Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File: 65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier: MgPZTfKVjngmvV9z5sVhoQX8U6QR80QAhmQgoeytmUE=
Subject key identifier: FB:BF:BD:84:10:E0:98:A0:A1:F9:CA:50:F2:52:B7:FC:E0:5C:D2:86
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer: /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial: 01969F767272642528AA5A7376696968A2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number: 03B0
Signing time: Mon 05 May 2025 08:01:02 +0000
Manifest this update: Mon 05 May 2025 08:01:02 +0000
Manifest next update: Tue 06 May 2025 08:01:02 +0000
Files and hashes: 1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: UVUyg52Zl6yQ4p82XwBVIRoZBNG5Yvc+ZM0bumjIrtQ=)
2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:72:72:64:25:28:aa:5a:73:76:69:69:68:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Validity
Not Before: May 5 08:01:02 2025 GMT
Not After : May 6 08:01:02 2025 GMT
Subject: CN=fbbfbd8410e098a0a1f9ca50f252b7fce05cd286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:97:69:b5:ec:94:75:5a:cd:d6:0c:c1:91:0f:
c9:33:9b:93:50:af:87:d4:34:0b:7c:80:1c:47:00:
27:01:45:9e:0b:14:93:cf:7e:10:b7:5c:51:fc:61:
da:39:bc:dd:48:87:85:cd:ae:6d:5d:ca:a0:ec:2d:
16:24:8d:4a:95:3a:cc:3d:98:5d:5c:43:0e:c3:e5:
c8:69:64:de:3c:5a:97:fa:10:bd:00:f2:1a:8a:f0:
e8:3f:5a:4f:d9:da:7c:a5:66:16:a7:ea:dd:d3:27:
2b:d2:ad:7d:a2:1c:ed:e6:35:b0:80:b0:40:63:78:
e6:fd:88:4b:6c:18:11:33:f7:41:8d:e8:24:9f:a6:
a3:2d:48:6a:55:ac:1c:fc:5c:74:ce:45:24:cc:de:
c5:47:9b:68:2c:7c:c1:bc:ae:3e:3b:9c:d0:7a:74:
e1:7e:e5:07:7b:27:12:e7:f9:09:1b:a3:30:2e:7d:
95:59:a1:12:e6:12:07:07:46:cd:51:36:04:f0:fb:
4b:6b:2d:a1:62:17:f9:ef:a8:2c:91:c7:30:2f:d8:
ef:cb:f0:2f:4e:84:72:66:61:22:59:78:ef:74:97:
3c:82:97:ff:33:70:7c:9b:55:3a:2f:77:f8:c5:ea:
77:dd:20:b5:fa:15:aa:2f:9a:15:a2:66:06:58:e1:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:BD:84:10:E0:98:A0:A1:F9:CA:50:F2:52:B7:FC:E0:5C:D2:86
X509v3 Authority Key Identifier:
keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:27:ee:94:1e:ce:05:fe:56:eb:28:42:eb:eb:c4:a7:6e:59:
cc:53:95:57:73:5a:4b:61:a1:96:a0:29:2c:b1:64:dd:8b:c4:
57:77:9f:ca:0f:ad:83:7b:be:dd:cd:bc:13:81:74:11:4c:68:
e4:a9:f6:dc:7e:b7:f1:20:48:d7:51:58:3d:94:c4:12:ce:1a:
c5:9b:5e:c5:15:e5:51:78:06:36:40:cc:53:f0:63:dc:5f:9c:
cc:3d:a3:41:2b:c7:4b:12:72:e3:42:ba:82:7c:86:9c:12:1b:
c9:93:93:61:f2:96:a3:37:0f:d1:4a:71:65:2c:0e:f1:d9:a9:
f5:b1:bb:53:08:99:03:2b:1e:7e:78:11:aa:27:2c:d9:ea:54:
96:82:9d:19:d9:87:e7:a8:ad:72:fe:df:9e:6e:f3:e2:b9:2e:
2c:04:84:b4:a3:2e:cd:4e:04:49:a4:f8:3d:51:0d:32:4b:f7:
05:2f:c2:74:41:2e:92:f8:35:c7:56:37:b9:57:ba:86:5d:f5:
c6:fb:ed:7b:1a:97:10:a3:20:23:ce:81:04:94:d1:cd:7a:d4:
b5:2c:3e:21:06:f5:5c:4d:97:bb:6b:8f:a1:78:4b:48:5e:3c:
00:20:db:4a:b5:e8:68:b8:78:5c:84:46:d1:de:f1:80:98:c9:
25:de:2a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafdnJyZCUoqlpzdmlpaKK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTMzYTFhYjFjNzE1ZTBiM2IyYzdmZmEwZTEwMzg0NTYx
NGQzN2IwHhcNMjUwNTA1MDgwMTAyWhcNMjUwNTA2MDgwMTAyWjAzMTEwLwYDVQQD
EyhmYmJmYmQ4NDEwZTA5OGEwYTFmOWNhNTBmMjUyYjdmY2UwNWNkMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pdpteyUdVrN1gzBkQ/JM5uTUK+H
1DQLfIAcRwAnAUWeCxSTz34Qt1xR/GHaObzdSIeFza5tXcqg7C0WJI1KlTrMPZhd
XEMOw+XIaWTePFqX+hC9APIaivDoP1pP2dp8pWYWp+rd0ycr0q19ohzt5jWwgLBA
Y3jm/YhLbBgRM/dBjegkn6ajLUhqVawc/Fx0zkUkzN7FR5toLHzBvK4+O5zQenTh
fuUHeycS5/kJG6MwLn2VWaES5hIHB0bNUTYE8PtLay2hYhf576gskccwL9jvy/Av
ToRyZmEiWXjvdJc8gpf/M3B8m1U6L3f4xep33SC1+hWqL5oVomYGWOGRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu/vYQQ4JigofnKUPJSt/zgXNKGMB8GA1UdIwQY
MBaAFOuTOhqxxxXgs7LH/6DhA4RWFNN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQt
MmRkNmUxMTEzZjM0LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQtMmRkNmUxMTEzZjM0
LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCfulB7O
Bf5W6yhC6+vEp25ZzFOVV3NaS2GhlqApLLFk3YvEV3efyg+tg3u+3c28E4F0EUxo
5Kn23H638SBI11FYPZTEEs4axZtexRXlUXgGNkDMU/Bj3F+czD2jQSvHSxJy40K6
gnyGnBIbyZOTYfKWozcP0UpxZSwO8dmp9bG7UwiZAysefngRqics2epUloKdGdmH
56itcv7fnm7z4rkuLASEtKMuzU4ESaT4PVENMkv3BS/CdEEukvg1x1Y3uVe6hl31
xvvtexqXEKMgI86BBJTRzXrUtSw+IQb1XE2Xu2uPoXhLSF48ACDbSrXoaLh4XIRG
0d7xgJjJJd4q3w==
-----END CERTIFICATE-----
Generated at Mon May 5 14:16:09 2025 by rpki-client