Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: WEo/7AsvXh6j6SgYkZMcYRaC5J1h5dw5EXu4j63X3eA=
Subject key identifier: A5:AD:62:AA:25:A1:E5:F0:83:06:E5:7F:0F:64:C7:DB:16:3E:A5:E2
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 019688126638E93FADA04E857FF65C86E8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 01AB
Signing time: Wed 30 Apr 2025 19:00:29 +0000
Manifest this update: Wed 30 Apr 2025 19:00:29 +0000
Manifest next update: Thu 01 May 2025 19:00:29 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: 3mgy+JoP1HinwnFj5zUXwufxRaK+JKAC/DWOUmeSfus=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:66:38:e9:3f:ad:a0:4e:85:7f:f6:5c:86:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Apr 30 19:00:29 2025 GMT
Not After : May 1 19:00:29 2025 GMT
Subject: CN=a5ad62aa25a1e5f08306e57f0f64c7db163ea5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:6c:73:f9:69:ad:36:8b:09:38:59:1b:e9:
fa:b6:db:81:7c:69:7f:c9:d7:8e:ef:c0:63:6b:e8:
89:6c:41:d2:0e:5f:04:65:82:ba:9c:1f:64:b9:38:
d4:df:41:f3:56:89:45:6f:e1:66:7d:0d:fa:81:ab:
48:d6:f1:1a:0a:d9:9e:87:0a:45:a7:8b:6d:af:0b:
70:71:b0:85:2f:9b:52:1f:74:d9:fd:74:d6:d1:22:
29:67:f7:60:11:27:86:47:cd:2d:eb:9f:3c:cc:d7:
0f:27:65:e2:25:d0:ba:b8:61:b6:73:56:8e:d6:1c:
34:52:f3:ac:b1:a6:99:be:5b:3f:55:8b:dd:26:a0:
7b:1b:76:69:de:49:3b:af:68:2b:2f:c9:58:49:e9:
4d:ef:31:d1:f1:7f:15:39:10:1c:c9:bc:e2:53:3a:
16:20:37:2f:72:ca:a9:ea:c0:ee:ba:2a:d6:fb:b8:
f5:42:83:38:1a:0a:a3:4a:1a:82:a0:85:33:83:f5:
f3:13:b9:91:dd:52:9b:e9:d5:32:18:c0:08:85:73:
bd:f4:81:5a:4a:36:76:4f:29:aa:da:1c:21:a2:e6:
bd:5f:d1:3b:23:a8:e0:fa:81:90:a4:f4:35:73:fd:
3b:69:fa:02:53:e1:6f:9e:5d:83:9f:08:61:ac:1b:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:62:AA:25:A1:E5:F0:83:06:E5:7F:0F:64:C7:DB:16:3E:A5:E2
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:46:94:f5:7a:43:8e:6b:7b:72:d5:0b:a7:dc:9c:35:67:
55:3a:89:8a:90:bb:b9:ce:ab:93:07:5e:eb:79:80:44:e4:5d:
82:58:87:02:af:ae:53:85:9b:41:3a:99:c7:dc:6e:ab:93:d6:
5c:78:e0:bd:bf:4d:04:11:82:55:7f:bd:34:bb:e2:25:11:5a:
9d:2e:31:88:73:6e:a5:26:c7:8b:4e:d5:45:31:c8:87:43:d9:
f7:d2:fe:8a:80:e2:10:3b:39:06:db:71:d3:2b:72:55:e6:e1:
01:b5:e6:b5:b4:66:d1:00:45:a1:d2:0a:01:48:4c:51:19:22:
d7:82:d7:a3:db:ab:14:c6:3d:37:97:59:17:fc:b8:ae:63:40:
35:2f:c7:dd:c4:88:df:b9:0a:da:6a:48:56:1d:8c:20:f0:f6:
fe:cf:a1:b4:15:00:47:68:ae:77:d2:c9:5d:63:60:40:75:38:
e2:88:21:81:85:84:ae:f6:85:79:41:8d:83:71:8d:32:a9:43:
1b:84:a2:05:5e:58:34:02:12:6e:35:c9:37:2d:55:d8:4a:7e:
72:c4:2a:a9:08:41:e9:c0:54:8b:3a:dc:88:b9:a1:81:02:b0:
97:9f:c8:5b:d9:9d:f8:1c:7e:6b:84:2a:e3:b2:d3:c0:a5:e4:
bb:34:e0:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIEmY46T+toE6Ff/ZchuirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk
NTQyMTIwHhcNMjUwNDMwMTkwMDI5WhcNMjUwNTAxMTkwMDI5WjAzMTEwLwYDVQQD
EyhhNWFkNjJhYTI1YTFlNWYwODMwNmU1N2YwZjY0YzdkYjE2M2VhNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhsc/lprTaLCThZG+n6ttuBfGl/
ydeO78Bja+iJbEHSDl8EZYK6nB9kuTjU30HzVolFb+FmfQ36gatI1vEaCtmehwpF
p4ttrwtwcbCFL5tSH3TZ/XTW0SIpZ/dgESeGR80t6588zNcPJ2XiJdC6uGG2c1aO
1hw0UvOssaaZvls/VYvdJqB7G3Zp3kk7r2grL8lYSelN7zHR8X8VORAcybziUzoW
IDcvcsqp6sDuuirW+7j1QoM4GgqjShqCoIUzg/XzE7mR3VKb6dUyGMAIhXO99IFa
SjZ2Tymq2hwhoua9X9E7I6jg+oGQpPQ1c/07afoCU+Fvnl2DnwhhrBuZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWtYqoloeXwgwblfw9kx9sWPqXiMB8GA1UdIwQY
MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt
MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw
LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfehGlPV6
Q45re3LVC6fcnDVnVTqJipC7uc6rkwde63mARORdgliHAq+uU4WbQTqZx9xuq5PW
XHjgvb9NBBGCVX+9NLviJRFanS4xiHNupSbHi07VRTHIh0PZ99L+ioDiEDs5Bttx
0ytyVebhAbXmtbRm0QBFodIKAUhMURki14LXo9urFMY9N5dZF/y4rmNANS/H3cSI
37kK2mpIVh2MIPD2/s+htBUAR2iud9LJXWNgQHU44oghgYWErvaFeUGNg3GNMqlD
G4SiBV5YNAISbjXJNy1V2Ep+csQqqQhB6cBUizrciLmhgQKwl5/IW9md+Bx+a4Qq
47LTwKXkuzTgJA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:39:01 2025 by rpki-client