Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: +/tExRZYYgY2iEH+XgL+LJx2dKrp21vwMvzIFFkWiFk=
Subject key identifier: 9A:11:19:23:C3:FC:43:8E:7C:5B:01:A3:1F:3C:5B:21:89:44:A1:42
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 0196771F11BF1F7F601C9C6F3B5D7A6B58F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 1314
Signing time: Sun 27 Apr 2025 12:00:46 +0000
Manifest this update: Sun 27 Apr 2025 12:00:46 +0000
Manifest next update: Mon 28 Apr 2025 12:00:46 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: trHikh0H5gkXU/hfDdRtb8pbkBicawznkqsf9I1mi2M=)
2: DoWPZtpC_HWnwGYFf_FzalBO300.roa (hash: WIbVE4iIQHDloWZiobD5nOBiotUirQnxdqGFBtG1XvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:11:bf:1f:7f:60:1c:9c:6f:3b:5d:7a:6b:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Apr 27 12:00:46 2025 GMT
Not After : Apr 28 12:00:46 2025 GMT
Subject: CN=9a111923c3fc438e7c5b01a31f3c5b218944a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:16:b0:9b:dc:71:81:7d:e6:15:1d:9f:31:
be:8a:3b:4b:85:d8:e5:62:cc:4e:6f:58:8a:6b:14:
44:32:15:b9:bb:1c:30:9a:9b:de:eb:6e:4e:41:70:
5b:7d:e1:e0:1e:a9:a4:e9:50:3a:dc:c7:c9:e6:ec:
98:7e:fb:ca:38:ea:c3:5d:f7:0e:68:82:d6:f0:0e:
31:c1:c1:ec:95:17:54:2f:ef:bb:5d:f7:d7:97:ef:
10:fd:53:42:09:e5:aa:a5:4d:58:a3:a2:3b:a0:7f:
29:e5:57:c5:d7:1e:18:c0:3c:92:0d:9c:78:1c:35:
cc:89:01:a8:47:17:2b:8d:16:f4:bf:2c:99:5c:4b:
ed:48:2c:a4:6e:70:27:76:ad:af:64:a6:7f:9c:a9:
b7:41:11:b2:59:1f:58:9c:9b:79:60:92:f6:b2:a8:
f5:29:2f:4d:2e:89:c3:91:a3:00:e9:66:ed:ba:94:
5c:e7:ea:b8:60:24:13:08:c5:5a:3f:d6:83:09:73:
f3:e4:22:42:0e:ab:f8:4b:8b:d0:58:b7:f9:9a:2f:
b7:95:00:6b:ed:cc:4b:3a:f7:f3:69:33:6b:73:d2:
b6:fc:18:87:25:8d:28:05:9b:ad:56:1f:9a:f1:d1:
63:45:ec:72:fe:49:65:56:5a:34:a0:da:58:d8:b7:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:19:23:C3:FC:43:8E:7C:5B:01:A3:1F:3C:5B:21:89:44:A1:42
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:09:fd:7a:aa:56:cb:d5:d0:26:47:2e:e3:fc:06:c3:5c:27:
82:01:0c:7b:88:48:9e:92:be:28:f2:7b:a7:99:8c:7c:52:b1:
ed:fc:bd:a9:59:45:e0:9e:0c:ce:7a:93:dc:88:d6:f7:b5:9a:
a2:b4:2b:df:6a:46:58:9f:ee:7d:0e:14:2c:5e:58:cf:62:72:
5e:6c:36:ee:9e:4a:a4:5d:b1:d0:1f:88:d0:89:2a:62:70:c8:
c6:e3:3e:aa:2f:14:42:c4:76:0f:10:76:19:3b:d6:fb:66:b1:
05:2f:d5:f2:48:6b:62:24:b2:72:d7:ca:c2:0b:fe:6d:bf:b8:
49:ed:79:63:ad:dd:28:ed:2e:5a:b6:0c:af:c7:f1:6f:d5:cb:
5e:b8:f6:7d:19:76:98:28:2c:57:4b:f4:5f:fd:53:6a:54:de:
35:f0:b7:8e:36:8e:f2:e4:d0:5e:65:9b:0d:62:8f:62:c0:c5:
54:ce:23:04:fb:bc:84:4d:10:d1:41:63:bb:71:37:37:89:0d:
82:59:35:6e:09:76:3a:bb:c4:38:93:0c:4f:8c:a5:1a:fb:91:
51:aa:65:2f:9a:07:81:c1:af:ce:8a:6e:ef:25:a4:cd:88:c3:
3f:de:f8:c6:e4:b0:95:e9:64:e9:fb:a8:7e:c0:0c:1d:68:0a:
9a:86:9a:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HxG/H39gHJxvO116a1j1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3
OWFkNzcwHhcNMjUwNDI3MTIwMDQ2WhcNMjUwNDI4MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg5YTExMTkyM2MzZmM0MzhlN2M1YjAxYTMxZjNjNWIyMTg5NDRhMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw28WsJvccYF95hUdnzG+ijtLhdjl
YsxOb1iKaxREMhW5uxwwmpve625OQXBbfeHgHqmk6VA63MfJ5uyYfvvKOOrDXfcO
aILW8A4xwcHslRdUL++7XffXl+8Q/VNCCeWqpU1Yo6I7oH8p5VfF1x4YwDySDZx4
HDXMiQGoRxcrjRb0vyyZXEvtSCykbnAndq2vZKZ/nKm3QRGyWR9YnJt5YJL2sqj1
KS9NLonDkaMA6WbtupRc5+q4YCQTCMVaP9aDCXPz5CJCDqv4S4vQWLf5mi+3lQBr
7cxLOvfzaTNrc9K2/BiHJY0oBZutVh+a8dFjRexy/kllVlo0oNpY2LfI4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoRGSPD/EOOfFsBox88WyGJRKFCMB8GA1UdIwQY
MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt
M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4
LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgn9eqpW
y9XQJkcu4/wGw1wnggEMe4hInpK+KPJ7p5mMfFKx7fy9qVlF4J4MznqT3IjW97Wa
orQr32pGWJ/ufQ4ULF5Yz2JyXmw27p5KpF2x0B+I0IkqYnDIxuM+qi8UQsR2DxB2
GTvW+2axBS/V8khrYiSyctfKwgv+bb+4Se15Y63dKO0uWrYMr8fxb9XLXrj2fRl2
mCgsV0v0X/1TalTeNfC3jjaO8uTQXmWbDWKPYsDFVM4jBPu8hE0Q0UFju3E3N4kN
glk1bgl2OrvEOJMMT4ylGvuRUaplL5oHgcGvzopu7yWkzYjDP974xuSwlelk6fuo
fsAMHWgKmoaaWw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:25 2025 by rpki-client