Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier: iwD5Xrx+kBc6GYgedGWN30g0seysArEaUsGSj7OLN4c=
Subject key identifier: AC:4B:02:86:6B:D6:43:1B:03:5A:FD:ED:44:B4:FE:80:22:3D:77:AF
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 01967642ECB1F91E1733B021FC9520D10736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number: 076C
Signing time: Sun 27 Apr 2025 08:00:19 +0000
Manifest this update: Sun 27 Apr 2025 08:00:19 +0000
Manifest next update: Mon 28 Apr 2025 08:00:19 +0000
Files and hashes: 1: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (hash: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=)
2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: KAwd/ObaaP6IGCnvMyjaAA3GthtVk+L7YFmyHdY1AuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:ec:b1:f9:1e:17:33:b0:21:fc:95:20:d1:07:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Apr 27 08:00:19 2025 GMT
Not After : Apr 28 08:00:19 2025 GMT
Subject: CN=ac4b02866bd6431b035afded44b4fe80223d77af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:33:a2:9a:d3:95:8c:4a:79:84:0a:0d:cc:95:
ac:ad:36:47:14:72:70:38:91:56:16:ce:f9:38:93:
95:72:ef:8b:3f:e6:58:0a:c4:c0:9f:98:62:e3:2a:
35:9b:ab:7a:c7:bb:89:dc:79:eb:78:87:97:76:a2:
fa:99:e1:b3:e3:97:1b:d8:29:3e:0d:6f:16:d3:a1:
d8:5d:de:49:3e:7d:20:f9:d7:13:43:97:62:68:17:
00:fd:31:cd:ae:8f:39:ad:b6:c4:5f:95:43:5b:5d:
29:16:51:63:17:47:5a:c2:2b:1b:70:5f:93:42:fa:
95:0d:50:a5:98:93:1b:1d:ad:cf:d7:6d:0c:ef:17:
9f:99:95:3a:9d:ae:72:be:cb:e9:cd:87:c3:17:2a:
11:5e:34:c2:7c:6b:4e:76:90:d0:f4:f8:53:2f:7c:
ba:d7:47:82:83:d6:19:67:7e:2e:eb:f3:86:df:af:
11:2e:b2:ce:06:a4:a1:5b:10:57:0d:2a:6c:53:93:
ee:d6:61:53:b0:84:a9:a1:5f:2c:3a:26:ec:71:ae:
cf:9e:b8:cd:88:16:ed:68:70:d1:21:41:ff:bd:52:
d7:c5:92:03:ca:27:5c:f6:1e:3d:38:12:bf:5f:9a:
4d:0a:d8:cf:d6:4d:31:4c:3e:c6:45:be:06:43:61:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:02:86:6B:D6:43:1B:03:5A:FD:ED:44:B4:FE:80:22:3D:77:AF
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b1:9a:3e:2a:d8:d8:cc:00:53:fa:90:4a:63:4d:dc:e0:2e:
2b:ea:35:88:5a:c2:62:04:b8:d8:f7:83:b9:86:cc:9b:1d:74:
e5:f4:a2:25:67:0e:ba:9c:f3:77:a6:4d:f3:d4:ca:e0:4f:56:
dd:48:30:63:fa:fb:a4:f2:39:38:5e:d8:3d:6f:e8:58:e8:15:
de:62:f6:4b:1f:a5:d1:5d:9b:28:f4:67:5f:c9:92:c5:73:64:
36:19:09:60:04:51:3b:83:f4:aa:60:35:3a:bb:9c:bf:d1:4a:
cd:ba:c4:6c:a7:07:71:57:9e:ca:72:e2:f3:58:8c:bd:92:df:
be:f2:36:3e:78:63:2e:9b:64:b3:fb:0c:68:24:c6:9a:b2:2d:
aa:3c:26:0e:3b:fa:39:8f:22:51:db:0a:63:0b:38:ef:85:7f:
1a:a2:f9:cb:d4:c9:eb:d5:d0:00:95:81:9e:36:d0:9f:db:e0:
22:6a:d3:9b:38:19:4f:a9:27:9b:89:44:38:fa:9b:91:88:6c:
92:3a:e4:e2:d6:41:1c:ad:95:0a:3f:9f:ae:40:bd:ec:97:8b:
bd:95:71:46:d0:91:f2:4e:a9:a8:79:96:3f:72:d2:5b:e8:4d:
36:57:8c:99:23:44:15:9e:55:51:f1:8a:59:a2:a8:4a:ab:fa:
1f:af:03:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Quyx+R4XM7Ah/JUg0Qc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MmY5ZjNiYmJlMGI1MWVhOWU5YjJlOTZjNjg2ODc0OGZh
MDc4ZjcwHhcNMjUwNDI3MDgwMDE5WhcNMjUwNDI4MDgwMDE5WjAzMTEwLwYDVQQD
EyhhYzRiMDI4NjZiZDY0MzFiMDM1YWZkZWQ0NGI0ZmU4MDIyM2Q3N2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jOimtOVjEp5hAoNzJWsrTZHFHJw
OJFWFs75OJOVcu+LP+ZYCsTAn5hi4yo1m6t6x7uJ3HnreIeXdqL6meGz45cb2Ck+
DW8W06HYXd5JPn0g+dcTQ5diaBcA/THNro85rbbEX5VDW10pFlFjF0dawisbcF+T
QvqVDVClmJMbHa3P120M7xefmZU6na5yvsvpzYfDFyoRXjTCfGtOdpDQ9PhTL3y6
10eCg9YZZ34u6/OG368RLrLOBqShWxBXDSpsU5Pu1mFTsISpoV8sOibsca7PnrjN
iBbtaHDRIUH/vVLXxZIDyidc9h49OBK/X5pNCtjP1k0xTD7GRb4GQ2ErgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxLAoZr1kMbA1r97US0/oAiPXevMB8GA1UdIwQY
MBaAFHgvnzu74LUeqemy6WxoaHSPoHj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQt
NzQzYzMwODAxZmYxLzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQtNzQzYzMwODAxZmYx
LzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrGaPirY
2MwAU/qQSmNN3OAuK+o1iFrCYgS42PeDuYbMmx105fSiJWcOupzzd6ZN89TK4E9W
3UgwY/r7pPI5OF7YPW/oWOgV3mL2Sx+l0V2bKPRnX8mSxXNkNhkJYARRO4P0qmA1
Orucv9FKzbrEbKcHcVeeynLi81iMvZLfvvI2PnhjLptks/sMaCTGmrItqjwmDjv6
OY8iUdsKYws474V/GqL5y9TJ69XQAJWBnjbQn9vgImrTmzgZT6knm4lEOPqbkYhs
kjrk4tZBHK2VCj+frkC97JeLvZVxRtCR8k6pqHmWP3LSW+hNNleMmSNEFZ5VUfGK
WaKoSqv6H68DKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:55 2025 by rpki-client