Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: oLPVSDJPpeBXI57Z/o8Z+XJPWWqouvsA03P+2Xb0+yA=
Subject key identifier: 3D:50:FC:21:F1:97:8F:B7:3B:75:CB:05:92:F1:7E:03:41:77:5C:60
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 0196A50A30D9BA7B545CA2A6FAA6140E16C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 08B7
Signing time: Tue 06 May 2025 10:00:30 +0000
Manifest this update: Tue 06 May 2025 10:00:30 +0000
Manifest next update: Wed 07 May 2025 10:00:30 +0000
Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=)
2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: AO5sU1Cfjhikgcr+3PyDGirNutGWxCIBPdfY/XASTow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:30:d9:ba:7b:54:5c:a2:a6:fa:a6:14:0e:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: May 6 10:00:30 2025 GMT
Not After : May 7 10:00:30 2025 GMT
Subject: CN=3d50fc21f1978fb73b75cb0592f17e0341775c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:0f:26:b6:cf:86:40:a5:3a:7d:b0:24:ee:
71:69:26:88:fa:72:c5:53:73:d2:81:06:84:54:dc:
c1:e1:3d:d5:68:3a:87:55:96:5d:de:95:7a:0c:b5:
fa:3f:b0:ff:eb:2c:f7:09:c2:e7:c5:8c:77:3b:84:
d4:ae:62:ac:9f:09:65:e0:e7:1e:f8:2f:9c:85:1c:
d9:01:b5:d0:01:48:ec:6e:10:b3:11:bb:40:33:8b:
56:24:ed:9f:ac:49:a1:b1:29:e7:8e:a4:20:70:ea:
3a:a2:9c:1a:9f:b2:36:cb:c3:94:90:25:09:5c:ef:
29:9c:69:8c:46:ef:4a:96:b8:14:68:48:b8:db:de:
95:fb:6e:d5:73:f1:8f:db:f0:54:11:d8:52:97:0c:
81:7e:e9:3a:2b:df:89:47:9d:a7:64:1f:41:53:9b:
06:d4:a8:54:29:cb:24:51:90:5f:94:2a:8e:f6:22:
ee:6c:0c:3c:d4:a8:31:b6:a2:37:26:46:65:39:8c:
0c:ec:42:6a:b0:2e:57:cd:a3:36:11:c4:8a:ad:bf:
73:9d:74:2e:24:77:a3:be:9b:dc:8e:c2:f2:03:95:
79:2f:93:d7:18:1d:3a:d9:80:fc:8a:dc:cb:3f:cb:
03:75:d5:f7:4e:29:55:da:15:87:af:da:b3:29:bd:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:FC:21:F1:97:8F:B7:3B:75:CB:05:92:F1:7E:03:41:77:5C:60
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ca:93:5a:f6:ff:05:aa:46:9c:50:dc:55:d3:38:44:88:b8:
57:32:de:d6:88:e9:79:9f:ce:8d:fc:03:3b:88:88:ec:d4:eb:
aa:1e:40:b5:5c:8a:15:e2:01:c8:2b:bb:92:4a:33:29:77:1b:
98:a0:f2:9a:c4:99:9b:0c:b8:f8:fc:f8:20:a4:95:8e:2c:59:
08:cc:bf:ee:f9:b2:98:bb:52:5e:8e:e6:a0:b2:2a:64:71:db:
c9:34:06:5b:7e:b8:16:ec:fe:f5:c9:ef:d9:51:da:99:e4:c5:
78:aa:a0:32:50:52:70:dd:fd:bd:bc:a0:06:1b:09:fb:53:95:
b8:71:2e:be:de:c0:bf:f8:ec:ff:b6:f7:c9:dc:2a:2d:a2:4e:
c3:5a:70:be:c7:ba:08:1e:99:28:26:d6:4b:d2:84:46:98:fc:
61:77:c1:44:c2:98:16:bd:74:42:10:26:a3:ca:98:4a:b7:01:
b7:81:73:5c:88:23:29:f2:c0:5a:2f:9e:e8:bc:73:e5:e0:d1:
5d:be:09:e3:1d:79:c7:b9:ce:cf:fe:ee:d0:1f:4c:77:dd:64:
80:4a:27:0c:a7:7a:c1:ba:e7:6e:ae:50:07:70:68:4e:fd:0c:
02:bf:95:cb:bd:aa:e1:66:68:46:e6:70:23:11:dc:9f:ae:9c:
8b:06:a3:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalCjDZuntUXKKm+qYUDhbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4
ZjIyMmEwHhcNMjUwNTA2MTAwMDMwWhcNMjUwNTA3MTAwMDMwWjAzMTEwLwYDVQQD
EygzZDUwZmMyMWYxOTc4ZmI3M2I3NWNiMDU5MmYxN2UwMzQxNzc1YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy20PJrbPhkClOn2wJO5xaSaI+nLF
U3PSgQaEVNzB4T3VaDqHVZZd3pV6DLX6P7D/6yz3CcLnxYx3O4TUrmKsnwll4Oce
+C+chRzZAbXQAUjsbhCzEbtAM4tWJO2frEmhsSnnjqQgcOo6opwan7I2y8OUkCUJ
XO8pnGmMRu9KlrgUaEi4296V+27Vc/GP2/BUEdhSlwyBfuk6K9+JR52nZB9BU5sG
1KhUKcskUZBflCqO9iLubAw81KgxtqI3JkZlOYwM7EJqsC5XzaM2EcSKrb9znXQu
JHejvpvcjsLyA5V5L5PXGB062YD8itzLP8sDddX3TilV2hWHr9qzKb1pCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1Q/CHxl4+3O3XLBZLxfgNBd1xgMB8GA1UdIwQY
MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt
MzQxMWM2ZmI0ZmNhLzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh
LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcqTWvb/
BapGnFDcVdM4RIi4VzLe1ojpeZ/OjfwDO4iI7NTrqh5AtVyKFeIByCu7kkozKXcb
mKDymsSZmwy4+Pz4IKSVjixZCMy/7vmymLtSXo7moLIqZHHbyTQGW364Fuz+9cnv
2VHameTFeKqgMlBScN39vbygBhsJ+1OVuHEuvt7Av/js/7b3ydwqLaJOw1pwvse6
CB6ZKCbWS9KERpj8YXfBRMKYFr10QhAmo8qYSrcBt4FzXIgjKfLAWi+e6Lxz5eDR
Xb4J4x15x7nOz/7u0B9Md91kgEonDKd6wbrnbq5QB3BoTv0MAr+Vy72q4WZoRuZw
IxHcn66ciwajfA==
-----END CERTIFICATE-----
Generated at Tue May 6 12:51:52 2025 by rpki-client