Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: FDORCa5TQGHMosbrK7dJ0MxURn0P1Oe3DxECwJmspHo=
Subject key identifier: F4:37:C3:78:15:30:41:43:1E:07:D7:7F:46:B2:0C:CD:CB:3F:3C:3D
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 01967DC67924B0B4193781FDE594A40B81AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0A04
Signing time: Mon 28 Apr 2025 19:01:21 +0000
Manifest this update: Mon 28 Apr 2025 19:01:21 +0000
Manifest next update: Tue 29 Apr 2025 19:01:21 +0000
Files and hashes: 1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: 5tH/o6IZe+FOGQ4vhYnizn2yhTk9wa7c4Q1EIHVTVhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:79:24:b0:b4:19:37:81:fd:e5:94:a4:0b:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Apr 28 19:01:21 2025 GMT
Not After : Apr 29 19:01:21 2025 GMT
Subject: CN=f437c378153041431e07d77f46b20ccdcb3f3c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:37:5c:53:b3:d5:d8:4b:10:96:4f:eb:9a:
26:ac:1c:3d:78:a1:ad:90:5a:d1:ba:61:8d:03:27:
04:40:60:8d:1f:92:98:00:16:41:44:f6:c0:d0:25:
32:63:8c:fc:cf:80:12:88:95:8f:a9:86:5b:6d:95:
46:f1:bb:f1:75:d0:d0:f1:69:0f:6c:01:b6:e8:fd:
e8:8e:71:83:14:3b:8d:6d:be:43:01:b0:81:16:9a:
b9:fb:db:2e:45:b2:0e:6a:af:22:d9:93:80:34:c3:
8f:62:0a:ed:5b:b0:58:f0:0a:69:3e:ed:c9:ba:79:
31:e3:36:b8:d6:0e:3c:05:b6:8a:48:e8:f8:70:a4:
80:db:88:db:81:e2:9c:1a:91:2d:1e:73:0b:e1:20:
91:3e:05:68:e4:bf:7b:fe:60:89:b8:10:2a:9b:3b:
3a:57:d8:ce:85:5a:7f:08:9c:7c:a4:f2:4c:83:ed:
70:e3:cb:50:59:3a:e0:5c:67:50:b9:92:b7:81:98:
18:d5:82:0f:27:48:92:56:c2:8f:d7:fd:92:32:5b:
91:17:3f:cc:9e:62:50:f7:f8:5c:1f:6b:1d:c9:89:
c0:1b:ae:3a:a8:58:c1:5f:2e:64:b0:20:8c:4b:94:
fb:12:5e:32:17:b0:99:17:59:68:34:3a:85:e4:9f:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:C3:78:15:30:41:43:1E:07:D7:7F:46:B2:0C:CD:CB:3F:3C:3D
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:10:5f:40:cc:88:5a:02:59:56:e5:a5:f2:ed:bb:a6:ed:1c:
68:52:39:77:12:d3:83:33:21:cf:e8:cb:62:99:3b:b1:9e:e3:
0b:e0:d5:51:47:0b:55:ae:47:1c:ae:b3:44:05:08:91:b1:27:
df:a0:7e:28:91:78:25:cd:9c:38:c2:0e:ac:df:ec:60:c5:6d:
bf:84:65:cd:2c:99:86:94:2e:38:86:45:d6:40:00:8a:32:05:
90:e6:e4:7c:c2:1b:fd:89:bc:e6:02:39:f6:80:48:9b:37:bc:
43:7b:07:3b:33:09:1d:17:39:71:62:6e:b2:6c:98:23:a7:2e:
f2:0e:c8:49:44:7b:6c:b8:f1:f0:a3:32:95:d5:6d:71:dd:c9:
38:ef:fa:3d:68:ff:4e:2e:c6:2c:c2:ef:d6:d6:e5:2d:db:1f:
a3:de:d7:f7:e4:ad:14:68:77:ab:68:c4:ed:da:76:43:f9:49:
a7:c2:da:67:54:b0:83:07:1d:22:e2:48:48:d7:c5:ae:dc:db:
09:11:93:40:f1:d7:07:5c:98:3c:e8:2d:7a:76:a6:52:61:e7:
55:bf:79:f7:ee:ee:0c:55:c6:fa:50:19:83:60:7d:8f:25:fc:
7a:ce:6a:f5:56:3b:03:02:cf:bc:75:20:10:40:43:53:ba:f8:
98:bc:0f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xnkksLQZN4H95ZSkC4GuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1
YzZjOTEwHhcNMjUwNDI4MTkwMTIxWhcNMjUwNDI5MTkwMTIxWjAzMTEwLwYDVQQD
EyhmNDM3YzM3ODE1MzA0MTQzMWUwN2Q3N2Y0NmIyMGNjZGNiM2YzYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bo3XFOz1dhLEJZP65omrBw9eKGt
kFrRumGNAycEQGCNH5KYABZBRPbA0CUyY4z8z4ASiJWPqYZbbZVG8bvxddDQ8WkP
bAG26P3ojnGDFDuNbb5DAbCBFpq5+9suRbIOaq8i2ZOANMOPYgrtW7BY8AppPu3J
unkx4za41g48BbaKSOj4cKSA24jbgeKcGpEtHnML4SCRPgVo5L97/mCJuBAqmzs6
V9jOhVp/CJx8pPJMg+1w48tQWTrgXGdQuZK3gZgY1YIPJ0iSVsKP1/2SMluRFz/M
nmJQ9/hcH2sdyYnAG646qFjBXy5ksCCMS5T7El4yF7CZF1loNDqF5J8zowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ3w3gVMEFDHgfXf0ayDM3LPzw9MB8GA1UdIwQY
MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt
ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0
LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRBfQMyI
WgJZVuWl8u27pu0caFI5dxLTgzMhz+jLYpk7sZ7jC+DVUUcLVa5HHK6zRAUIkbEn
36B+KJF4Jc2cOMIOrN/sYMVtv4RlzSyZhpQuOIZF1kAAijIFkObkfMIb/Ym85gI5
9oBImze8Q3sHOzMJHRc5cWJusmyYI6cu8g7ISUR7bLjx8KMyldVtcd3JOO/6PWj/
Ti7GLMLv1tblLdsfo97X9+StFGh3q2jE7dp2Q/lJp8LaZ1SwgwcdIuJISNfFrtzb
CRGTQPHXB1yYPOgtenamUmHnVb959+7uDFXG+lAZg2B9jyX8es5q9VY7AwLPvHUg
EEBDU7r4mLwPMg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:23 2025 by rpki-client