Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: oO8SUKshodH/TwJt3eS8NZ7uHEtFxzVw/NrFs9eaCNs=
Subject key identifier: 06:0A:2B:27:34:80:48:66:20:06:D3:01:7D:4C:6E:CA:74:A2:7E:D0
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 01969F0845ED0AE79A352BFC7E260E37B6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 0505
Signing time: Mon 05 May 2025 06:00:41 +0000
Manifest this update: Mon 05 May 2025 06:00:41 +0000
Manifest next update: Tue 06 May 2025 06:00:41 +0000
Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: NTzvADp2ycr/EA0a896rr6jCb+M91OO7W2QsKhYjdc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:45:ed:0a:e7:9a:35:2b:fc:7e:26:0e:37:b6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: May 5 06:00:41 2025 GMT
Not After : May 6 06:00:41 2025 GMT
Subject: CN=060a2b27348048662006d3017d4c6eca74a27ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:4e:98:39:35:5e:a4:8b:02:6e:43:3f:fc:
a7:2e:d4:43:59:2e:cc:0c:ec:14:c2:a3:c3:e8:9b:
57:d4:2a:08:d3:7e:2f:57:c3:1f:c7:14:2d:ed:15:
08:01:a0:70:e3:f6:42:8c:a4:f6:6f:35:9c:4f:c5:
04:3d:0b:9a:10:b3:71:a3:76:04:3f:2d:f9:4d:98:
73:cd:2e:4e:5f:de:f9:05:b3:46:6e:47:fd:92:f2:
19:fd:cd:64:74:99:08:a2:1b:85:18:a0:d8:d7:1e:
6c:6b:57:f1:03:6d:43:a8:82:12:e7:bd:68:52:2d:
a9:5f:62:d2:92:12:57:3a:f1:32:93:19:aa:33:ab:
ad:d6:38:06:00:2f:c9:f5:c3:ec:af:b6:11:fd:96:
e5:d7:f6:0b:d1:e8:dd:42:60:48:4a:a3:77:a0:03:
c8:ad:eb:96:99:ad:08:69:f3:be:1d:73:39:29:dc:
ee:1a:a3:e5:c7:5e:07:c9:d9:1a:a1:64:f7:73:7f:
ad:6f:24:25:f8:75:24:cf:a5:b6:11:89:f9:2f:89:
29:30:c3:d2:d2:61:c0:b4:8c:0e:a4:c9:c3:c1:0b:
61:60:ac:ea:6f:0b:74:a1:7c:bf:be:fd:6d:27:58:
d1:bc:4f:20:64:13:c4:b9:54:92:9e:e6:e6:d4:7f:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0A:2B:27:34:80:48:66:20:06:D3:01:7D:4C:6E:CA:74:A2:7E:D0
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:bc:fb:4b:52:7d:b1:c1:99:7f:f8:87:f5:f4:9d:1b:86:
11:54:7d:2a:03:8b:bb:76:41:7c:5c:78:0f:2f:cd:06:71:be:
07:bb:44:ea:cb:10:85:b6:c5:67:13:fc:71:08:23:71:9c:c8:
03:c9:cc:63:20:f1:43:98:23:3f:94:87:f0:78:23:b9:9e:77:
79:6c:28:80:a7:d2:98:79:24:d8:2c:dd:33:c9:58:4d:1a:4c:
55:db:e4:f4:9a:75:f6:89:44:7e:f2:69:d3:84:e1:dd:a9:26:
15:49:0f:f9:a6:e9:84:25:2f:b7:1c:86:63:2a:f2:72:cf:48:
0b:90:d7:ee:d4:01:84:9a:9e:03:b8:d9:79:7a:4d:c8:b5:55:
7f:7d:48:8a:44:f1:8a:47:50:e7:41:82:d7:d0:9e:47:1e:00:
d1:73:8e:36:76:6c:5c:ba:e1:b4:09:4f:fe:27:c6:e7:2d:a0:
73:96:ed:54:5b:4a:82:f0:a0:a5:e7:fc:dd:52:d1:b7:6c:a6:
c0:7f:b3:68:1f:4f:f1:ac:db:39:8a:16:29:14:f3:b5:84:88:
49:74:42:21:d9:6e:2d:01:d1:f8:6a:d8:09:0b:ee:10:47:de:
a5:24:45:f1:e5:7b:e8:35:0d:d6:17:94:c0:0a:22:85:8f:62:
99:d7:8c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCEXtCueaNSv8fiYON7b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjhiNjEyNzIxZDRkNGMyZDA3Y2JmZTJlNDk1ZTk4NmEw
ZjAyNmQwHhcNMjUwNTA1MDYwMDQxWhcNMjUwNTA2MDYwMDQxWjAzMTEwLwYDVQQD
EygwNjBhMmIyNzM0ODA0ODY2MjAwNmQzMDE3ZDRjNmVjYTc0YTI3ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp9OmDk1XqSLAm5DP/ynLtRDWS7M
DOwUwqPD6JtX1CoI034vV8MfxxQt7RUIAaBw4/ZCjKT2bzWcT8UEPQuaELNxo3YE
Py35TZhzzS5OX975BbNGbkf9kvIZ/c1kdJkIohuFGKDY1x5sa1fxA21DqIIS571o
Ui2pX2LSkhJXOvEykxmqM6ut1jgGAC/J9cPsr7YR/Zbl1/YL0ejdQmBISqN3oAPI
reuWma0IafO+HXM5KdzuGqPlx14HydkaoWT3c3+tbyQl+HUkz6W2EYn5L4kpMMPS
0mHAtIwOpMnDwQthYKzqbwt0oXy/vv1tJ1jRvE8gZBPEuVSSnubm1H/IuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYKKyc0gEhmIAbTAX1Mbsp0on7QMB8GA1UdIwQY
MBaAFIu4thJyHU1MLQfL/i5JXphqDwJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmIt
YmI0OTNjNDZkZjNlLzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmItYmI0OTNjNDZkZjNl
LzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4W8+0tS
fbHBmX/4h/X0nRuGEVR9KgOLu3ZBfFx4Dy/NBnG+B7tE6ssQhbbFZxP8cQgjcZzI
A8nMYyDxQ5gjP5SH8HgjuZ53eWwogKfSmHkk2CzdM8lYTRpMVdvk9Jp19olEfvJp
04Th3akmFUkP+abphCUvtxyGYyrycs9IC5DX7tQBhJqeA7jZeXpNyLVVf31IikTx
ikdQ50GC19CeRx4A0XOONnZsXLrhtAlP/ifG5y2gc5btVFtKgvCgpef83VLRt2ym
wH+zaB9P8azbOYoWKRTztYSISXRCIdluLQHR+GrYCQvuEEfepSRF8eV76DUN1heU
wAoihY9imdeMyw==
-----END CERTIFICATE-----
Generated at Mon May 5 15:25:41 2025 by rpki-client