Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: 3kF7dLTb5M6PUfg2Op9V+e/ua7CE4Rj+mi5c7ASvr+8=
Subject key identifier: 58:D1:4C:90:1A:E3:A2:A0:C4:08:BA:96:E3:63:42:D0:76:28:F3:44
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 0196805911D4B36FA346F929662CCDA69C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 07:00:42 +0000
Manifest this update: Tue 29 Apr 2025 07:00:42 +0000
Manifest next update: Wed 30 Apr 2025 07:00:42 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: jdvpZmiRWS7MST6Hb/lhxyFPaMJN+hbHuIoxRBgzL0A=)
2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:11:d4:b3:6f:a3:46:f9:29:66:2c:cd:a6:9c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Apr 29 07:00:42 2025 GMT
Not After : Apr 30 07:00:42 2025 GMT
Subject: CN=58d14c901ae3a2a0c408ba96e36342d07628f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:b0:7e:84:c0:9f:78:71:8a:be:3c:c6:5e:
77:9a:45:99:01:bb:56:69:0f:7c:aa:31:43:d8:6f:
46:91:6b:ff:79:2c:b1:ed:bc:66:0e:07:08:b2:f9:
9c:c2:a5:01:46:18:d5:68:63:0a:ad:46:e6:e5:84:
54:8e:53:dc:12:88:75:0e:dd:dc:8e:f6:d9:67:4f:
db:9a:d9:0d:4e:64:21:5c:21:bc:3f:90:56:17:bc:
65:41:d7:83:d1:19:b7:b9:d6:6a:11:27:30:45:52:
04:02:77:33:49:74:f6:68:8e:c2:99:8a:2d:74:da:
27:24:9d:3a:63:0c:d6:cb:ca:40:97:f3:18:d2:64:
72:a8:87:82:b0:9b:12:84:21:6c:08:7c:94:70:aa:
7b:55:e9:31:d2:f3:15:bb:e3:d6:ec:42:d1:46:72:
9e:96:66:6f:25:a2:12:91:b5:d1:c4:8c:84:68:af:
08:10:64:f3:d4:f3:89:d9:15:9a:fc:82:4c:9f:2a:
4c:5e:2c:61:b6:46:81:da:5d:fd:df:63:9b:7e:78:
0c:c1:f4:c6:94:64:b6:17:b9:50:91:93:f9:b2:b0:
4e:d3:54:61:51:c7:a7:1f:a9:4b:17:83:ff:fd:1b:
07:69:e8:7b:6e:69:22:d1:d9:c0:0f:75:b9:8a:0c:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:4C:90:1A:E3:A2:A0:C4:08:BA:96:E3:63:42:D0:76:28:F3:44
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:f4:6a:c5:55:0a:a1:d7:a0:a0:b9:bc:e4:fd:e5:aa:45:
e5:e4:2f:4b:e0:5e:6a:45:b8:d0:28:1e:13:51:a1:c1:95:32:
f0:fa:ff:19:99:e3:3f:66:c5:e2:8d:a3:d9:22:bd:55:34:fe:
fd:e0:d6:8b:10:9c:18:fe:55:d0:d7:3e:cc:40:d5:a6:7c:8a:
ab:e5:3a:af:52:c7:9f:d4:02:1c:0d:96:94:23:90:7d:ee:22:
27:d1:33:33:29:67:db:8c:e5:34:3f:50:b2:23:c8:8e:13:1d:
04:49:94:c0:8c:a9:15:fa:c7:77:85:10:ee:cd:2c:c8:74:e4:
5e:c0:61:ae:88:af:26:d9:d6:bb:8f:1a:fd:5b:eb:38:77:e9:
18:c8:06:64:05:90:ba:5d:0a:1f:74:6c:3d:99:de:af:06:41:
6d:02:61:3c:ea:07:7e:ba:96:79:f5:92:4d:95:b8:f0:58:37:
12:25:9a:86:f6:7d:f7:aa:9b:81:c5:06:77:6b:85:86:05:2d:
9f:e5:15:a5:c4:7f:b3:2e:0d:10:98:33:0f:a8:5d:b8:c0:f9:
aa:59:ff:7e:30:d8:92:31:c3:8f:94:3c:41:00:29:e5:07:21:
97:1d:e5:f3:2a:60:14:e6:97:e8:f9:32:3c:1c:de:40:87:87:
d2:f3:bc:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAWRHUs2+jRvkpZizNppwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYzhhMWFhZDAyMDU5NDNhNDU3MjM4OWJiNzQzMzRlMWNh
Mjg0ODUwHhcNMjUwNDI5MDcwMDQyWhcNMjUwNDMwMDcwMDQyWjAzMTEwLwYDVQQD
Eyg1OGQxNGM5MDFhZTNhMmEwYzQwOGJhOTZlMzYzNDJkMDc2MjhmMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjiwfoTAn3hxir48xl53mkWZAbtW
aQ98qjFD2G9GkWv/eSyx7bxmDgcIsvmcwqUBRhjVaGMKrUbm5YRUjlPcEoh1Dt3c
jvbZZ0/bmtkNTmQhXCG8P5BWF7xlQdeD0Rm3udZqEScwRVIEAnczSXT2aI7CmYot
dNonJJ06YwzWy8pAl/MY0mRyqIeCsJsShCFsCHyUcKp7Vekx0vMVu+PW7ELRRnKe
lmZvJaISkbXRxIyEaK8IEGTz1POJ2RWa/IJMnypMXixhtkaB2l3932ObfngMwfTG
lGS2F7lQkZP5srBO01RhUcenH6lLF4P//RsHaeh7bmki0dnAD3W5igwoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjRTJAa46KgxAi6luNjQtB2KPNEMB8GA1UdIwQY
MBaAFOzIoarQIFlDpFcjibt0M04cooSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEt
NGE2OGYyMzVjMzg4LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEtNGE2OGYyMzVjMzg4
LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcX0asVV
CqHXoKC5vOT95apF5eQvS+BeakW40CgeE1GhwZUy8Pr/GZnjP2bF4o2j2SK9VTT+
/eDWixCcGP5V0Nc+zEDVpnyKq+U6r1LHn9QCHA2WlCOQfe4iJ9EzMyln24zlND9Q
siPIjhMdBEmUwIypFfrHd4UQ7s0syHTkXsBhroivJtnWu48a/VvrOHfpGMgGZAWQ
ul0KH3RsPZnerwZBbQJhPOoHfrqWefWSTZW48Fg3EiWahvZ996qbgcUGd2uFhgUt
n+UVpcR/sy4NEJgzD6hduMD5qln/fjDYkjHDj5Q8QQAp5Qchlx3l8ypgFOaX6Pky
PBzeQIeH0vO8Rw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:57:15 2025 by rpki-client