Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: 3SbZ1I64tRVjBXXTMvnW8X4ywQkHBj4TNREUnrFGZqE=
Subject key identifier: EA:CC:81:F1:3C:E5:1A:67:16:F6:7A:26:2A:24:A5:55:81:3A:F8:FB
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019676B157C4B3BE10FDFB0AED73FCC53372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 0EC2
Signing time: Sun 27 Apr 2025 10:00:55 +0000
Manifest this update: Sun 27 Apr 2025 10:00:55 +0000
Manifest next update: Mon 28 Apr 2025 10:00:55 +0000
Files and hashes: 1: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (hash: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: 9XUScl7eP7C8PR17qUrYc/kskn8sSdf+PFjbkBEwzcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:57:c4:b3:be:10:fd:fb:0a:ed:73:fc:c5:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Apr 27 10:00:55 2025 GMT
Not After : Apr 28 10:00:55 2025 GMT
Subject: CN=eacc81f13ce51a6716f67a262a24a555813af8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5a:a1:8d:2e:87:e4:41:a7:17:fe:a2:38:2b:
f3:72:ae:50:8c:01:44:bb:96:ef:3e:c0:fe:ec:51:
0b:61:3d:eb:ff:e8:6c:6e:17:67:5f:99:ff:a0:75:
a9:b1:06:37:27:05:4c:28:b1:ae:f6:8d:b0:82:29:
9f:75:df:03:2b:fb:fb:1f:20:0f:9c:64:c7:d1:c3:
78:9b:2b:27:f7:e4:a1:82:63:fb:db:06:84:bf:04:
0f:f2:39:e9:cb:71:50:06:7b:65:17:6c:29:01:53:
1c:71:7a:94:63:5a:cf:62:88:02:03:5c:61:b5:e3:
2a:70:fe:20:7f:7b:fa:d9:2b:34:2e:e3:19:de:10:
10:50:0c:9d:18:a5:54:56:a2:21:50:d3:44:e0:dc:
58:60:80:01:98:61:d9:f0:5f:c0:7e:9c:f2:c0:e8:
b8:46:30:e0:3f:ce:a6:70:74:eb:28:a8:58:9d:6b:
94:bf:fc:4b:dc:78:9a:66:7e:9d:51:8e:72:ce:70:
07:08:47:cf:4d:85:ec:d6:92:07:36:8d:94:e3:b7:
23:ad:a9:cd:82:f4:54:66:0a:90:d0:d1:c1:b2:f4:
ae:14:11:12:6a:57:1c:c7:8a:de:bd:32:20:c0:59:
08:8a:f4:46:ca:94:75:d1:eb:04:d9:7e:41:1f:c8:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CC:81:F1:3C:E5:1A:67:16:F6:7A:26:2A:24:A5:55:81:3A:F8:FB
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3c:bb:a7:8e:29:a6:c9:68:86:8c:9a:59:59:cc:93:d9:0d:
e6:23:b4:9e:84:ca:7a:52:9c:76:e7:20:6a:d2:e8:5d:61:09:
59:4c:7f:87:73:8d:bc:d6:a6:7b:06:08:5d:a8:90:61:34:4b:
36:2a:c5:50:55:f0:e2:17:8d:24:3b:8d:ef:0f:82:71:f4:f3:
d9:a2:11:f9:f0:2e:6d:d0:79:43:30:ff:f7:9b:8e:29:42:7e:
03:87:8f:87:97:02:6a:fe:72:b7:48:31:b2:be:26:a2:0d:05:
2b:6a:28:51:18:d9:4b:95:97:51:4b:41:e1:c0:4f:cb:9e:52:
04:17:ad:ca:fe:2e:54:e7:2f:9a:fb:32:1b:d0:b6:47:03:c4:
d6:ee:75:1c:f1:37:6e:8e:ff:0e:ff:d3:b4:51:18:d5:f9:b2:
c1:fb:b8:43:70:9c:b1:f7:ce:1a:6b:30:a8:7a:30:23:d7:12:
cc:3b:53:3f:0c:90:01:31:71:c1:70:51:48:a4:2e:4e:59:f8:
06:58:11:d3:ce:93:d7:6a:a3:58:ad:12:8e:ee:24:00:7a:a0:
98:82:7c:37:56:66:9f:ba:0f:3a:c2:a8:91:10:22:fe:b5:33:
fd:dc:83:8b:3c:6c:b8:e9:46:6b:51:f4:9f:e3:57:90:ae:2b:
a9:64:45:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sVfEs74Q/fsK7XP8xTNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjFlYWJiZTVlZTBjMDQ5NjgwZTJhYmM5NTUzNDM5ZWM2
NDNjMGIwHhcNMjUwNDI3MTAwMDU1WhcNMjUwNDI4MTAwMDU1WjAzMTEwLwYDVQQD
EyhlYWNjODFmMTNjZTUxYTY3MTZmNjdhMjYyYTI0YTU1NTgxM2FmOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VqhjS6H5EGnF/6iOCvzcq5QjAFE
u5bvPsD+7FELYT3r/+hsbhdnX5n/oHWpsQY3JwVMKLGu9o2wgimfdd8DK/v7HyAP
nGTH0cN4mysn9+ShgmP72waEvwQP8jnpy3FQBntlF2wpAVMccXqUY1rPYogCA1xh
teMqcP4gf3v62Ss0LuMZ3hAQUAydGKVUVqIhUNNE4NxYYIABmGHZ8F/AfpzywOi4
RjDgP86mcHTrKKhYnWuUv/xL3HiaZn6dUY5yznAHCEfPTYXs1pIHNo2U47cjranN
gvRUZgqQ0NHBsvSuFBESalccx4revTIgwFkIivRGypR10esE2X5BH8gPIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrMgfE85RpnFvZ6JiokpVWBOvj7MB8GA1UdIwQY
MBaAFJOx6rvl7gwEloDiq8lVNDnsZDwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYt
OWQyOGJmNWVmM2MxLzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYtOWQyOGJmNWVmM2Mx
LzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITy7p44p
pslohoyaWVnMk9kN5iO0noTKelKcducgatLoXWEJWUx/h3ONvNamewYIXaiQYTRL
NirFUFXw4heNJDuN7w+CcfTz2aIR+fAubdB5QzD/95uOKUJ+A4ePh5cCav5yt0gx
sr4mog0FK2ooURjZS5WXUUtB4cBPy55SBBetyv4uVOcvmvsyG9C2RwPE1u51HPE3
bo7/Dv/TtFEY1fmywfu4Q3CcsffOGmswqHowI9cSzDtTPwyQATFxwXBRSKQuTln4
BlgR086T12qjWK0Sju4kAHqgmIJ8N1Zmn7oPOsKokRAi/rUz/dyDizxsuOlGa1H0
n+NXkK4rqWRFOA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:38:13 2025 by rpki-client