Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
File: E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json)
Hash identifier: trRuOgpDZeybJDCw0gfFX8chwPupJlMS0t3OoikYsSw=
Subject key identifier: FF:4C:4F:D1:E6:2D:9E:0F:03:A2:28:63:68:6A:2F:D5:25:B1:1A:84
Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
Certificate issuer: /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Certificate serial: 0196808FE390DB5F248F8DFCBBED7967B924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
Manifest number: 0160
Signing time: Tue 29 Apr 2025 08:00:35 +0000
Manifest this update: Tue 29 Apr 2025 08:00:35 +0000
Manifest next update: Wed 30 Apr 2025 08:00:35 +0000
Files and hashes: 1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: JBvRT8BcNYO7Jh/Usg9+OaiOjALCnvwmjkuXHA7QmXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:e3:90:db:5f:24:8f:8d:fc:bb:ed:79:67:b9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Validity
Not Before: Apr 29 08:00:35 2025 GMT
Not After : Apr 30 08:00:35 2025 GMT
Subject: CN=ff4c4fd1e62d9e0f03a22863686a2fd525b11a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:92:d7:aa:28:62:48:b8:31:0d:47:75:b0:
1d:a8:93:e1:c3:7e:88:65:97:15:34:d8:4d:a7:34:
ab:a2:31:18:a7:a0:40:73:c3:b2:06:61:46:8d:26:
e8:fd:10:e3:3a:1b:63:be:e2:ba:08:31:7a:cf:6e:
9a:30:f8:b3:eb:c8:d2:b8:81:c9:c3:dc:85:4b:55:
66:51:ce:72:2b:30:be:6c:44:15:19:01:64:18:8a:
6f:8b:d4:aa:a8:00:c3:77:e8:2e:1d:91:26:a6:40:
14:d2:f8:f4:75:b9:08:0a:a1:3f:5a:42:53:f5:3c:
37:39:e4:c2:15:35:6a:64:d1:12:4a:a1:ae:ba:7b:
09:22:96:d1:b2:9e:30:62:0e:b2:c5:91:d9:42:9c:
cc:d3:8d:f7:41:a8:ae:46:1b:fd:48:ec:19:5e:97:
00:cd:65:de:01:6f:31:26:99:b8:17:1f:f6:44:ac:
1b:97:bb:80:a3:49:1e:fe:a0:92:f1:c1:2a:3c:9f:
cc:6e:0c:31:04:6c:d0:bc:06:ff:98:e7:1f:22:92:
ad:d0:2f:bd:c0:8f:3a:e9:e8:4b:e7:0c:3e:cb:af:
99:90:8b:7e:53:2e:6e:0c:98:02:a2:8e:33:64:e8:
48:b8:a0:c6:39:c8:8f:19:bd:17:32:84:bd:79:eb:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:4F:D1:E6:2D:9E:0F:03:A2:28:63:68:6A:2F:D5:25:B1:1A:84
X509v3 Authority Key Identifier:
keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8d:21:fd:bd:1e:35:05:36:39:66:39:c1:ee:ed:77:fb:34:
93:6f:ca:1b:c0:ca:97:7f:1b:ba:06:6d:2c:16:3e:f0:8f:d6:
77:4f:16:89:07:e8:cb:e7:db:42:01:06:09:c1:ac:26:4c:d2:
dd:5d:61:9e:4d:fd:40:e7:c2:18:72:90:8e:0a:81:7d:86:54:
de:1f:60:72:b1:47:c0:31:0d:de:cb:77:0e:fc:06:9b:be:86:
4c:ce:03:f9:d0:35:d8:47:c5:29:97:3d:3d:46:7e:60:fd:0a:
de:c9:d3:99:22:be:98:fb:dc:52:68:2a:f4:68:83:b6:f0:66:
bd:db:bb:8e:d6:38:e5:ac:7f:7e:a8:cf:ba:18:af:bf:34:55:
0c:d2:aa:f3:e1:d5:91:10:2d:d9:78:86:9d:a5:1e:dd:fb:53:
94:f5:55:8a:57:8c:ec:f6:75:ae:9a:cc:5a:1d:25:6f:16:c3:
02:27:f5:d3:2f:34:b5:44:15:88:36:0f:21:97:d8:2c:ea:50:
5b:83:d7:8b:5c:8d:1b:7e:84:8c:7b:aa:18:62:03:64:db:11:
c2:b5:89:33:1a:7e:5e:c2:e5:71:28:f3:d7:58:5a:a1:73:02:
0c:cd:2a:a3:d9:ad:6b:5b:af:c6:4a:08:43:99:2f:ce:b9:2d:
3f:57:7a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAj+OQ218kj438u+15Z7kkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjQyMWI4MmFiN2JiYTZlMmY1NWU5MDJhOWZiODFmYTNh
ZjI5OGYwHhcNMjUwNDI5MDgwMDM1WhcNMjUwNDMwMDgwMDM1WjAzMTEwLwYDVQQD
EyhmZjRjNGZkMWU2MmQ5ZTBmMDNhMjI4NjM2ODZhMmZkNTI1YjExYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD6S16ooYki4MQ1HdbAdqJPhw36I
ZZcVNNhNpzSrojEYp6BAc8OyBmFGjSbo/RDjOhtjvuK6CDF6z26aMPiz68jSuIHJ
w9yFS1VmUc5yKzC+bEQVGQFkGIpvi9SqqADDd+guHZEmpkAU0vj0dbkICqE/WkJT
9Tw3OeTCFTVqZNESSqGuunsJIpbRsp4wYg6yxZHZQpzM0433QaiuRhv9SOwZXpcA
zWXeAW8xJpm4Fx/2RKwbl7uAo0ke/qCS8cEqPJ/MbgwxBGzQvAb/mOcfIpKt0C+9
wI866ehL5ww+y6+ZkIt+Uy5uDJgCoo4zZOhIuKDGOciPGb0XMoS9eevqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9MT9HmLZ4PA6IoY2hqL9UlsRqEMB8GA1UdIwQY
MBaAFBO0Ibgqt7um4vVekCqfuB+jrymPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDct
ZGZhNzA3OTQwNTM3LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDctZGZhNzA3OTQwNTM3
LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI0h/b0e
NQU2OWY5we7td/s0k2/KG8DKl38bugZtLBY+8I/Wd08WiQfoy+fbQgEGCcGsJkzS
3V1hnk39QOfCGHKQjgqBfYZU3h9gcrFHwDEN3st3DvwGm76GTM4D+dA12EfFKZc9
PUZ+YP0K3snTmSK+mPvcUmgq9GiDtvBmvdu7jtY45ax/fqjPuhivvzRVDNKq8+HV
kRAt2XiGnaUe3ftTlPVVileM7PZ1rprMWh0lbxbDAif10y80tUQViDYPIZfYLOpQ
W4PXi1yNG36EjHuqGGIDZNsRwrWJMxp+XsLlcSjz11haoXMCDM0qo9mta1uvxkoI
Q5kvzrktP1d6JQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:23 2025 by rpki-client