Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: NlRlvZUPt+rpjD6oHFox+VL8wdNerNvY57AN9PQIGGw=
Subject key identifier: 5F:8A:3D:86:16:1C:61:37:A9:B6:E5:C6:A7:F7:50:8D:84:45:D1:1C
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 01967AFB71BE0615211D1BCA30DCF9B985EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 06:00:21 +0000
Manifest this update: Mon 28 Apr 2025 06:00:21 +0000
Manifest next update: Tue 29 Apr 2025 06:00:21 +0000
Files and hashes: 1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: kWD8kvELt9kxpBlCvr6mQ/bqOJIbiaSp4yzvF9ksvlE=)
2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:71:be:06:15:21:1d:1b:ca:30:dc:f9:b9:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Apr 28 06:00:21 2025 GMT
Not After : Apr 29 06:00:21 2025 GMT
Subject: CN=5f8a3d86161c6137a9b6e5c6a7f7508d8445d11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:30:9a:cc:00:4f:24:a1:53:cc:62:18:25:
3b:a5:07:62:71:76:78:33:2b:fd:ba:2e:91:95:9c:
7e:f1:b8:c0:14:ef:67:e8:50:f2:7d:53:ed:a0:9a:
71:05:92:21:01:d0:2f:46:12:23:38:48:93:94:2a:
51:a0:c1:da:a6:05:d7:36:57:77:5e:c1:31:9f:98:
bf:35:f0:3b:1c:31:d0:6a:a9:49:6c:83:ec:40:ab:
c6:ff:54:d2:b6:3b:e4:ee:57:fc:94:f8:e6:1c:0e:
0f:37:cb:e8:50:72:31:27:7c:0b:e4:0a:f4:bd:4e:
78:3d:86:95:4a:66:07:47:af:e2:d1:da:eb:f5:a8:
ed:ba:9e:ba:08:6c:b4:8d:10:be:c7:63:1c:7b:c1:
1a:80:64:ec:68:e6:42:16:96:d1:40:dc:d2:14:26:
cb:72:f3:cd:18:5c:0c:a5:f2:16:f4:70:d9:1e:9c:
31:71:11:db:1a:7f:d2:fe:cb:3e:c2:71:a6:0b:5c:
0d:41:d7:0c:44:9e:60:95:28:60:7e:67:fa:06:87:
75:04:6e:63:f4:74:ad:43:2b:1e:72:ce:06:c8:43:
e7:5c:aa:c2:83:7f:1e:a3:0b:d7:f6:f6:49:c0:d4:
13:27:e9:4e:c9:8b:28:84:db:c0:c9:32:b6:7a:2a:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:3D:86:16:1C:61:37:A9:B6:E5:C6:A7:F7:50:8D:84:45:D1:1C
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:6d:4a:7c:9a:1d:46:fe:42:6c:dd:db:fe:67:21:11:88:
8f:37:9e:c2:10:d8:d9:f9:92:87:f6:5a:fb:f8:4a:24:f6:50:
19:b7:8e:49:88:55:f1:77:15:7c:ab:90:eb:cb:7f:12:2a:00:
68:79:bc:6a:7e:64:67:68:1b:48:84:97:1a:4f:12:4f:c8:af:
aa:76:07:8b:3a:52:5e:4e:54:90:04:9e:f9:81:15:24:7a:3b:
ad:04:f6:be:6c:47:6b:45:02:6d:5b:ee:c6:d6:79:f5:a7:65:
a9:69:cd:00:fc:8f:23:6d:cb:35:79:74:50:e7:50:0d:a9:9f:
b7:02:c5:e7:8f:3e:d8:e3:db:e8:da:44:10:75:09:f5:ed:d2:
99:26:8f:dd:88:97:68:ea:c6:a2:28:a4:5d:9d:76:79:cb:04:
0e:0b:b4:f2:1b:f6:eb:f0:1d:00:ae:20:7d:ba:8b:9b:ed:83:
50:82:3b:12:ac:21:48:fd:7a:d2:76:bd:80:2c:9e:4f:51:96:
2e:c8:69:21:dd:c3:ca:c5:b8:94:c5:9a:88:99:14:d0:54:c2:
9b:7d:13:cd:d8:84:0a:0e:80:c0:18:45:1a:cb:00:61:ac:c9:
a2:07:7c:03:ed:85:bf:1e:81:43:09:bc:15:6c:cc:f8:2b:09:
13:fe:61:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6+3G+BhUhHRvKMNz5uYXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2E1YWYxOTZiOGEwZWE5NjBjMjhmNmIzZTc1MjkxYzdl
ODYxY2QwHhcNMjUwNDI4MDYwMDIxWhcNMjUwNDI5MDYwMDIxWjAzMTEwLwYDVQQD
Eyg1ZjhhM2Q4NjE2MWM2MTM3YTliNmU1YzZhN2Y3NTA4ZDg0NDVkMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCIwmswATyShU8xiGCU7pQdicXZ4
Myv9ui6RlZx+8bjAFO9n6FDyfVPtoJpxBZIhAdAvRhIjOEiTlCpRoMHapgXXNld3
XsExn5i/NfA7HDHQaqlJbIPsQKvG/1TStjvk7lf8lPjmHA4PN8voUHIxJ3wL5Ar0
vU54PYaVSmYHR6/i0drr9ajtup66CGy0jRC+x2Mce8EagGTsaOZCFpbRQNzSFCbL
cvPNGFwMpfIW9HDZHpwxcRHbGn/S/ss+wnGmC1wNQdcMRJ5glShgfmf6Bod1BG5j
9HStQysecs4GyEPnXKrCg38eowvX9vZJwNQTJ+lOyYsohNvAyTK2eiqtHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+KPYYWHGE3qbblxqf3UI2ERdEcMB8GA1UdIwQY
MBaAFBB6WvGWuKDqlgwo9rPnUpHH6GHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjIt
ZjkyOWUyNTUxNjI3LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjItZjkyOWUyNTUxNjI3
LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKJtSnya
HUb+Qmzd2/5nIRGIjzeewhDY2fmSh/Za+/hKJPZQGbeOSYhV8XcVfKuQ68t/EioA
aHm8an5kZ2gbSISXGk8ST8ivqnYHizpSXk5UkASe+YEVJHo7rQT2vmxHa0UCbVvu
xtZ59adlqWnNAPyPI23LNXl0UOdQDamftwLF548+2OPb6NpEEHUJ9e3SmSaP3YiX
aOrGoiikXZ12ecsEDgu08hv26/AdAK4gfbqLm+2DUII7EqwhSP160na9gCyeT1GW
LshpId3DysW4lMWaiJkU0FTCm30TzdiECg6AwBhFGssAYazJogd8A+2Fvx6BQwm8
FWzM+CsJE/5hag==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:02:22 2025 by rpki-client