Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: BoB+fWjhHqThtb25W4ToTdBiRpo/n5L5yOwFdkPVv5E=
Subject key identifier: 3E:97:08:51:DC:2C:97:D9:5B:85:43:A3:66:C4:28:CB:7E:3A:4A:D2
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 0196895CEDC6002CA90D165DAC2B2EC26F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 13CF
Signing time: Thu 01 May 2025 01:01:30 +0000
Manifest this update: Thu 01 May 2025 01:01:30 +0000
Manifest next update: Fri 02 May 2025 01:01:30 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: 9sfTjPDYvNIqv715CqfhDp1FrWenZL8SepRw4pWasy8=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:ed:c6:00:2c:a9:0d:16:5d:ac:2b:2e:c2:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: May 1 01:01:30 2025 GMT
Not After : May 2 01:01:30 2025 GMT
Subject: CN=3e970851dc2c97d95b8543a366c428cb7e3a4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:6a:69:c0:5e:bd:88:8d:12:e0:ca:b2:55:
fe:ef:0c:4b:3f:bb:e1:ea:d9:11:b1:a8:e2:cf:d0:
39:07:8b:be:ef:66:f6:83:1a:e8:4a:f3:27:b3:3d:
ea:2b:c4:05:2b:0d:22:66:9e:ce:43:db:e5:69:40:
1e:b9:ce:9b:14:a2:c2:e1:f5:c1:a3:b4:44:9c:f1:
18:df:db:ce:1a:fe:71:85:67:d4:8c:50:31:8d:6b:
11:db:ff:b1:86:e6:d6:fe:6d:74:cc:2e:d4:f3:45:
b1:6b:8c:1b:d5:13:f1:a1:6e:bf:7d:73:9a:0a:7b:
40:b4:34:b7:bc:33:cb:db:36:c9:37:59:00:c1:ec:
ec:00:38:33:52:5c:bd:04:34:f2:94:74:2c:09:96:
90:68:57:54:ab:28:7b:e5:05:60:aa:88:ee:24:00:
a5:4f:a1:55:30:05:62:ad:f8:37:21:1a:b9:58:aa:
04:f9:5c:6f:2c:82:dd:16:2f:c1:e8:81:0b:a0:e6:
c0:0b:42:ff:31:9f:74:9d:b7:98:79:63:d2:0d:8e:
84:dd:27:4f:05:7b:5e:8a:b4:86:0e:42:50:9f:3e:
a8:dc:25:37:99:d5:fb:49:4d:95:24:b4:59:76:c7:
81:84:dd:48:9d:49:f0:bf:36:62:de:09:94:11:c9:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:08:51:DC:2C:97:D9:5B:85:43:A3:66:C4:28:CB:7E:3A:4A:D2
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cf:f9:bd:35:26:6c:e4:e4:9a:11:97:ce:22:09:db:ce:46:
72:bd:75:7a:32:b1:39:5d:d3:4c:6b:d6:ce:58:b4:88:61:9f:
86:5d:07:0a:4c:6a:75:6d:b6:b7:ec:e3:d2:82:0f:91:8c:69:
4c:ef:fc:82:53:7f:e9:ee:74:4b:1f:d5:02:85:0a:c7:8a:66:
08:65:c5:00:ee:f8:0b:54:6d:a8:95:da:d2:23:b3:16:cb:62:
77:82:e2:ff:fd:8e:2b:84:86:08:02:00:f6:31:95:8d:70:63:
da:d8:ff:24:80:10:1a:36:10:59:94:fb:3c:3f:bf:42:79:60:
01:25:c8:16:7b:9f:80:4c:70:8b:c3:1e:89:a1:c9:de:92:99:
d5:34:3b:7a:4f:25:e2:96:71:1d:0a:5b:7d:33:f4:bd:2b:5a:
45:07:ab:94:11:1b:19:85:50:fc:1f:9b:e5:e0:48:68:c5:57:
01:92:9b:c5:5c:b5:e6:1f:dd:12:78:87:b9:6b:80:d3:66:fc:
11:6d:7a:95:3f:08:15:38:90:3c:8d:ff:38:31:e8:c7:84:3e:
fb:c8:cf:5c:83:7a:af:fd:8a:fa:1e:bb:94:58:f6:60:75:e0:
0a:4d:03:0b:5e:51:96:67:81:d1:e0:9c:9a:2b:24:f5:9d:c4:
27:7d:04:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXO3GACypDRZdrCsuwm+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDViM2FmMDA2NDk4MWU5NmJiNWUyN2Q4ZjA0ZDg2ZTYz
MDZjZmEwHhcNMjUwNTAxMDEwMTMwWhcNMjUwNTAyMDEwMTMwWjAzMTEwLwYDVQQD
EygzZTk3MDg1MWRjMmM5N2Q5NWI4NTQzYTM2NmM0MjhjYjdlM2E0YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/JqacBevYiNEuDKslX+7wxLP7vh
6tkRsajiz9A5B4u+72b2gxroSvMnsz3qK8QFKw0iZp7OQ9vlaUAeuc6bFKLC4fXB
o7REnPEY39vOGv5xhWfUjFAxjWsR2/+xhubW/m10zC7U80Wxa4wb1RPxoW6/fXOa
CntAtDS3vDPL2zbJN1kAwezsADgzUly9BDTylHQsCZaQaFdUqyh75QVgqojuJACl
T6FVMAVirfg3IRq5WKoE+VxvLILdFi/B6IELoObAC0L/MZ90nbeYeWPSDY6E3SdP
BXteirSGDkJQnz6o3CU3mdX7SU2VJLRZdseBhN1InUnwvzZi3gmUEcn7uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6XCFHcLJfZW4VDo2bEKMt+OkrSMB8GA1UdIwQY
MBaAFO7Vs68AZJgelrteJ9jwTYbmMGz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAt
MDMwYWNkM2FlMzM2LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAtMDMwYWNkM2FlMzM2
LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADc/5vTUm
bOTkmhGXziIJ285Gcr11ejKxOV3TTGvWzli0iGGfhl0HCkxqdW22t+zj0oIPkYxp
TO/8glN/6e50Sx/VAoUKx4pmCGXFAO74C1RtqJXa0iOzFstid4Li//2OK4SGCAIA
9jGVjXBj2tj/JIAQGjYQWZT7PD+/QnlgASXIFnufgExwi8MeiaHJ3pKZ1TQ7ek8l
4pZxHQpbfTP0vStaRQerlBEbGYVQ/B+b5eBIaMVXAZKbxVy15h/dEniHuWuA02b8
EW16lT8IFTiQPI3/ODHox4Q++8jPXIN6r/2K+h67lFj2YHXgCk0DC15RlmeB0eCc
misk9Z3EJ30EjA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:18:02 2025 by rpki-client