:8a:43:d5:
1e:f0:e1:66:95:af:c1:02:4b:83:83:86:16:c6:75:66:59:53:
8f:f9:fa:48:37:ae:4e:85:56:05:28:e0:ee:12:fb:0c:27:13:
b1:fe:58:90:b3:97:c0:25:85:34:93:c7:9f:20:6e:2f:d3:64:
3c:e2:a6:44:1f:8e:67:cd:77:51:2f:71:51:8e:7e:fd:14:f0:
19:c7:ac:f2:b8:97:98:b4:9c:1b:54:14:68:31:1b:20:17:59:
61:90:31:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPhrfAXeSYXmPtsIWeCKN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx
Y2E4ZTEwHhcNMjUwNTE0MTYwMDM0WhcNMjUwNTE1MTYwMDM0WjAzMTEwLwYDVQQD
EyhlMzJmMWQ5NDMzNDRiOWQ4M2U0N2MwZjRjYjE4MWNiZGFlYmVhM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A2stVz+o0TQ2ZyNz2v/j10hY/t2
hDy74dKyJ4PqM12GOPDny0iRRAqT6ptR9LJdZWWXkC2lxZ9uBgVLOwEmWR/61MGj
ikbbjO815Z8tsnmvCl4I4Qf3GhmHofa8yDRj2+Drvt3wR1NoUCLwbYEVYZu+ALRW
3T8PcubvXopcY6Z3YSsV4L4W1qENuiBnM9tS7nGTChkE8AA2X4Km48+kBxgcnhme
nw5MUZfTFt+fQnWVgtB+AKNIwRM0EYZdHKlVuOr05s+9Uj5dkJy1VRIEMqzmiMaD
bdCs+uPo4c51qcqYx+sDsArgFYvXlLx9F4oqwvd+GfLDyTV8nlSTI6QU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMvHZQzRLnYPkfA9MsYHL2uvqPcMB8GA1UdIwQY
MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt
NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk
LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOvi9OGE
SPTbJCWLAcSJWTret8LJi3UDeTwH+AdbP7jxiXueJuRgCrZUaQ8iQLbLjy5VmeoU
UnVq9s5bjEunIlAj7WroSPBVWx7MtfglhsMIHgvuSSWM1enLtZwht3eL8Evl9vmJ
xv/HwWo3XKYaipxGcNBZIvJe2NdXK0xc8DMWBXFSzR8FbcMzZz/7PQsYqAsxqRCM
MRxu0QNZ8WhGikPVHvDhZpWvwQJLg4OGFsZ1ZllTj/n6SDeuToVWBSjg7hL7DCcT
sf5YkLOXwCWFNJPHnyBuL9NkPOKmRB+OZ813US9xUY5+/RTwGces8riXmLScG1QU
aDEbIBdZYZAxnQ==
-----END CERTIFICATE-----
Generated at Thu May 15 00:26:48 2025 by rpki-client