
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier: Cgg4pEVBzar9lanT44gt+SzfOyStQ/oVyfWM9dJTXxM=
Subject key identifier: 49:D5:86:96:6E:0E:50:B7:AC:54:EE:D9:41:5F:F7:CC:E0:2E:9E:D5
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial: 0196857FF5611632AB3D24E6211D3E5166ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number: BC
Signing time: Wed 30 Apr 2025 07:01:17 +0000
Manifest this update: Wed 30 Apr 2025 07:01:17 +0000
Manifest next update: Thu 01 May 2025 07:01:17 +0000
Files and hashes: 1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: 4dKHld+F8eNF1+a3zAfwCuVHajRGLk6CzEyy6HhwIe8=)
2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:f5:61:16:32:ab:3d:24:e6:21:1d:3e:51:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
Validity
Not Before: Apr 30 07:01:17 2025 GMT
Not After : May 1 07:01:17 2025 GMT
Subject: CN=49d586966e0e50b7ac54eed9415ff7cce02e9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:a4:7a:3c:f2:b4:06:1a:8d:c5:73:41:59:
ba:36:60:51:6d:10:e4:67:bb:95:06:bd:94:e5:05:
02:36:97:bb:e5:76:2f:52:48:e4:f7:35:ff:f9:28:
bd:79:83:55:01:2d:d0:35:ff:40:b9:4b:7a:11:5d:
63:50:93:a5:22:bf:fa:01:35:27:f8:30:bc:49:bf:
f5:98:79:37:c6:a4:30:33:91:3d:51:0e:0b:31:ec:
c7:9e:48:1c:6e:5c:fa:9e:84:6d:5c:6c:97:73:74:
4c:24:60:be:c1:44:06:97:2e:e6:00:36:16:e1:59:
6e:58:b5:b7:ce:d6:a7:da:c2:13:14:a3:d7:f9:55:
7d:e6:f1:14:f7:35:a9:b9:ad:72:a6:05:44:97:f0:
8c:87:30:3c:94:31:d4:b4:b7:87:0c:b4:a9:2e:bc:
ef:47:46:13:c5:79:54:1d:f7:7e:cd:41:3b:62:0b:
b4:1d:21:a9:d9:3b:48:ce:8a:0a:e1:61:d7:25:f6:
cc:c0:76:fa:ea:7c:d3:6b:4e:ac:f1:4c:35:b4:99:
4c:dd:11:f5:8d:6c:e8:c7:83:a4:02:c3:bd:f9:20:
ea:db:94:a0:5c:9a:82:68:54:ea:14:f9:2b:de:e2:
ae:72:d4:7a:13:60:a2:92:c6:6d:21:43:dc:87:ff:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:86:96:6E:0E:50:B7:AC:54:EE:D9:41:5F:F7:CC:E0:2E:9E:D5
X509v3 Authority Key Identifier:
keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:cf:72:00:4c:d8:26:d6:04:2d:46:bb:9c:99:af:55:66:
8a:1e:2d:35:d5:d5:a5:bf:1a:eb:95:20:e3:14:8d:72:cd:30:
e1:cf:5c:5d:cb:51:bc:8a:f8:d5:23:bb:e6:d9:5f:27:09:72:
b5:ce:17:5f:60:18:27:80:1b:8c:80:d2:d4:fa:21:96:b3:f4:
7d:54:de:ab:e8:1e:79:1a:d3:ea:f8:e2:51:66:eb:35:47:2e:
8b:2b:95:83:9b:42:c1:f2:eb:8e:df:02:75:80:60:71:86:a0:
b4:34:41:49:e3:8f:11:a5:b4:cb:df:94:bb:90:02:e9:f2:72:
18:04:2b:5e:0f:f6:da:40:df:fd:6b:44:6a:fc:75:f1:68:80:
ac:ab:f4:1c:5c:ff:98:02:b1:b6:91:70:da:37:f6:33:26:50:
f5:f7:3e:3d:5f:b6:88:dc:e5:37:a0:31:54:72:46:d5:d5:cc:
37:7f:b0:2a:f7:2c:fb:1a:58:ed:c9:24:93:60:81:fe:e8:b8:
40:50:77:02:9a:f1:5a:42:38:39:df:74:73:ba:b7:f1:79:9e:
6b:17:9f:f6:59:a3:e4:fe:59:83:4a:bf:ab:10:f7:39:92:94:
3d:32:d7:81:7c:ba:3f:50:d7:ec:bd:cd:58:ae:f3:13:a3:48:
f2:bf:0b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFf/VhFjKrPSTmIR0+UWbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDMyYzEyMTczNTQ0OWYxNTM4ZmYwMDM2ZjRhYmQwNjAw
YTgyNWYwHhcNMjUwNDMwMDcwMTE3WhcNMjUwNTAxMDcwMTE3WjAzMTEwLwYDVQQD
Eyg0OWQ1ODY5NjZlMGU1MGI3YWM1NGVlZDk0MTVmZjdjY2UwMmU5ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw2kejzytAYajcVzQVm6NmBRbRDk
Z7uVBr2U5QUCNpe75XYvUkjk9zX/+Si9eYNVAS3QNf9AuUt6EV1jUJOlIr/6ATUn
+DC8Sb/1mHk3xqQwM5E9UQ4LMezHnkgcblz6noRtXGyXc3RMJGC+wUQGly7mADYW
4VluWLW3ztan2sITFKPX+VV95vEU9zWpua1ypgVEl/CMhzA8lDHUtLeHDLSpLrzv
R0YTxXlUHfd+zUE7Ygu0HSGp2TtIzooK4WHXJfbMwHb66nzTa06s8Uw1tJlM3RH1
jWzox4OkAsO9+SDq25SgXJqCaFTqFPkr3uKuctR6E2CiksZtIUPch/9hdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnVhpZuDlC3rFTu2UFf98zgLp7VMB8GA1UdIwQY
MBaAFHjTLBIXNUSfFTj/ADb0q9BgCoJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUt
MzRhM2FhMGI2YWEwLzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUtMzRhM2FhMGI2YWEw
LzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXDPcgBM
2CbWBC1Gu5yZr1Vmih4tNdXVpb8a65Ug4xSNcs0w4c9cXctRvIr41SO75tlfJwly
tc4XX2AYJ4AbjIDS1PohlrP0fVTeq+geeRrT6vjiUWbrNUcuiyuVg5tCwfLrjt8C
dYBgcYagtDRBSeOPEaW0y9+Uu5AC6fJyGAQrXg/22kDf/WtEavx18WiArKv0HFz/
mAKxtpFw2jf2MyZQ9fc+PV+2iNzlN6AxVHJG1dXMN3+wKvcs+xpY7ckkk2CB/ui4
QFB3AprxWkI4Od90c7q38Xmeaxef9lmj5P5Zg0q/qxD3OZKUPTLXgXy6P1DX7L3N
WK7zE6NI8r8L2A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:35 2025 by rpki-client