Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: mLCa97HN7a8X6d5DwKELfhNjRHEUE3BXEThJNT7oxEk=
Subject key identifier: ED:03:03:90:D3:8B:83:E5:7B:72:94:E7:97:85:7B:6E:DC:D8:03:56
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 01968F94D4E45ACB2081A18BB0608A2A9371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 10A0
Signing time: Fri 02 May 2025 06:00:17 +0000
Manifest this update: Fri 02 May 2025 06:00:17 +0000
Manifest next update: Sat 03 May 2025 06:00:17 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: qMYlqXGUCdmsP4idbb13+jVG4/1GuNc1SYyDhqNRIRY=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:94:d4:e4:5a:cb:20:81:a1:8b:b0:60:8a:2a:93:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: May 2 06:00:17 2025 GMT
Not After : May 3 06:00:17 2025 GMT
Subject: CN=ed030390d38b83e57b7294e797857b6edcd80356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:ec:a1:77:83:10:0f:dd:6a:03:ae:f4:9b:
33:17:9f:86:3f:5a:e9:e7:7f:4a:cd:34:d9:54:b5:
13:2b:80:7c:c7:fc:21:1b:a4:39:4f:47:2b:85:75:
e5:dd:ee:aa:c8:b5:1b:fa:bf:e1:3b:5f:bd:e9:e3:
99:f4:73:51:74:59:cf:3c:82:ee:d3:c3:4f:01:0b:
02:43:42:a1:3d:4e:83:fe:6e:a7:e3:46:b3:ce:9e:
f8:a8:d6:fc:c2:99:85:80:e1:6a:98:1b:63:02:0f:
79:68:be:76:56:1e:bf:a2:0d:2e:31:41:22:e6:11:
44:9c:be:4d:5c:9b:7a:ba:82:1c:38:a8:53:c7:21:
5d:f0:e3:94:1c:0e:ee:1a:03:a7:f4:49:6c:e5:ef:
fa:43:40:27:13:ac:51:02:64:6c:3f:66:7e:6a:cf:
59:b2:4c:f8:48:a0:53:83:df:1f:c5:6c:60:12:62:
cc:33:0b:b7:f5:b6:0f:d3:41:99:b0:f2:0e:8f:04:
e3:58:a5:c7:23:96:af:c8:57:2a:fb:99:a6:e6:b5:
cb:e1:11:48:a3:32:5f:99:d8:9b:b8:99:6e:d2:38:
98:fd:24:1f:af:a8:ed:9f:27:da:3a:49:40:ef:b6:
a3:9e:d2:32:a3:e9:16:ca:cb:54:15:49:94:4a:18:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:03:90:D3:8B:83:E5:7B:72:94:E7:97:85:7B:6E:DC:D8:03:56
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f6:b2:5b:90:d7:ca:e5:91:ca:c9:c3:be:3a:dc:e8:d8:23:
c9:80:59:df:20:0f:01:04:5e:15:03:7b:91:33:4a:6c:cd:21:
4e:4a:4d:4e:b7:11:d7:26:5a:80:38:0c:49:ce:8b:c0:03:cc:
91:8b:d6:7a:08:7f:71:a6:b9:9a:7f:0a:5f:04:c2:a6:44:d6:
2e:5f:b4:fa:63:74:c1:c7:e7:66:50:22:a6:21:b4:f4:e6:38:
ec:82:b2:23:0d:6f:a8:16:c8:76:6c:19:e8:1c:67:81:aa:7d:
ac:84:01:43:80:0d:cb:36:69:33:a5:c4:a3:08:0a:b3:20:12:
d2:d1:e4:ba:83:70:06:53:25:16:18:51:47:51:84:ea:8c:93:
22:66:d2:29:51:86:ad:a2:e5:a3:f6:c9:e5:d8:7c:fc:67:e7:
b3:a3:23:84:bf:9c:98:f9:c5:ee:67:fe:c2:6a:c2:c6:b1:eb:
1a:a7:97:04:32:c3:df:21:0c:e6:28:7e:31:cc:0c:7d:f1:64:
b1:31:79:fe:3d:bd:82:41:b0:ff:60:d4:fd:ba:81:6c:99:0c:
51:10:49:a2:22:8f:e5:a4:9c:05:57:13:c7:a8:78:4a:7a:4e:
3e:13:c6:5d:d3:16:89:eb:5e:db:9d:ad:db:95:a1:81:6f:8e:
a2:d9:a7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPlNTkWssggaGLsGCKKpNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjEyMWNmMDYzMjgxOWVlY2VhYmViOGE5NTU2OWM2NzUy
OTg4MjEwHhcNMjUwNTAyMDYwMDE3WhcNMjUwNTAzMDYwMDE3WjAzMTEwLwYDVQQD
EyhlZDAzMDM5MGQzOGI4M2U1N2I3Mjk0ZTc5Nzg1N2I2ZWRjZDgwMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4vsoXeDEA/dagOu9JszF5+GP1rp
539KzTTZVLUTK4B8x/whG6Q5T0crhXXl3e6qyLUb+r/hO1+96eOZ9HNRdFnPPILu
08NPAQsCQ0KhPU6D/m6n40azzp74qNb8wpmFgOFqmBtjAg95aL52Vh6/og0uMUEi
5hFEnL5NXJt6uoIcOKhTxyFd8OOUHA7uGgOn9Els5e/6Q0AnE6xRAmRsP2Z+as9Z
skz4SKBTg98fxWxgEmLMMwu39bYP00GZsPIOjwTjWKXHI5avyFcq+5mm5rXL4RFI
ozJfmdibuJlu0jiY/SQfr6jtnyfaOklA77ajntIyo+kWystUFUmUShju5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0DA5DTi4Ple3KU55eFe27c2ANWMB8GA1UdIwQY
MBaAFD6xIc8GMoGe7Oq+uKlVacZ1KYghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQt
NmU3MzlmMDJkNTEyLzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQtNmU3MzlmMDJkNTEy
LzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfayW5DX
yuWRysnDvjrc6NgjyYBZ3yAPAQReFQN7kTNKbM0hTkpNTrcR1yZagDgMSc6LwAPM
kYvWegh/caa5mn8KXwTCpkTWLl+0+mN0wcfnZlAipiG09OY47IKyIw1vqBbIdmwZ
6Bxngap9rIQBQ4ANyzZpM6XEowgKsyAS0tHkuoNwBlMlFhhRR1GE6oyTImbSKVGG
raLlo/bJ5dh8/Gfns6MjhL+cmPnF7mf+wmrCxrHrGqeXBDLD3yEM5ih+McwMffFk
sTF5/j29gkGw/2DU/bqBbJkMURBJoiKP5aScBVcTx6h4SnpOPhPGXdMWiete252t
25WhgW+OotmntQ==
-----END CERTIFICATE-----
Generated at Fri May 2 09:22:21 2025 by rpki-client