Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: DbOK/a3V2GXUkIsb2hvDCWg2LHhV+pOaBLn+O0Up+Po=
Subject key identifier: 33:C2:7A:83:E4:A8:42:78:8A:2D:CD:80:91:03:77:3B:6F:ED:B4:BB
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0196730B450C71B3A19884BB2CC5CEB13650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 151B
Signing time: Sat 26 Apr 2025 17:00:40 +0000
Manifest this update: Sat 26 Apr 2025 17:00:40 +0000
Manifest next update: Sun 27 Apr 2025 17:00:40 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: 7TRiwLDjpKarobSmzHtQZr/qSpoPh8H4H3aHJlvEtbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:45:0c:71:b3:a1:98:84:bb:2c:c5:ce:b1:36:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Apr 26 17:00:40 2025 GMT
Not After : Apr 27 17:00:40 2025 GMT
Subject: CN=33c27a83e4a842788a2dcd809103773b6fedb4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:89:c7:34:da:7d:16:b0:72:5a:8e:05:08:33:
77:2c:3c:8a:f6:0d:f7:7a:88:41:99:12:ca:80:57:
14:95:04:fc:b4:22:fb:22:d0:2e:2a:dd:36:90:75:
d2:3b:f2:05:5d:d7:4e:1f:ab:99:ba:f2:5a:69:f8:
c6:e4:da:f7:9d:72:e4:da:69:dc:ab:64:fa:c2:d8:
e6:f3:2b:d0:fd:24:98:64:58:9f:ca:c5:46:54:7f:
df:73:42:80:ed:fe:5a:65:00:0c:40:07:0c:f1:a7:
7a:e6:2d:23:36:c2:1c:e5:f7:06:4f:44:45:49:d3:
11:3f:97:11:5e:e7:36:e4:95:a7:e3:a7:ac:2b:bc:
39:cf:68:d7:24:f7:c8:98:48:21:e4:61:fe:e9:fc:
0b:33:4f:0d:8b:50:55:b3:a9:0e:73:b3:05:59:29:
b1:12:8c:22:9a:11:92:24:f0:74:58:41:5e:23:da:
fe:a8:d9:01:c8:57:19:d7:10:d6:54:7c:42:09:74:
a5:21:00:dc:77:8d:63:d0:8b:9e:5b:23:4c:c5:3a:
31:f6:b0:08:5d:2f:68:a6:8d:c2:62:f1:55:4a:01:
d8:57:86:58:fa:34:1b:ad:fe:b2:d5:87:24:ab:f6:
1a:22:42:2e:b3:f6:7d:d8:0d:b4:22:69:c6:5b:e6:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:7A:83:E4:A8:42:78:8A:2D:CD:80:91:03:77:3B:6F:ED:B4:BB
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:60:4c:48:98:9c:cb:1b:1f:95:59:86:61:b2:8f:9f:ea:85:
2c:76:26:67:5b:5e:e8:3c:1b:5c:79:aa:39:40:80:86:f7:6c:
d2:d1:ee:d0:ff:36:6e:8b:64:dc:9b:24:98:e0:5a:8d:a3:b9:
48:6d:8c:e6:c5:2d:15:99:22:f4:2a:db:9b:79:0d:1b:eb:2c:
fe:77:06:14:d7:dc:e8:be:3f:69:2d:4e:a9:8b:bf:b7:11:6c:
80:85:f9:7b:ff:fd:4a:0e:fd:d5:8e:7a:02:e9:59:0d:45:13:
bd:c7:dd:28:ee:c9:fa:ea:07:96:52:f1:5f:a3:44:75:10:92:
02:b3:47:35:4d:75:7b:3e:a7:1c:35:e3:db:67:d6:9a:ab:e1:
53:7e:86:51:4f:93:71:19:df:0a:ed:13:87:ba:86:9f:43:45:
2a:95:11:7c:06:88:65:f9:58:8a:4c:c8:07:e9:f8:00:10:20:
f1:40:ac:29:55:b1:dc:58:37:02:d4:ef:04:a3:d3:14:fb:a8:
e1:6e:ac:78:d6:7d:2d:03:c5:18:e1:e9:2f:12:2b:07:a6:2c:
36:9f:fe:5e:2e:a2:d2:56:a2:1a:7f:7c:f7:f7:67:cf:c4:e6:
e3:f6:05:03:cf:a3:dd:d3:90:48:16:24:97:29:66:12:df:e0:
ef:ad:94:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzC0UMcbOhmIS7LMXOsTZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjEzMDhjNmE5NzdkNWNiOTAzYmYyNWE5NjMwOGIwZThj
ZTNiNDYwHhcNMjUwNDI2MTcwMDQwWhcNMjUwNDI3MTcwMDQwWjAzMTEwLwYDVQQD
EygzM2MyN2E4M2U0YTg0Mjc4OGEyZGNkODA5MTAzNzczYjZmZWRiNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94nHNNp9FrByWo4FCDN3LDyK9g33
eohBmRLKgFcUlQT8tCL7ItAuKt02kHXSO/IFXddOH6uZuvJaafjG5Nr3nXLk2mnc
q2T6wtjm8yvQ/SSYZFifysVGVH/fc0KA7f5aZQAMQAcM8ad65i0jNsIc5fcGT0RF
SdMRP5cRXuc25JWn46esK7w5z2jXJPfImEgh5GH+6fwLM08Ni1BVs6kOc7MFWSmx
EowimhGSJPB0WEFeI9r+qNkByFcZ1xDWVHxCCXSlIQDcd41j0IueWyNMxTox9rAI
XS9opo3CYvFVSgHYV4ZY+jQbrf6y1Yckq/YaIkIus/Z92A20ImnGW+bqaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPCeoPkqEJ4ii3NgJEDdztv7bS7MB8GA1UdIwQY
MBaAFIuxMIxql31cuQO/JaljCLDozjtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMt
MTAxYWJkNzM5MWE2LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMtMTAxYWJkNzM5MWE2
LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmBMSJic
yxsflVmGYbKPn+qFLHYmZ1te6DwbXHmqOUCAhvds0tHu0P82botk3JskmOBajaO5
SG2M5sUtFZki9Crbm3kNG+ss/ncGFNfc6L4/aS1OqYu/txFsgIX5e//9Sg791Y56
AulZDUUTvcfdKO7J+uoHllLxX6NEdRCSArNHNU11ez6nHDXj22fWmqvhU36GUU+T
cRnfCu0Th7qGn0NFKpURfAaIZflYikzIB+n4ABAg8UCsKVWx3Fg3AtTvBKPTFPuo
4W6seNZ9LQPFGOHpLxIrB6YsNp/+Xi6i0laiGn989/dnz8Tm4/YFA8+j3dOQSBYk
lylmEt/g762UtA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:31 2025 by rpki-client