Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: lYfFf5qRDECkLmY3MeGf5bKEn3poY78oRBkqH+yU20c=
Subject key identifier: 2C:03:4A:21:C8:88:33:48:62:28:09:19:CD:6F:7D:AE:6D:5A:C7:42
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 01967E3416C645E3A9E556ACBF7CB830EED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 067E
Signing time: Mon 28 Apr 2025 21:01:04 +0000
Manifest this update: Mon 28 Apr 2025 21:01:04 +0000
Manifest next update: Tue 29 Apr 2025 21:01:04 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: QaAkUL/d+49dP6Z/uBBuykosgYrmiSsBDuIzKNoGwr8=)
2: Kq5xAZANKOfKwGgabwcEpDAlttw.roa (hash: gZrCab7OfKcDgXrji1r5JrFbiZW+bpKbWNRFXqaDbXg=)
3: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:16:c6:45:e3:a9:e5:56:ac:bf:7c:b8:30:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Apr 28 21:01:04 2025 GMT
Not After : Apr 29 21:01:04 2025 GMT
Subject: CN=2c034a21c888334862280919cd6f7dae6d5ac742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:eb:74:c1:bb:fe:41:71:18:e0:65:c5:28:
2d:61:4a:fb:71:f4:b3:9a:82:cd:f2:08:7e:59:e1:
f9:a9:3d:39:6f:c4:ce:fa:fd:fc:ae:83:24:a0:f3:
61:fb:ff:31:8c:f1:9d:fc:9a:ab:2c:58:24:24:8f:
e3:21:06:0d:2f:dc:84:3a:65:05:0b:e0:54:f2:61:
57:39:7a:c9:67:2e:ba:21:27:7c:77:b2:3f:0e:54:
6c:13:9a:f5:a4:53:68:8a:4c:c0:4f:cb:69:72:0a:
11:3d:46:18:c3:11:c5:12:b7:00:24:f8:fd:75:48:
6e:5d:9f:33:6b:d3:fe:1b:a8:32:47:29:56:38:34:
42:bb:c8:43:a2:0a:e5:81:4a:a6:1b:55:66:57:cc:
ee:86:0d:e4:81:0c:15:c6:e3:18:e4:ad:94:b2:d0:
4e:8d:bc:13:bd:cc:d1:c0:db:31:d7:a4:db:1d:be:
b9:0f:49:86:22:a6:e2:1d:a3:29:5c:48:3a:ad:77:
80:02:a1:74:73:06:c4:0c:0d:ea:2f:06:a3:72:ae:
75:22:6c:e9:54:a9:1d:77:52:11:b9:d0:49:93:c3:
61:b8:30:cf:6a:0a:40:a1:48:eb:f2:0e:7c:24:b6:
77:dd:f5:7c:d5:f2:79:1a:08:27:e5:3e:d8:de:69:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:4A:21:C8:88:33:48:62:28:09:19:CD:6F:7D:AE:6D:5A:C7:42
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:ac:bb:dc:20:87:32:b8:4e:23:75:f6:05:98:62:a8:53:
98:a6:03:41:cb:27:e5:be:12:08:bd:9c:f9:60:1e:2b:9a:89:
48:81:51:b6:22:ea:64:98:10:54:25:4d:5f:48:72:80:0a:0e:
64:7c:f3:fc:ab:bd:dc:11:d7:71:c7:16:f9:02:ba:17:03:04:
ad:6e:ff:7d:a4:d9:c8:f4:fc:a5:ef:69:46:78:02:82:53:76:
92:c6:e5:2a:01:5b:49:dc:00:98:85:89:94:a4:7f:59:32:8d:
33:e1:3b:5d:d2:a9:ff:5c:3d:bc:b7:65:3f:44:42:e8:fa:68:
36:35:df:29:cb:66:02:74:0e:a0:66:75:58:5d:54:7e:7c:52:
97:d4:89:20:93:10:c2:02:0f:a6:16:08:92:99:c0:e4:9d:35:
46:59:a5:f5:80:40:b1:66:16:82:d7:e1:37:a1:92:f6:51:0e:
29:b7:9e:4c:d1:54:8c:be:c7:8a:4e:dd:3d:10:d1:6f:df:1d:
27:22:6c:ae:1f:7f:bb:0e:fd:93:c9:f0:63:63:ba:4b:d5:1a:
45:d0:51:7b:e0:4d:7f:c2:12:c7:d7:55:37:39:c1:9b:e4:82:
11:01:ef:63:a4:00:8f:c5:c9:58:88:6c:76:18:6c:68:c8:f2:
f0:42:d6:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+NBbGReOp5Vasv3y4MO7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2VlMzFkMmYwZWYxMDMyOTZkZGVjM2M2NmIwN2EzZjQ0
MmFjOTgwHhcNMjUwNDI4MjEwMTA0WhcNMjUwNDI5MjEwMTA0WjAzMTEwLwYDVQQD
EygyYzAzNGEyMWM4ODgzMzQ4NjIyODA5MTljZDZmN2RhZTZkNWFjNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27frdMG7/kFxGOBlxSgtYUr7cfSz
moLN8gh+WeH5qT05b8TO+v38roMkoPNh+/8xjPGd/JqrLFgkJI/jIQYNL9yEOmUF
C+BU8mFXOXrJZy66ISd8d7I/DlRsE5r1pFNoikzAT8tpcgoRPUYYwxHFErcAJPj9
dUhuXZ8za9P+G6gyRylWODRCu8hDogrlgUqmG1VmV8zuhg3kgQwVxuMY5K2UstBO
jbwTvczRwNsx16TbHb65D0mGIqbiHaMpXEg6rXeAAqF0cwbEDA3qLwajcq51Imzp
VKkdd1IRudBJk8NhuDDPagpAoUjr8g58JLZ33fV81fJ5Gggn5T7Y3mlJ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwDSiHIiDNIYigJGc1vfa5tWsdCMB8GA1UdIwQY
MBaAFO8+4x0vDvEDKW3ew8ZrB6P0QqyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMt
NzQ4ZDYxNzNiNmExLzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMtNzQ4ZDYxNzNiNmEx
LzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNqsu9wg
hzK4TiN19gWYYqhTmKYDQcsn5b4SCL2c+WAeK5qJSIFRtiLqZJgQVCVNX0hygAoO
ZHzz/Ku93BHXcccW+QK6FwMErW7/faTZyPT8pe9pRngCglN2ksblKgFbSdwAmIWJ
lKR/WTKNM+E7XdKp/1w9vLdlP0RC6PpoNjXfKctmAnQOoGZ1WF1UfnxSl9SJIJMQ
wgIPphYIkpnA5J01Rlml9YBAsWYWgtfhN6GS9lEOKbeeTNFUjL7Hik7dPRDRb98d
JyJsrh9/uw79k8nwY2O6S9UaRdBRe+BNf8ISx9dVNznBm+SCEQHvY6QAj8XJWIhs
dhhsaMjy8ELWsA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:24:10 2025 by rpki-client