Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: 8cmnwhJ9Vndlqpf70CTslOs83MST5/BEBIf9aFMaZFo=
Subject key identifier: 45:B5:5D:85:08:37:EF:28:84:3F:78:F1:25:58:1D:CA:FC:EB:8D:DD
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 01967E336722E5FB35A897142871B5B6D6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 14A3
Signing time: Mon 28 Apr 2025 21:00:19 +0000
Manifest this update: Mon 28 Apr 2025 21:00:19 +0000
Manifest next update: Tue 29 Apr 2025 21:00:19 +0000
Files and hashes: 1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: RH/vqKNM1Y50DUOZ+aYtE6mXNzJcbVXApBwCUPo81/8=)
2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:67:22:e5:fb:35:a8:97:14:28:71:b5:b6:d6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Apr 28 21:00:19 2025 GMT
Not After : Apr 29 21:00:19 2025 GMT
Subject: CN=45b55d850837ef28843f78f125581dcafceb8ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:30:93:7b:9b:d1:ba:00:fb:96:76:32:6f:
b1:bf:1c:7e:e1:21:6a:72:be:9b:f4:fe:19:15:ee:
0b:50:15:fa:9f:68:65:e4:37:0c:4f:09:e0:69:83:
97:d9:ba:ad:a6:f7:10:03:56:2e:73:be:7c:c7:62:
14:97:7b:28:ce:e0:6e:5e:cf:4c:07:af:3d:33:b7:
0a:3a:03:46:cf:4a:8a:e2:4c:66:dd:f6:35:f7:d6:
14:05:f7:85:31:95:3e:7e:cf:c7:ad:67:c7:9c:ec:
2d:0f:a5:d3:76:0c:19:35:0d:7f:23:f7:de:44:b9:
cb:4f:c7:c5:73:63:0a:db:72:16:61:da:38:52:cd:
e0:b7:64:05:e7:f1:94:8d:1a:84:e1:cd:b5:4c:4b:
86:fc:38:40:77:f0:c1:87:93:b7:90:04:b1:51:28:
c4:65:41:e3:a4:ea:0a:db:49:e8:43:19:30:97:05:
f8:45:95:76:7a:b0:47:4e:b0:a4:ea:d2:fa:86:30:
72:c1:a6:31:1f:48:e2:29:28:19:9d:63:6d:fc:bd:
1b:bc:61:36:cc:1f:84:db:63:47:ba:d5:fe:89:44:
47:57:bc:4b:f3:d6:66:8d:7d:11:fe:a9:61:fc:31:
2d:70:7e:c6:4e:c3:d5:90:6e:5e:57:84:8a:8d:cd:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:5D:85:08:37:EF:28:84:3F:78:F1:25:58:1D:CA:FC:EB:8D:DD
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b9:c3:7e:3c:5d:1f:24:de:23:29:3f:f0:b1:25:68:01:3a:
f1:c3:eb:4c:e9:03:5a:94:d9:60:9e:e5:ff:e4:2c:fa:6f:c4:
18:c8:2b:df:21:e2:0e:02:73:7a:58:ba:9d:a4:1f:c7:c8:c3:
ce:7d:dd:fd:03:c6:f4:66:f5:d1:ff:54:c5:0e:fc:80:d3:a4:
cc:88:1a:93:f2:02:7b:11:4f:1d:c7:5d:3a:79:09:05:69:69:
e9:fe:62:ea:cc:71:63:6a:42:75:ef:81:60:b9:c6:82:37:a2:
4b:f8:67:83:77:0a:26:b7:fa:b9:25:03:3f:f5:09:2f:5a:4a:
15:2b:61:a1:77:ab:2f:94:ff:b6:da:37:61:71:d5:2d:8a:6b:
a2:34:49:3b:86:b0:1d:b7:af:71:31:f1:48:64:4b:dc:18:74:
b6:33:fd:75:54:00:1a:60:17:c3:02:7b:8e:f7:72:42:f2:83:
d9:3d:4f:ea:3f:fe:61:cd:73:38:ff:be:ac:47:4b:2c:1f:cd:
2a:7e:f2:26:7e:de:18:68:25:88:89:65:e2:ed:f9:b4:73:60:
5b:8f:9d:73:1c:34:4e:4f:30:8c:87:c6:58:e3:10:4c:dd:8d:
74:d6:c8:4c:4b:a9:a5:29:69:aa:81:71:d9:bb:6d:c2:67:06:
b0:20:e3:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+M2ci5fs1qJcUKHG1tta6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNmQyODQwNDA0NDIzOWVmNTgyNDJmMjEwZTBiMTY2Njdl
YjQwZDAwHhcNMjUwNDI4MjEwMDE5WhcNMjUwNDI5MjEwMDE5WjAzMTEwLwYDVQQD
Eyg0NWI1NWQ4NTA4MzdlZjI4ODQzZjc4ZjEyNTU4MWRjYWZjZWI4ZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KUwk3ub0boA+5Z2Mm+xvxx+4SFq
cr6b9P4ZFe4LUBX6n2hl5DcMTwngaYOX2bqtpvcQA1Yuc758x2IUl3sozuBuXs9M
B689M7cKOgNGz0qK4kxm3fY199YUBfeFMZU+fs/HrWfHnOwtD6XTdgwZNQ1/I/fe
RLnLT8fFc2MK23IWYdo4Us3gt2QF5/GUjRqE4c21TEuG/DhAd/DBh5O3kASxUSjE
ZUHjpOoK20noQxkwlwX4RZV2erBHTrCk6tL6hjBywaYxH0jiKSgZnWNt/L0bvGE2
zB+E22NHutX+iURHV7xL89ZmjX0R/qlh/DEtcH7GTsPVkG5eV4SKjc1tOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW1XYUIN+8ohD948SVYHcr8643dMB8GA1UdIwQY
MBaAFHttKEBARCOe9YJC8hDgsWZn60DQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEt
YTY1ZmJkODMwMzU4LzEvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEtYTY1ZmJkODMwMzU4
LzEvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrnDfjxd
HyTeIyk/8LElaAE68cPrTOkDWpTZYJ7l/+Qs+m/EGMgr3yHiDgJzeli6naQfx8jD
zn3d/QPG9Gb10f9UxQ78gNOkzIgak/ICexFPHcddOnkJBWlp6f5i6sxxY2pCde+B
YLnGgjeiS/hng3cKJrf6uSUDP/UJL1pKFSthoXerL5T/tto3YXHVLYprojRJO4aw
HbevcTHxSGRL3Bh0tjP9dVQAGmAXwwJ7jvdyQvKD2T1P6j/+Yc1zOP++rEdLLB/N
Kn7yJn7eGGgliIll4u35tHNgW4+dcxw0Tk8wjIfGWOMQTN2NdNbITEuppSlpqoFx
2bttwmcGsCDjqA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:54:00 2025 by rpki-client