Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File: F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier: OnfDw+o5VxRFtDNFT2gzE6fsYsHEdz/5RfPthiKUcrY=
Subject key identifier: E7:A5:EB:77:EC:F6:4E:48:FD:36:6E:EA:A7:5B:7C:1D:FB:6A:77:A7
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer: /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial: 0196876D7232C0E5EBA1B6601D96C71A6A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number: 074D
Signing time: Wed 30 Apr 2025 16:00:18 +0000
Manifest this update: Wed 30 Apr 2025 16:00:18 +0000
Manifest next update: Thu 01 May 2025 16:00:18 +0000
Files and hashes: 1: F3XdxSn1elmets19uiuSstN190o.crl (hash: ifeS+nZmt4xJ+Azrn2VSiRcDYYtU401OQhEEr1xm4I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:72:32:c0:e5:eb:a1:b6:60:1d:96:c7:1a:6a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Validity
Not Before: Apr 30 16:00:18 2025 GMT
Not After : May 1 16:00:18 2025 GMT
Subject: CN=e7a5eb77ecf64e48fd366eeaa75b7c1dfb6a77a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:92:f9:37:ee:79:71:45:d9:ea:62:75:59:
78:e9:da:26:fa:62:06:58:c0:c1:8c:0d:b7:e8:35:
7a:62:ea:3a:b3:9f:e5:34:1a:20:c9:69:8c:0d:42:
71:1f:30:04:f9:cf:c2:68:51:10:7e:ca:e4:ec:2a:
07:e4:54:3f:8f:3f:9f:5d:c5:b4:42:8d:28:58:6f:
be:ed:5d:8c:9f:49:bb:e1:98:5e:bd:c6:75:48:11:
a1:9a:5a:39:40:88:1f:c1:4b:c4:0f:a5:30:36:cc:
9f:ef:92:26:80:2f:48:5a:66:12:2f:c7:87:07:e6:
0d:6d:72:91:30:6b:e9:59:3a:cb:4d:16:82:4c:fe:
36:53:89:9b:95:fa:90:58:75:f2:8c:e1:64:a7:4f:
4a:b5:cf:ae:3e:d8:b6:e1:2c:c8:6a:de:4e:ba:ee:
c5:ed:be:5f:13:f5:02:d6:88:91:c4:63:cc:53:b6:
28:8e:24:44:a4:85:f0:b5:37:73:11:3b:43:1a:3e:
39:dc:07:ee:1e:c8:a1:fa:db:37:66:2d:7a:ba:40:
90:9a:10:a7:79:33:ae:e4:56:c1:ae:c3:fd:08:6b:
c9:3e:ce:c2:da:07:ef:d3:31:42:8d:22:2e:b9:41:
89:e5:cb:72:f3:b0:e2:48:a2:4e:4e:53:9e:fe:8d:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:EB:77:EC:F6:4E:48:FD:36:6E:EA:A7:5B:7C:1D:FB:6A:77:A7
X509v3 Authority Key Identifier:
keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:32:7b:62:9e:f2:0b:26:bf:b6:e6:c1:8b:9e:63:2a:cc:
46:43:e3:05:a5:34:f4:de:cf:7c:ec:b5:b5:9e:00:93:b0:d7:
b8:b4:51:8a:0c:0d:71:6b:d0:3d:85:74:eb:05:f5:63:33:c4:
97:37:ed:a4:c3:dc:f2:9c:72:bf:74:cf:36:81:92:05:aa:ed:
76:0f:f6:8b:c4:13:90:a6:97:3e:54:ab:ee:c9:57:5b:42:87:
02:66:70:1c:e4:fb:76:9f:0b:b0:3a:7f:ac:97:b4:64:d9:6a:
b9:c3:1a:96:a3:b3:0f:a5:17:94:9b:6d:80:d3:5f:45:95:3b:
d3:af:6d:2e:54:22:45:73:74:1f:55:6b:2b:2f:28:40:35:d0:
d6:6a:c9:88:ef:4f:32:95:80:6d:0c:ab:37:d2:f5:a9:88:12:
00:da:7a:ee:72:2d:8e:ef:d2:d8:18:71:97:2b:9c:da:c3:54:
d7:3f:d6:31:ed:8a:a1:d4:91:d0:c5:70:0b:ee:d7:05:ad:50:
f8:98:18:54:93:83:92:33:4a:99:b2:c5:8e:38:6d:17:21:26:
98:88:99:7f:26:ba:15:0e:96:03:9c:ec:12:13:2f:14:0d:8b:
9d:84:36:ee:6a:ac:65:48:d5:cf:e8:4b:a3:0b:ef:55:f5:3f:
57:06:4d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbXIywOXrobZgHZbHGmopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzVkZGM1MjlmNTdhNTk5ZWI2Y2Q3ZGJhMmI5MmIyZDM3
NWY3NGEwHhcNMjUwNDMwMTYwMDE4WhcNMjUwNTAxMTYwMDE4WjAzMTEwLwYDVQQD
EyhlN2E1ZWI3N2VjZjY0ZTQ4ZmQzNjZlZWFhNzViN2MxZGZiNmE3N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNeS+TfueXFF2epidVl46dom+mIG
WMDBjA236DV6Yuo6s5/lNBogyWmMDUJxHzAE+c/CaFEQfsrk7CoH5FQ/jz+fXcW0
Qo0oWG++7V2Mn0m74ZhevcZ1SBGhmlo5QIgfwUvED6UwNsyf75ImgC9IWmYSL8eH
B+YNbXKRMGvpWTrLTRaCTP42U4mblfqQWHXyjOFkp09Ktc+uPti24SzIat5Ouu7F
7b5fE/UC1oiRxGPMU7YojiREpIXwtTdzETtDGj453AfuHsih+ts3Zi16ukCQmhCn
eTOu5FbBrsP9CGvJPs7C2gfv0zFCjSIuuUGJ5cty87DiSKJOTlOe/o3YZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOel63fs9k5I/TZu6qdbfB37anenMB8GA1UdIwQY
MBaAFBd13cUp9XpZnrbNfborkrLTdfdKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNzk0YjMtOGEyZS00Yjc2LThmMGQt
MjlhMzM5MDJhNzZmLzEvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lNzk0YjMtOGEyZS00Yjc2LThmMGQtMjlhMzM5MDJhNzZm
LzEvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6Mye2Ke
8gsmv7bmwYueYyrMRkPjBaU09N7PfOy1tZ4Ak7DXuLRRigwNcWvQPYV06wX1YzPE
lzftpMPc8pxyv3TPNoGSBartdg/2i8QTkKaXPlSr7slXW0KHAmZwHOT7dp8LsDp/
rJe0ZNlqucMalqOzD6UXlJttgNNfRZU7069tLlQiRXN0H1VrKy8oQDXQ1mrJiO9P
MpWAbQyrN9L1qYgSANp67nItju/S2Bhxlyuc2sNU1z/WMe2KodSR0MVwC+7XBa1Q
+JgYVJODkjNKmbLFjjhtFyEmmIiZfya6FQ6WA5zsEhMvFA2LnYQ27mqsZUjVz+hL
owvvVfU/VwZN4w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:56 2025 by rpki-client