Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File: 7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier: vY1jveYShNo8XSGp9HIynjHrNkRlTwcp9sDG0mmGPBc=
Subject key identifier: B2:F3:8E:6E:48:85:30:47:4F:2C:BB:5F:62:F4:86:A5:39:CF:97:84
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer: /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial: 01967E6AA391737784CA1CD8A49186AC0C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number: 0657
Signing time: Mon 28 Apr 2025 22:00:40 +0000
Manifest this update: Mon 28 Apr 2025 22:00:40 +0000
Manifest next update: Tue 29 Apr 2025 22:00:40 +0000
Files and hashes: 1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: Gd47CB8Mw8g0kasXGLHnp70WvVyRS7JHJ2i1KKUQmLg=)
2: vLdBJDezpJno-D8_Q7lIDU0Du3U.roa (hash: dLqRsVS/QG1E17yczM1Bj1D5q8gcGXc21nKm6H/uN8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:a3:91:73:77:84:ca:1c:d8:a4:91:86:ac:0c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Validity
Not Before: Apr 28 22:00:40 2025 GMT
Not After : Apr 29 22:00:40 2025 GMT
Subject: CN=b2f38e6e488530474f2cbb5f62f486a539cf9784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:c2:c1:70:a5:e6:4b:98:20:8a:3f:c0:11:
15:f6:78:20:45:72:58:aa:3b:7f:12:76:de:50:be:
e0:79:ed:5b:fb:d2:3a:2c:a2:c1:c5:e0:99:c0:80:
53:62:72:30:cd:ca:d3:18:38:0e:f4:61:72:53:78:
11:c6:14:cb:2e:29:c6:47:57:ba:b2:d3:80:a1:99:
04:aa:68:71:15:37:ce:a3:1f:d4:c0:c0:7d:b0:f2:
2e:9b:93:14:db:cf:47:ad:6b:e8:92:e5:8e:3d:ed:
37:d7:40:34:1a:44:20:10:8c:98:4e:8a:5f:3a:60:
a2:9a:39:13:75:e8:97:a7:7a:65:52:d3:7d:5f:b1:
a4:0f:8c:78:68:6f:49:d6:17:41:47:25:43:f5:39:
bf:71:76:42:57:c7:6c:a3:f9:28:ef:4d:fd:a0:95:
a7:79:0f:1b:34:bc:d1:14:b4:58:27:51:bb:92:64:
1a:79:82:aa:de:7e:95:72:77:63:1c:f9:23:e5:7a:
2d:3c:de:3c:d7:f6:1a:a0:91:35:8a:70:10:6f:14:
01:07:4f:fe:ff:1e:41:63:4f:0a:8b:95:c4:bd:d3:
c2:0f:79:10:ce:1d:df:65:6d:a3:39:5e:b6:82:5c:
29:45:46:92:3e:62:8c:2a:9e:86:a7:6e:e9:4d:f0:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F3:8E:6E:48:85:30:47:4F:2C:BB:5F:62:F4:86:A5:39:CF:97:84
X509v3 Authority Key Identifier:
keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:42:83:f7:f1:82:bc:fb:a9:87:7b:a9:44:21:f9:66:61:ef:
02:57:be:0c:ce:bd:a8:6b:7d:04:07:0d:59:27:d1:57:1e:6c:
07:41:db:ad:ae:a9:d3:ab:e3:38:f3:d3:4d:cc:37:71:6c:4c:
79:1a:80:65:70:fe:3a:9b:41:0c:92:68:8b:0e:ee:b7:a3:1a:
5c:47:ae:65:16:c7:07:4f:4b:0f:47:85:ce:87:52:c6:f5:3a:
25:79:8b:2c:28:b7:c0:1a:fd:76:aa:68:ff:1a:78:f7:64:ba:
d9:68:3f:50:a2:d4:ba:55:f5:14:58:a4:d0:3d:cb:cc:a1:63:
a8:12:18:5a:2e:5f:97:67:22:fc:d3:c8:40:27:d6:f2:1a:13:
ab:bb:3b:ae:4b:8b:5d:fe:eb:ee:44:f1:43:3c:fb:db:36:ce:
cb:84:8e:84:d4:56:de:a7:dd:0a:22:6d:15:0f:90:5e:b3:23:
f2:6f:8b:fe:b5:af:80:38:70:69:be:09:48:bd:e3:5b:a1:82:
3c:d1:76:a2:bc:51:85:f0:64:f3:2d:29:a5:52:02:32:6b:43:
c1:fb:cf:3e:fc:87:23:4d:da:49:8b:48:7d:22:81:34:fa:2d:
36:6c:67:2e:1b:76:d3:33:1e:9c:db:a8:d1:8f:25:d5:e1:d8:
40:8f:c9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+aqORc3eEyhzYpJGGrAx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZWI0NDI0YWJkODZkNmVmNDhkYjllNzY0NmY1MzljNmQx
MGM4ODYwHhcNMjUwNDI4MjIwMDQwWhcNMjUwNDI5MjIwMDQwWjAzMTEwLwYDVQQD
EyhiMmYzOGU2ZTQ4ODUzMDQ3NGYyY2JiNWY2MmY0ODZhNTM5Y2Y5Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjanCwXCl5kuYIIo/wBEV9nggRXJY
qjt/EnbeUL7gee1b+9I6LKLBxeCZwIBTYnIwzcrTGDgO9GFyU3gRxhTLLinGR1e6
stOAoZkEqmhxFTfOox/UwMB9sPIum5MU289HrWvokuWOPe0310A0GkQgEIyYTopf
OmCimjkTdeiXp3plUtN9X7GkD4x4aG9J1hdBRyVD9Tm/cXZCV8dso/ko7039oJWn
eQ8bNLzRFLRYJ1G7kmQaeYKq3n6VcndjHPkj5XotPN481/YaoJE1inAQbxQBB0/+
/x5BY08Ki5XEvdPCD3kQzh3fZW2jOV62glwpRUaSPmKMKp6Gp27pTfB3VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLzjm5IhTBHTyy7X2L0hqU5z5eEMB8GA1UdIwQY
MBaAFO3rRCSr2G1u9I2552RvU5xtEMiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjkt
MTZkM2EwZWE0OWFlLzEvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjktMTZkM2EwZWE0OWFl
LzEvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEKD9/GC
vPuph3upRCH5ZmHvAle+DM69qGt9BAcNWSfRVx5sB0Hbra6p06vjOPPTTcw3cWxM
eRqAZXD+OptBDJJoiw7ut6MaXEeuZRbHB09LD0eFzodSxvU6JXmLLCi3wBr9dqpo
/xp492S62Wg/UKLUulX1FFik0D3LzKFjqBIYWi5fl2ci/NPIQCfW8hoTq7s7rkuL
Xf7r7kTxQzz72zbOy4SOhNRW3qfdCiJtFQ+QXrMj8m+L/rWvgDhwab4JSL3jW6GC
PNF2orxRhfBk8y0ppVICMmtDwfvPPvyHI03aSYtIfSKBNPotNmxnLht20zMenNuo
0Y8l1eHYQI/JWg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:44:20 2025 by rpki-client