Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: lho8SaWXu0l+CGf5CaYS+iImb9kPItKVS/FgSm7Tohg=
Subject key identifier: D6:6B:2E:EC:94:DD:D5:DD:42:9A:0D:3A:6B:4C:9C:52:08:B5:F8:3A
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 01968623CDFC0DAF0EB2F8C68E3C820D6EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 1126
Signing time: Wed 30 Apr 2025 10:00:15 +0000
Manifest this update: Wed 30 Apr 2025 10:00:15 +0000
Manifest next update: Thu 01 May 2025 10:00:15 +0000
Files and hashes: 1: Te1smkaZFoPIXpDeDnkA_3SYuF4.roa (hash: fsg7fcR1+A1zfqsZoPgI6UandEUlSTg2/PWpSOpOTeg=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: 1xBdICmGaEiMgYioe6j48JfQR0sWtQRdUxxVt0YwtVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:cd:fc:0d:af:0e:b2:f8:c6:8e:3c:82:0d:6e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Apr 30 10:00:15 2025 GMT
Not After : May 1 10:00:15 2025 GMT
Subject: CN=d66b2eec94ddd5dd429a0d3a6b4c9c5208b5f83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:13:9c:41:d8:9d:30:3f:0c:16:9e:e7:31:
45:67:b6:11:56:29:4d:1e:66:6e:3c:29:a2:c1:a3:
f2:08:4a:2b:bb:50:60:3e:20:66:ab:03:88:0e:34:
29:94:37:17:ed:6c:a4:01:6b:db:b7:96:ff:1c:70:
cc:a0:23:32:70:58:c4:58:d0:b6:bc:3c:1a:08:48:
2f:43:38:82:15:d2:5e:7c:c7:3b:84:05:05:04:84:
74:88:ec:71:57:96:0c:51:b8:eb:e0:36:8a:f0:24:
9a:f5:04:1a:bb:fb:b8:75:a7:cd:b1:01:67:34:ed:
2e:75:c6:85:23:93:70:e5:c9:a3:62:1d:8c:c4:fe:
de:02:f3:c7:3a:02:64:d1:6b:a4:8f:ea:40:36:f9:
56:6b:3b:9f:bc:65:c2:20:dd:11:40:c6:73:cf:68:
0f:8c:71:19:4a:ca:59:62:09:19:95:ae:c9:59:3d:
f6:be:9a:34:8b:10:a4:cf:b2:77:65:61:71:ab:4e:
7d:c0:41:cc:b8:34:dd:7e:00:6a:61:07:74:64:ea:
fb:cb:74:a4:57:52:10:d0:2f:b8:c9:0e:a4:7f:11:
b6:7a:97:5c:0f:cf:b9:3f:56:c3:51:de:b2:1c:b3:
37:2e:fb:83:ed:cb:54:6b:2b:56:9c:48:fe:7a:42:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:2E:EC:94:DD:D5:DD:42:9A:0D:3A:6B:4C:9C:52:08:B5:F8:3A
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c0:fc:b5:67:4e:7a:cd:1b:dd:a1:03:04:46:6f:36:a7:6b:
74:f8:54:2d:16:3f:b5:69:81:90:0c:74:73:40:b3:c6:d5:88:
54:4c:57:41:61:17:68:41:32:4f:24:de:f0:e8:f2:13:9e:d2:
63:8f:fe:fe:49:95:f1:01:85:7c:b3:07:7c:4e:f9:15:de:13:
48:0e:c2:ab:da:9e:02:f5:13:92:49:a3:d2:c2:8e:1c:3a:93:
82:9b:37:7d:9b:ad:19:db:bd:95:7f:ca:db:52:16:19:1b:8e:
4f:9e:e6:ca:b4:89:5c:93:50:94:29:ee:5b:70:df:f1:62:22:
2f:01:e1:48:27:9f:39:f4:55:9d:63:72:02:05:d1:c9:88:c4:
68:73:76:95:06:e8:12:e8:e4:c9:69:81:95:ed:f5:16:d4:7e:
1c:37:85:c7:a5:95:09:7e:c8:af:0e:61:71:a0:54:ce:89:a9:
21:d1:cf:ce:75:95:d8:ed:e9:9e:8f:12:1b:97:06:a6:ac:40:
8d:c2:7c:0e:1f:c8:47:c3:c0:2e:3d:1d:51:74:4e:44:8c:77:
43:ba:59:f1:3f:ca:49:64:61:65:dc:6c:8d:08:d6:9d:1a:f5:
7d:95:7c:a5:bf:be:c0:bf:df:4b:28:9f:9b:22:34:f4:88:b0:
1a:d2:53:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGI838Da8OsvjGjjyCDW7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjUwNDMwMTAwMDE1WhcNMjUwNTAxMTAwMDE1WjAzMTEwLwYDVQQD
EyhkNjZiMmVlYzk0ZGRkNWRkNDI5YTBkM2E2YjRjOWM1MjA4YjVmODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfETnEHYnTA/DBae5zFFZ7YRVilN
HmZuPCmiwaPyCEoru1BgPiBmqwOIDjQplDcX7WykAWvbt5b/HHDMoCMycFjEWNC2
vDwaCEgvQziCFdJefMc7hAUFBIR0iOxxV5YMUbjr4DaK8CSa9QQau/u4dafNsQFn
NO0udcaFI5Nw5cmjYh2MxP7eAvPHOgJk0Wukj+pANvlWazufvGXCIN0RQMZzz2gP
jHEZSspZYgkZla7JWT32vpo0ixCkz7J3ZWFxq059wEHMuDTdfgBqYQd0ZOr7y3Sk
V1IQ0C+4yQ6kfxG2epdcD8+5P1bDUd6yHLM3LvuD7ctUaytWnEj+ekKV8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZrLuyU3dXdQpoNOmtMnFIItfg6MB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcD8tWdO
es0b3aEDBEZvNqdrdPhULRY/tWmBkAx0c0CzxtWIVExXQWEXaEEyTyTe8OjyE57S
Y4/+/kmV8QGFfLMHfE75Fd4TSA7Cq9qeAvUTkkmj0sKOHDqTgps3fZutGdu9lX/K
21IWGRuOT57myrSJXJNQlCnuW3Df8WIiLwHhSCefOfRVnWNyAgXRyYjEaHN2lQbo
EujkyWmBle31FtR+HDeFx6WVCX7Irw5hcaBUzompIdHPznWV2O3pno8SG5cGpqxA
jcJ8Dh/IR8PALj0dUXRORIx3Q7pZ8T/KSWRhZdxsjQjWnRr1fZV8pb++wL/fSyif
myI09IiwGtJTBA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:34:02 2025 by rpki-client