Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: Hc+DpyGsk+GdZhOoe6J6onAkiySUBvVCZXAQf03FkIY=
Subject key identifier: CE:B6:1C:5B:51:42:72:A2:C6:04:1B:F9:85:EB:5F:58:8B:47:AB:58
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 01968B816B35E624CE13A5AAC8A3DCF3C070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 1024
Signing time: Thu 01 May 2025 11:00:36 +0000
Manifest this update: Thu 01 May 2025 11:00:36 +0000
Manifest next update: Fri 02 May 2025 11:00:36 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: b/1ERzWHdeRNDDEBFm2+V2Hm0ZXGruIENA4K2tEfI98=)
2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:6b:35:e6:24:ce:13:a5:aa:c8:a3:dc:f3:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: May 1 11:00:36 2025 GMT
Not After : May 2 11:00:36 2025 GMT
Subject: CN=ceb61c5b514272a2c6041bf985eb5f588b47ab58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:e1:0e:a7:af:0e:0a:26:b3:92:37:70:bd:
cb:47:02:70:14:4d:28:3d:82:dc:78:2a:09:41:82:
32:1a:0d:db:d1:b6:3e:62:11:64:1d:50:65:bb:c3:
2d:06:cc:9f:66:30:24:0e:cb:7d:b0:db:0c:04:9a:
a5:19:f4:1e:bc:ac:e5:1a:88:dd:47:73:bf:b1:9f:
09:d3:08:aa:a3:09:c5:f7:74:fa:ae:4d:9d:dc:a0:
9e:db:7a:cc:73:bd:bb:58:e6:5e:85:e9:23:f0:cc:
72:c8:24:3b:ae:02:1f:c8:cd:94:85:2e:9f:1f:3d:
1e:72:35:a8:74:28:e8:71:61:b9:db:fa:74:54:7a:
d0:6d:0d:e6:9f:89:c0:28:3c:76:27:66:4d:59:89:
27:4d:c5:ff:f0:dd:95:dd:ed:3f:93:3f:08:49:1d:
46:60:99:df:09:34:4b:12:21:25:67:14:f0:73:e3:
0d:f2:ba:85:06:72:c4:c9:44:6b:f1:24:c7:f8:46:
cf:6f:c4:c1:38:36:42:55:02:f8:08:67:de:4d:99:
14:3e:88:41:a7:70:77:ae:63:8b:13:19:45:71:0b:
9a:88:cd:31:54:f4:96:ae:e8:16:c4:ef:30:69:a3:
65:02:8f:14:89:5e:41:6f:a5:28:c2:8c:74:c1:92:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:1C:5B:51:42:72:A2:C6:04:1B:F9:85:EB:5F:58:8B:47:AB:58
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:16:cc:68:05:31:38:4a:3c:b9:d2:7b:1f:4b:de:87:bc:e9:
0d:3b:73:54:88:23:5a:69:1b:91:5b:64:6f:41:b4:1a:1c:75:
99:a5:99:87:9a:96:3b:cb:94:af:43:45:8d:ae:8f:9f:34:91:
c6:7b:4b:5f:b2:1b:f3:eb:b1:86:f2:72:5e:ec:f2:92:70:38:
82:27:83:fc:b6:7a:30:25:36:99:9d:a5:f3:c0:9e:56:75:7e:
53:7e:99:01:69:d1:2c:d4:da:8d:a0:b4:df:d1:6c:5b:23:eb:
b9:5a:87:4c:c4:5c:6f:c4:f8:91:a8:84:41:7c:98:3a:8d:3e:
9b:62:3c:81:bf:f3:33:60:c3:7d:df:89:fb:3c:e1:a8:ab:74:
ac:39:d9:9d:e2:f5:c8:56:95:ba:fe:f5:9a:46:6e:6d:67:a5:
bf:06:71:e9:96:db:9c:50:4d:47:1d:92:60:64:d5:94:61:e2:
08:52:dc:81:8a:fb:d5:ad:e5:e6:8a:ea:9f:d8:75:08:1f:2c:
18:dc:97:f9:87:34:c8:04:1e:4c:1a:90:42:8f:2e:ec:3d:18:
58:7a:22:35:64:aa:53:09:65:a1:b0:ba:64:e1:03:97:17:c0:
14:99:0c:4d:1f:40:41:f1:de:ce:ed:46:41:33:77:40:60:be:
51:b8:16:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLgWs15iTOE6WqyKPc88BwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjUwNTAxMTEwMDM2WhcNMjUwNTAyMTEwMDM2WjAzMTEwLwYDVQQD
EyhjZWI2MWM1YjUxNDI3MmEyYzYwNDFiZjk4NWViNWY1ODhiNDdhYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3fhDqevDgoms5I3cL3LRwJwFE0o
PYLceCoJQYIyGg3b0bY+YhFkHVBlu8MtBsyfZjAkDst9sNsMBJqlGfQevKzlGojd
R3O/sZ8J0wiqownF93T6rk2d3KCe23rMc727WOZehekj8MxyyCQ7rgIfyM2UhS6f
Hz0ecjWodCjocWG52/p0VHrQbQ3mn4nAKDx2J2ZNWYknTcX/8N2V3e0/kz8ISR1G
YJnfCTRLEiElZxTwc+MN8rqFBnLEyURr8STH+EbPb8TBODZCVQL4CGfeTZkUPohB
p3B3rmOLExlFcQuaiM0xVPSWrugWxO8waaNlAo8UiV5Bb6Uowox0wZKbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM62HFtRQnKixgQb+YXrX1iLR6tYMB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxbMaAUx
OEo8udJ7H0veh7zpDTtzVIgjWmkbkVtkb0G0Ghx1maWZh5qWO8uUr0NFja6PnzSR
xntLX7Ib8+uxhvJyXuzyknA4gieD/LZ6MCU2mZ2l88CeVnV+U36ZAWnRLNTajaC0
39FsWyPruVqHTMRcb8T4kaiEQXyYOo0+m2I8gb/zM2DDfd+J+zzhqKt0rDnZneL1
yFaVuv71mkZubWelvwZx6ZbbnFBNRx2SYGTVlGHiCFLcgYr71a3l5orqn9h1CB8s
GNyX+Yc0yAQeTBqQQo8u7D0YWHoiNWSqUwllobC6ZOEDlxfAFJkMTR9AQfHezu1G
QTN3QGC+UbgW3Q==
-----END CERTIFICATE-----
Generated at Thu May 1 15:05:40 2025 by rpki-client