Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: m61fcadrxbV4gyOuloPnAdTZ/uUGHPxhkaLbeclaVB0=
Subject key identifier: 87:8B:96:E9:EE:6E:A0:BF:D0:F0:07:3D:78:85:75:48:CC:75:64:6B
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 019673E6E9029757346369D977F498F7DA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 0FE9
Signing time: Sat 26 Apr 2025 21:00:34 +0000
Manifest this update: Sat 26 Apr 2025 21:00:34 +0000
Manifest next update: Sun 27 Apr 2025 21:00:34 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: redZifzFlbs3yr4exc11hEJ8+VBIxQHlbk9wSRhHqc0=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:e9:02:97:57:34:63:69:d9:77:f4:98:f7:da:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Apr 26 21:00:34 2025 GMT
Not After : Apr 27 21:00:34 2025 GMT
Subject: CN=878b96e9ee6ea0bfd0f0073d78857548cc75646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:4f:a4:5a:dd:1f:a2:a9:ad:c8:ba:c3:ec:
7c:76:b2:da:8d:17:19:ef:c8:99:e5:35:7f:a2:f5:
95:45:ce:9a:93:be:18:1e:de:cd:ae:53:37:b0:bf:
3c:47:6c:1f:47:f1:37:2d:92:70:ed:41:22:73:50:
41:06:be:7a:0b:fb:14:58:d5:21:cf:f2:4b:35:d1:
67:cb:f2:ee:f7:35:f3:42:8c:c4:e4:00:95:cd:dd:
40:6b:20:c7:d2:cd:a8:fb:7e:93:44:0d:a5:b6:71:
67:31:dc:f0:8f:1c:03:e4:d7:31:3d:f5:84:75:5c:
d5:17:35:69:86:72:18:b5:5a:67:d7:b5:3e:a8:54:
44:57:e9:53:f5:98:a7:57:b6:3c:6c:3d:ba:d8:31:
1a:06:e8:d9:fe:3a:12:bd:15:45:f9:2c:ed:63:a1:
64:23:e5:9a:9f:c8:74:ba:60:36:7d:35:e4:1b:a9:
8b:5a:d3:22:c6:79:d7:46:6a:03:84:ee:a4:43:98:
65:c8:f6:aa:8b:2f:ad:2d:bb:a5:5d:ee:0a:c8:90:
f8:9c:47:e2:60:35:6f:c3:3a:6c:a2:4b:e2:23:e3:
42:23:98:19:a8:cf:de:af:57:47:55:ca:f5:07:d8:
1d:3a:5b:39:4a:34:61:05:47:fb:cd:08:86:34:62:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8B:96:E9:EE:6E:A0:BF:D0:F0:07:3D:78:85:75:48:CC:75:64:6B
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:b5:88:02:2d:19:16:b0:a3:a4:37:26:d5:d7:23:0a:1e:
72:05:37:7f:75:eb:c0:76:10:72:50:40:16:eb:76:0f:68:6d:
3a:5b:6c:b2:a1:98:28:1c:c5:b1:03:c1:0f:d3:71:40:46:e0:
6f:33:4b:5e:7c:29:24:c5:19:61:71:0b:da:c3:80:b5:82:46:
fe:78:d8:db:bd:1a:97:e2:f9:0d:59:14:76:9c:0c:42:39:8f:
44:b3:ba:49:c1:07:5a:bc:f9:0f:0d:4f:6f:a7:9f:1a:52:42:
c0:83:b0:55:82:2d:a0:ef:12:f8:b3:eb:33:ba:58:e5:ac:f1:
54:7b:d9:d5:38:fd:4e:a4:bf:3b:0f:59:ad:ed:d4:52:11:c4:
4f:43:d1:8c:d8:fe:4f:5c:d7:02:15:d8:50:3e:7c:11:29:9a:
72:af:6a:a6:eb:36:20:3c:59:5b:ee:ab:7d:c4:c7:6f:68:67:
c0:18:dd:9c:eb:e9:30:51:a0:9a:39:6a:6b:e8:43:0f:a7:83:
00:57:eb:62:2e:f5:40:01:99:d3:c1:83:58:8f:56:83:64:47:
fd:0a:cd:ea:2a:1c:56:f5:21:71:8b:c5:55:6f:72:9b:5b:69:
92:cc:44:af:5c:ee:f5:f9:cc:65:9f:62:99:97:3f:6e:17:8f:
06:9a:28:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5ukCl1c0Y2nZd/SY99ooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2YwM2JmMTQ1MWVlZTYyZWE3MjQwNWZhOGI2NGFiZmFl
M2M0ZTkwHhcNMjUwNDI2MjEwMDM0WhcNMjUwNDI3MjEwMDM0WjAzMTEwLwYDVQQD
Eyg4NzhiOTZlOWVlNmVhMGJmZDBmMDA3M2Q3ODg1NzU0OGNjNzU2NDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodBPpFrdH6Kprci6w+x8drLajRcZ
78iZ5TV/ovWVRc6ak74YHt7NrlM3sL88R2wfR/E3LZJw7UEic1BBBr56C/sUWNUh
z/JLNdFny/Lu9zXzQozE5ACVzd1AayDH0s2o+36TRA2ltnFnMdzwjxwD5NcxPfWE
dVzVFzVphnIYtVpn17U+qFREV+lT9ZinV7Y8bD262DEaBujZ/joSvRVF+SztY6Fk
I+Wan8h0umA2fTXkG6mLWtMixnnXRmoDhO6kQ5hlyPaqiy+tLbulXe4KyJD4nEfi
YDVvwzpsokviI+NCI5gZqM/er1dHVcr1B9gdOls5SjRhBUf7zQiGNGIqawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeLlunubqC/0PAHPXiFdUjMdWRrMB8GA1UdIwQY
MBaAFBE/A78UUe7mLqckBfqLZKv648TpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQt
ZGViZTU3NDdiMjkzLzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQtZGViZTU3NDdiMjkz
LzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYS1iAIt
GRawo6Q3JtXXIwoecgU3f3XrwHYQclBAFut2D2htOltssqGYKBzFsQPBD9NxQEbg
bzNLXnwpJMUZYXEL2sOAtYJG/njY270al+L5DVkUdpwMQjmPRLO6ScEHWrz5Dw1P
b6efGlJCwIOwVYItoO8S+LPrM7pY5azxVHvZ1Tj9TqS/Ow9Zre3UUhHET0PRjNj+
T1zXAhXYUD58ESmacq9qpus2IDxZW+6rfcTHb2hnwBjdnOvpMFGgmjlqa+hDD6eD
AFfrYi71QAGZ08GDWI9Wg2RH/QrN6iocVvUhcYvFVW9ym1tpksxEr1zu9fnMZZ9i
mZc/bhePBpooZw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:37:23 2025 by rpki-client