Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: 0vk3W0rCiGd0K473ajkhcb7KqTxFYFaIYvHVhVOMLsk=
Subject key identifier: F0:BF:B2:09:66:C9:3E:3A:74:1B:F7:94:C7:17:58:A7:0F:3C:21:B9
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 01967CB32BDD4BE72F2B969E1447B846A90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 14A3
Signing time: Mon 28 Apr 2025 14:00:38 +0000
Manifest this update: Mon 28 Apr 2025 14:00:38 +0000
Manifest next update: Tue 29 Apr 2025 14:00:38 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: kMk8VfjzsyuCAssPD0BZlXE+pXUhNBQDqCHqoIr+BQg=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:2b:dd:4b:e7:2f:2b:96:9e:14:47:b8:46:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Apr 28 14:00:38 2025 GMT
Not After : Apr 29 14:00:38 2025 GMT
Subject: CN=f0bfb20966c93e3a741bf794c71758a70f3c21b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:ad:d9:6f:71:83:95:5c:3b:e0:c7:e3:60:
2b:56:ab:24:da:81:f7:3d:14:99:ed:8d:4d:a6:54:
53:fa:7a:da:5f:ce:29:6a:3a:bd:d8:c8:20:24:41:
07:82:12:1e:bf:9e:2f:68:8c:dd:fb:5c:28:1d:be:
ad:78:9e:0f:6d:8f:d7:8a:8a:be:20:56:c5:c5:77:
9c:dd:c9:94:1f:0c:d8:65:17:31:02:4c:89:29:67:
bd:14:5d:c0:59:d7:62:a0:28:3a:a1:76:55:e4:22:
35:03:36:ca:3e:74:86:1b:a0:28:31:e3:c4:d5:71:
bc:22:b7:25:65:16:0c:ff:e5:85:b0:c1:eb:e9:2d:
52:38:5f:5b:40:a1:de:9c:b5:3c:8f:3a:0f:9d:4b:
5c:d9:92:07:0d:a9:a2:eb:a4:63:e5:d2:b9:8a:81:
49:66:ac:46:49:b9:c4:11:b2:97:65:95:19:fc:13:
00:95:31:68:fd:57:18:bd:be:40:5d:b8:59:14:24:
c0:29:63:cb:ae:4b:60:8a:a2:18:3d:ce:6b:3c:42:
22:a7:19:1d:84:e4:22:93:26:e8:a1:7a:de:b6:5b:
9c:12:f2:1f:7a:23:f5:e5:e8:00:c8:48:ed:5f:5a:
f2:e0:ba:aa:22:b8:f3:66:b1:38:95:61:65:cc:54:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:B2:09:66:C9:3E:3A:74:1B:F7:94:C7:17:58:A7:0F:3C:21:B9
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:04:ae:35:07:aa:11:63:06:6c:b6:dc:46:fe:79:bf:bc:07:
2d:f9:b1:f3:2b:57:e5:37:99:53:6b:34:9a:d1:30:7a:fd:e8:
6a:53:fb:d5:81:fe:73:af:64:88:59:44:55:79:c4:89:05:03:
ed:5a:ec:a9:7a:bf:ff:b8:c0:96:48:a6:87:04:0f:b5:6c:40:
8b:de:1e:fb:b0:63:73:b9:fb:a4:b3:d1:fc:44:e9:91:bd:b2:
ba:9f:74:76:c6:8b:d2:28:9a:01:4f:01:c1:31:19:f8:b2:15:
7a:4d:57:f4:46:db:c8:0a:8e:7a:67:37:39:27:10:fa:11:eb:
23:7e:00:ce:9a:8c:3c:74:1a:2d:ba:c3:ea:ee:1a:30:a1:aa:
24:a4:cc:05:4b:79:3e:38:85:f7:e5:c9:5e:f8:58:82:05:63:
28:3c:97:f1:31:72:60:66:d6:75:ff:80:85:86:4f:e6:c5:09:
02:94:2f:9c:28:28:80:29:69:a6:57:4f:39:b5:31:65:0c:33:
87:e5:ee:65:65:0e:fc:72:ff:d8:c6:02:91:4c:03:e1:23:26:
a2:8b:c4:92:b9:e5:0e:54:1a:18:5b:f1:89:61:fa:f8:44:7c:
e1:03:fd:bd:00:65:b3:00:51:0b:07:2f:58:8a:09:9d:09:a4:
94:f1:e4:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8syvdS+cvK5aeFEe4RqkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw
NmY0MzAwHhcNMjUwNDI4MTQwMDM4WhcNMjUwNDI5MTQwMDM4WjAzMTEwLwYDVQQD
EyhmMGJmYjIwOTY2YzkzZTNhNzQxYmY3OTRjNzE3NThhNzBmM2MyMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkOt2W9xg5VcO+DH42ArVqsk2oH3
PRSZ7Y1NplRT+nraX84pajq92MggJEEHghIev54vaIzd+1woHb6teJ4PbY/Xioq+
IFbFxXec3cmUHwzYZRcxAkyJKWe9FF3AWddioCg6oXZV5CI1AzbKPnSGG6AoMePE
1XG8IrclZRYM/+WFsMHr6S1SOF9bQKHenLU8jzoPnUtc2ZIHDami66Rj5dK5ioFJ
ZqxGSbnEEbKXZZUZ/BMAlTFo/VcYvb5AXbhZFCTAKWPLrktgiqIYPc5rPEIipxkd
hOQikybooXretlucEvIfeiP15egAyEjtX1ry4LqqIrjzZrE4lWFlzFS0uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC/sglmyT46dBv3lMcXWKcPPCG5MB8GA1UdIwQY
MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt
MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0
LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQSuNQeq
EWMGbLbcRv55v7wHLfmx8ytX5TeZU2s0mtEwev3oalP71YH+c69kiFlEVXnEiQUD
7VrsqXq//7jAlkimhwQPtWxAi94e+7Bjc7n7pLPR/ETpkb2yup90dsaL0iiaAU8B
wTEZ+LIVek1X9EbbyAqOemc3OScQ+hHrI34AzpqMPHQaLbrD6u4aMKGqJKTMBUt5
PjiF9+XJXvhYggVjKDyX8TFyYGbWdf+AhYZP5sUJApQvnCgogClppldPObUxZQwz
h+XuZWUO/HL/2MYCkUwD4SMmoovEkrnlDlQaGFvxiWH6+ER84QP9vQBlswBRCwcv
WIoJnQmklPHkrA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:14:04 2025 by rpki-client