Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: uGJ2KJERyIWhizyvebMMHCLkLi1v2pzun1Z3Oh7a1GA=
Subject key identifier: 4D:F0:0D:18:D9:04:E4:5B:3F:F6:92:0A:43:4F:17:DC:F5:FE:81:64
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 0196C9F283A5D5C71B9F425F3EEA14A098DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0D0F
Signing time: Tue 13 May 2025 14:00:35 +0000
Manifest this update: Tue 13 May 2025 14:00:35 +0000
Manifest next update: Wed 14 May 2025 14:00:35 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: TWSSTEe8xrpnOv7BEVDObjrjrGehmdHsJDp/S7X1aW4=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:83:a5:d5:c7:1b:9f:42:5f:3e:ea:14:a0:98:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: May 13 14:00:35 2025 GMT
Not After : May 14 14:00:35 2025 GMT
Subject: CN=4df00d18d904e45b3ff6920a434f17dcf5fe8164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:88:76:9c:d9:f5:24:da:cc:fe:2c:b7:e9:
03:7f:36:55:f3:f7:ce:1a:44:69:78:e9:a5:70:10:
5a:25:81:de:a9:78:55:a1:fe:6d:9c:89:f9:45:3b:
a3:2e:06:1a:02:5d:de:0f:c3:86:57:64:43:f6:6b:
f5:aa:6d:4e:e7:b5:c8:15:b9:ac:c7:97:a8:61:55:
0d:b1:57:73:eb:97:24:ba:35:fc:ff:59:3a:0e:39:
79:af:b3:d6:13:33:6c:41:5e:69:e5:fb:b5:d9:a7:
c5:38:ff:f5:a1:2b:e8:82:6e:a9:94:7c:a0:7b:a6:
74:a1:49:ac:61:b7:77:fe:0c:3f:28:4d:b9:aa:d1:
d0:f1:c3:db:22:cd:2e:30:1d:a3:01:11:42:1b:e1:
f2:20:92:52:a6:d2:0f:1d:c7:1f:c4:4a:14:be:03:
75:63:12:c8:bc:e6:f4:67:1b:76:a7:b5:97:de:bb:
10:56:69:bf:40:70:ee:69:b2:4d:48:89:13:27:a3:
a5:94:61:52:89:99:29:05:3e:43:ae:4c:5b:d1:2b:
e6:e3:7e:20:0e:0f:d9:3b:7e:b0:d9:d0:db:55:f4:
e7:06:d7:0f:9f:9f:93:04:ab:0d:0d:62:60:c1:b3:
a7:f1:d4:78:51:9f:26:41:c4:f3:6a:31:2a:5b:a3:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:0D:18:D9:04:E4:5B:3F:F6:92:0A:43:4F:17:DC:F5:FE:81:64
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:2f:76:ce:28:dd:f8:27:69:c7:61:c6:71:6b:d0:e5:d9:
6a:79:7c:ff:0f:3f:d8:12:a5:bb:3c:1f:6a:1f:d5:06:88:d1:
86:ed:a7:51:b1:31:54:9c:ee:26:13:e1:2a:70:3a:b0:66:ec:
7f:27:f5:79:46:65:2b:a9:09:21:c8:7f:af:b4:af:95:35:14:
98:16:c1:07:f0:dd:37:df:d4:a9:61:55:93:76:1f:dd:2f:38:
0f:4f:8b:83:72:fc:08:50:84:5a:0b:a9:92:81:d2:a1:04:50:
51:80:ed:66:c2:ba:00:7a:fb:55:c8:5b:e3:e5:a4:bc:a8:0f:
0d:e5:3e:1f:12:78:35:41:1b:22:39:b6:97:54:2c:a8:09:0e:
c9:7e:43:a2:ab:32:9e:e7:9a:ee:19:da:6d:fc:3c:85:d5:fa:
b3:03:90:47:66:1c:85:29:6c:f8:02:bc:d1:d6:67:90:09:b2:
a9:d2:12:e5:5a:30:ef:c4:0f:cc:73:c0:4e:a6:48:bd:f5:20:
5c:c1:0b:13:eb:fb:c0:12:45:09:03:2b:55:97:5f:1e:93:a1:
5c:f1:ba:b7:d5:45:a3:d5:0a:3a:bf:63:fb:f3:61:8b:ad:6e:
5a:51:ec:4b:12:1d:33:73:a6:8b:7e:75:5e:f6:77:fd:30:e0:
b1:49:3c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJ8oOl1ccbn0JfPuoUoJjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx
ODFhNGMwHhcNMjUwNTEzMTQwMDM1WhcNMjUwNTE0MTQwMDM1WjAzMTEwLwYDVQQD
Eyg0ZGYwMGQxOGQ5MDRlNDViM2ZmNjkyMGE0MzRmMTdkY2Y1ZmU4MTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiOIdpzZ9STazP4st+kDfzZV8/fO
GkRpeOmlcBBaJYHeqXhVof5tnIn5RTujLgYaAl3eD8OGV2RD9mv1qm1O57XIFbms
x5eoYVUNsVdz65ckujX8/1k6Djl5r7PWEzNsQV5p5fu12afFOP/1oSvogm6plHyg
e6Z0oUmsYbd3/gw/KE25qtHQ8cPbIs0uMB2jARFCG+HyIJJSptIPHccfxEoUvgN1
YxLIvOb0Zxt2p7WX3rsQVmm/QHDuabJNSIkTJ6OllGFSiZkpBT5Drkxb0Svm434g
Dg/ZO36w2dDbVfTnBtcPn5+TBKsNDWJgwbOn8dR4UZ8mQcTzajEqW6OvYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3wDRjZBORbP/aSCkNPF9z1/oFkMB8GA1UdIwQY
MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt
OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm
LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqgvds4o
3fgnacdhxnFr0OXZanl8/w8/2BKluzwfah/VBojRhu2nUbExVJzuJhPhKnA6sGbs
fyf1eUZlK6kJIch/r7SvlTUUmBbBB/DdN9/UqWFVk3Yf3S84D0+Lg3L8CFCEWgup
koHSoQRQUYDtZsK6AHr7Vchb4+WkvKgPDeU+HxJ4NUEbIjm2l1QsqAkOyX5Doqsy
nuea7hnabfw8hdX6swOQR2YchSls+AK80dZnkAmyqdIS5Vow78QPzHPATqZIvfUg
XMELE+v7wBJFCQMrVZdfHpOhXPG6t9VFo9UKOr9j+/Nhi61uWlHsSxIdM3Omi351
XvZ3/TDgsUk8UA==
-----END CERTIFICATE-----
Generated at Tue May 13 23:59:07 2025 by rpki-client