Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: CD8lnS2Zm2gLh8HYByYlIwhBaZk2joKBSWwy4HZChB4=
Subject key identifier: 5C:AA:83:21:A4:E6:0C:AB:E3:14:CA:B3:A6:7E:F7:E3:F1:8D:65:FF
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 0196AA677A7679A77397AFD92EBBBEA7EB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 3C
Signing time: Wed 07 May 2025 11:00:30 +0000
Manifest this update: Wed 07 May 2025 11:00:30 +0000
Manifest next update: Thu 08 May 2025 11:00:30 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: BVxTpxXvEF5kNRrDz1rwSUWVsGORz5T4ke5HUi0x0o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:7a:76:79:a7:73:97:af:d9:2e:bb:be:a7:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: May 7 11:00:30 2025 GMT
Not After : May 8 11:00:30 2025 GMT
Subject: CN=5caa8321a4e60cabe314cab3a67ef7e3f18d65ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:49:d9:b9:f3:16:64:eb:dd:95:5a:65:29:
6e:27:c0:e9:26:ba:92:54:69:1d:8c:ff:8e:60:ee:
d2:3f:29:e5:ee:33:2a:ea:70:9b:9c:7c:ee:60:6a:
7a:cd:3a:91:d8:f2:21:65:cb:05:52:78:ce:51:83:
36:f0:12:81:cb:ed:94:ea:e2:84:c4:28:0c:61:08:
b0:a6:03:26:91:89:b8:7a:46:d6:9c:82:38:d1:41:
ba:89:9a:17:5f:88:d2:9e:a7:2e:8b:e1:b4:a0:bb:
c5:07:f2:02:8a:7d:1a:24:2b:fc:0b:4c:eb:0a:02:
4e:cc:87:d0:75:18:ed:ad:87:5e:6c:6e:42:98:ca:
ce:70:da:8e:92:4e:76:21:a7:25:9b:ea:57:19:13:
2e:2b:03:3b:42:e3:cc:19:2b:e7:78:6a:5e:9e:81:
45:bb:43:22:6a:ae:69:11:ee:f0:7e:1d:6d:05:00:
9c:ee:f1:5a:0d:01:65:5e:87:64:81:50:32:3f:d8:
7e:2f:7f:46:12:7d:2c:16:f5:4e:84:cf:62:14:63:
3e:6c:04:37:78:d7:5d:6b:8e:13:99:54:08:66:74:
05:3d:8d:b5:d5:10:fb:eb:fc:bb:27:4c:75:f2:41:
09:23:2e:0c:7e:07:0c:53:65:5b:5f:a3:85:b2:3c:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:83:21:A4:E6:0C:AB:E3:14:CA:B3:A6:7E:F7:E3:F1:8D:65:FF
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:56:07:e7:5e:57:e9:a5:01:1c:11:64:d4:cd:6a:e2:29:b3:
95:aa:26:12:dc:cb:a3:ed:6b:00:de:e2:b3:cb:89:f5:fb:86:
6e:d8:87:e4:ff:e7:32:f6:8c:91:f3:fb:f5:c1:39:39:b5:59:
81:bd:83:2e:f5:71:c4:77:8a:94:fd:88:fd:47:62:a3:c4:ce:
26:b0:cc:78:3f:cd:dd:b9:47:ab:df:47:42:ae:dc:1a:21:10:
a9:d6:a5:e7:2b:52:17:6f:1d:5b:67:99:60:a0:ac:a0:c8:d5:
03:91:67:c2:de:92:93:fc:1d:2b:f0:b4:ee:68:cc:06:34:37:
3f:62:9f:77:77:ae:69:bc:c4:76:ee:42:6a:74:45:09:e0:06:
1d:00:6e:d6:26:0c:1d:d1:78:d7:fb:21:e3:6c:d1:ff:8a:6f:
eb:7b:c0:54:2d:6c:3b:e9:4f:de:6e:ce:1c:76:65:4e:47:16:
74:bd:9d:5f:34:3e:f1:21:7b:15:d4:13:25:f3:ad:ef:32:98:
87:82:14:96:ec:6a:9d:1a:ad:e2:4d:28:60:30:f5:ee:46:c8:
e4:8f:f1:17:c7:5a:bf:8f:5c:0c:e2:a8:16:a7:54:61:56:0a:
29:53:a5:b5:18:57:94:f9:8a:b4:a1:e0:47:b6:19:15:35:af:
76:53:c6:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqZ3p2eadzl6/ZLru+p+sWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDY3MzU2YzVmYjZhZGIyZWJhNzEzYzgwMTkxNGIyZjRk
N2YzYWQwHhcNMjUwNTA3MTEwMDMwWhcNMjUwNTA4MTEwMDMwWjAzMTEwLwYDVQQD
Eyg1Y2FhODMyMWE0ZTYwY2FiZTMxNGNhYjNhNjdlZjdlM2YxOGQ2NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8FJ2bnzFmTr3ZVaZSluJ8DpJrqS
VGkdjP+OYO7SPynl7jMq6nCbnHzuYGp6zTqR2PIhZcsFUnjOUYM28BKBy+2U6uKE
xCgMYQiwpgMmkYm4ekbWnII40UG6iZoXX4jSnqcui+G0oLvFB/ICin0aJCv8C0zr
CgJOzIfQdRjtrYdebG5CmMrOcNqOkk52Iaclm+pXGRMuKwM7QuPMGSvneGpenoFF
u0Miaq5pEe7wfh1tBQCc7vFaDQFlXodkgVAyP9h+L39GEn0sFvVOhM9iFGM+bAQ3
eNdda44TmVQIZnQFPY211RD76/y7J0x18kEJIy4MfgcMU2VbX6OFsjzOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyqgyGk5gyr4xTKs6Z+9+PxjWX/MB8GA1UdIwQY
MBaAFNRGc1bF+2rbLrpxPIAZFLL01/OtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUt
NTk3YjQ3ZDQyZGIwLzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUtNTk3YjQ3ZDQyZGIw
LzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlYH515X
6aUBHBFk1M1q4imzlaomEtzLo+1rAN7is8uJ9fuGbtiH5P/nMvaMkfP79cE5ObVZ
gb2DLvVxxHeKlP2I/Udio8TOJrDMeD/N3blHq99HQq7cGiEQqdal5ytSF28dW2eZ
YKCsoMjVA5Fnwt6Sk/wdK/C07mjMBjQ3P2Kfd3euabzEdu5CanRFCeAGHQBu1iYM
HdF41/sh42zR/4pv63vAVC1sO+lP3m7OHHZlTkcWdL2dXzQ+8SF7FdQTJfOt7zKY
h4IUluxqnRqt4k0oYDD17kbI5I/xF8dav49cDOKoFqdUYVYKKVOltRhXlPmKtKHg
R7YZFTWvdlPGdA==
-----END CERTIFICATE-----
Generated at Wed May 7 18:57:58 2025 by rpki-client