Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: 997NFAFZ97oqifUaSdKb2/vck50USSm2+dv1FFq8xBo=
Subject key identifier: 85:41:02:12:03:66:9A:19:97:D6:66:94:AA:02:10:8B:04:A6:C3:5A
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 0196C1CBBA16A9A7B98CFE23980C1AF1E5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 00:01:16 +0000
Manifest this update: Mon 12 May 2025 00:01:16 +0000
Manifest next update: Tue 13 May 2025 00:01:16 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: m4TTfmSAq6uGoPkEQvYBp4pX0y8lACZj9uKb4FkBkmc=)
2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:ba:16:a9:a7:b9:8c:fe:23:98:0c:1a:f1:e5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: May 12 00:01:16 2025 GMT
Not After : May 13 00:01:16 2025 GMT
Subject: CN=8541021203669a1997d66694aa02108b04a6c35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:fe:98:95:0e:19:c9:6d:55:4a:66:c4:df:
d6:15:4f:cf:5c:6a:f4:34:29:79:34:70:a3:67:92:
b3:cd:f0:e1:10:04:11:18:6b:ca:5b:bc:c5:07:bb:
da:fc:97:e1:e2:30:7b:22:20:c0:95:c0:e7:67:b2:
da:74:9c:1c:b9:43:75:3d:96:7c:39:b7:9c:5e:c0:
ad:bf:a4:9b:77:f6:ec:f9:87:c9:b0:7d:5d:22:b7:
f1:d5:cd:16:72:18:77:db:e5:e8:9c:2c:33:ae:0d:
20:fe:e0:20:48:d6:a5:e6:0c:52:de:c9:7e:48:b9:
75:d4:19:4f:c6:94:23:28:78:98:c0:b1:a5:bb:92:
13:ec:11:3b:24:a6:1b:e6:f1:dc:db:62:b6:ea:60:
12:be:32:df:64:11:b4:5c:fa:f6:e7:f4:b4:c3:61:
e4:8e:90:db:b6:7b:99:2a:06:06:21:2a:91:5d:f1:
29:7a:0d:e2:cb:7f:72:b1:0f:25:f8:45:56:a9:b8:
23:63:8e:e1:8e:8c:9b:0f:f9:c2:42:40:cc:bc:1c:
4d:7b:a9:89:ce:5b:ff:33:b3:3c:96:80:37:90:01:
51:3f:9b:4c:24:77:7e:66:dd:46:08:3c:b6:6f:d0:
8a:6b:ff:71:db:96:3c:79:2b:e2:c6:e2:35:7c:85:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:02:12:03:66:9A:19:97:D6:66:94:AA:02:10:8B:04:A6:C3:5A
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:db:d8:92:81:a3:b1:1d:6a:3a:35:c8:e2:d0:00:08:19:28:
8a:a6:c7:74:16:40:b6:3c:7a:89:c5:3e:3c:28:f0:b1:8c:8e:
22:d2:e6:e8:84:67:78:63:4d:27:99:1e:cf:fd:c1:b0:61:75:
af:59:65:29:ec:b0:ad:bb:59:a1:45:4f:4f:20:2a:ab:ad:d5:
a9:ea:b6:67:1e:76:04:f6:83:e9:f2:51:51:fd:9f:c7:53:91:
33:59:da:d4:e3:0e:2d:6d:9a:62:a3:b8:68:2f:7a:2f:26:01:
ed:a5:e9:ad:bc:29:b2:03:0a:16:58:62:6d:4f:e3:8e:f0:9e:
69:f3:be:03:4e:17:1e:bb:ac:51:9b:68:b1:cc:78:35:4d:b0:
cf:88:4f:e6:70:a4:06:97:a3:96:82:09:38:9f:04:29:de:c8:
6f:af:45:b9:52:5e:4b:78:af:cd:66:8a:b5:73:05:7e:19:c7:
af:22:c5:9a:e6:f5:0d:19:93:a3:b7:b8:1b:13:9a:b0:3e:97:
d8:62:23:8b:f7:c0:c8:09:ed:d3:9a:d4:6f:0e:60:a0:76:43:
65:59:07:2a:b7:bc:ec:e7:30:8e:bc:1d:11:5b:b2:fb:60:40:
7b:7e:63:82:84:4b:95:82:98:9c:5a:06:c5:11:d3:a8:6b:e4:
b8:39:49:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy7oWqae5jP4jmAwa8eXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjM2QzZDdlNWNiZjE4YWY2NmI3ZjViNGE1ZTBhYzE5ZWNk
Mzk4NzYwHhcNMjUwNTEyMDAwMTE2WhcNMjUwNTEzMDAwMTE2WjAzMTEwLwYDVQQD
Eyg4NTQxMDIxMjAzNjY5YTE5OTdkNjY2OTRhYTAyMTA4YjA0YTZjMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBj+mJUOGcltVUpmxN/WFU/PXGr0
NCl5NHCjZ5KzzfDhEAQRGGvKW7zFB7va/Jfh4jB7IiDAlcDnZ7LadJwcuUN1PZZ8
ObecXsCtv6Sbd/bs+YfJsH1dIrfx1c0Wchh32+XonCwzrg0g/uAgSNal5gxS3sl+
SLl11BlPxpQjKHiYwLGlu5IT7BE7JKYb5vHc22K26mASvjLfZBG0XPr25/S0w2Hk
jpDbtnuZKgYGISqRXfEpeg3iy39ysQ8l+EVWqbgjY47hjoybD/nCQkDMvBxNe6mJ
zlv/M7M8loA3kAFRP5tMJHd+Zt1GCDy2b9CKa/9x25Y8eSvixuI1fIUGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVBAhIDZpoZl9ZmlKoCEIsEpsNaMB8GA1UdIwQY
MBaAFOw9PX5cvxivZrf1tKXgrBns05h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMt
NDY2MGZhZDgzOTg1LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMtNDY2MGZhZDgzOTg1
LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNvYkoGj
sR1qOjXI4tAACBkoiqbHdBZAtjx6icU+PCjwsYyOItLm6IRneGNNJ5kez/3BsGF1
r1llKeywrbtZoUVPTyAqq63Vqeq2Zx52BPaD6fJRUf2fx1ORM1na1OMOLW2aYqO4
aC96LyYB7aXprbwpsgMKFlhibU/jjvCeafO+A04XHrusUZtoscx4NU2wz4hP5nCk
BpejloIJOJ8EKd7Ib69FuVJeS3ivzWaKtXMFfhnHryLFmub1DRmTo7e4GxOasD6X
2GIji/fAyAnt05rUbw5goHZDZVkHKre87OcwjrwdEVuy+2BAe35jgoRLlYKYnFoG
xRHTqGvkuDlJ9g==
-----END CERTIFICATE-----
Generated at Mon May 12 10:24:50 2025 by rpki-client