Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: UtlDxBdP7SHDIIu8UgZzsetwBhbuLsn6Jx0WYh46TCU=
Subject key identifier: 61:F1:00:0E:06:53:85:59:19:65:B6:6A:48:39:91:EA:80:6A:68:92
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019678D628F7A237AF551F8B3F3720D401D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0AEC
Signing time: Sun 27 Apr 2025 20:00:23 +0000
Manifest this update: Sun 27 Apr 2025 20:00:23 +0000
Manifest next update: Mon 28 Apr 2025 20:00:23 +0000
Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: McbtNB6a63Z4AG5mt92jIh/pFCVj85E680zaGms/uj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:28:f7:a2:37:af:55:1f:8b:3f:37:20:d4:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Apr 27 20:00:23 2025 GMT
Not After : Apr 28 20:00:23 2025 GMT
Subject: CN=61f1000e065385591965b66a483991ea806a6892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:81:52:7d:16:df:db:da:7e:c2:e1:09:6d:
28:24:5b:45:8c:3d:a1:49:8d:ab:50:18:87:04:1d:
08:7b:06:ca:28:25:20:97:fc:ab:e9:87:63:e3:1d:
f8:79:d4:97:66:f4:d9:29:00:fc:2b:bf:00:53:b0:
b0:23:92:9a:86:92:df:31:0a:00:b3:3f:b1:f6:fd:
dd:d4:40:39:b7:af:e4:69:53:03:ea:06:20:c5:87:
ef:26:cc:1e:25:cf:63:50:00:3e:eb:53:7d:c9:5a:
23:6d:39:89:85:0d:15:93:a7:3e:19:08:33:f9:fe:
3b:8e:b4:10:a0:85:bc:5e:45:f5:ca:17:77:5e:1e:
e0:5c:ba:49:9d:d5:9b:78:41:5e:6e:3f:c6:1a:15:
17:3d:cc:eb:29:15:5d:93:fb:fd:ff:5c:39:85:94:
85:ac:08:19:db:35:d6:4b:94:3b:50:a2:0e:f2:fb:
a2:8f:1c:46:3c:c3:32:26:68:d8:fa:3e:f8:93:e4:
80:aa:fe:a0:6b:11:97:12:c9:c8:0f:d9:d1:f9:b5:
b8:ed:6f:f7:74:d8:01:c9:c9:af:c2:df:be:e7:0f:
88:bf:df:ed:e7:2f:b5:ef:96:4f:35:d0:57:76:ca:
1f:e0:bd:ec:77:17:7a:f1:0a:43:2d:9b:74:67:4b:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:00:0E:06:53:85:59:19:65:B6:6A:48:39:91:EA:80:6A:68:92
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:55:b1:b8:af:dc:38:ba:bb:fd:2d:9a:f1:83:bf:18:62:9a:
a7:94:95:36:c2:29:1c:c2:b0:27:39:f9:3d:10:c4:f0:2a:be:
a7:51:cd:0f:4d:5e:23:18:c8:de:07:fe:98:ab:dc:fc:43:29:
d3:28:44:db:bd:42:55:54:1e:3d:2e:28:f3:90:e4:b2:0c:a9:
33:48:66:0a:21:51:8e:78:8a:eb:95:24:29:9b:ea:17:36:dd:
d1:e3:a8:a3:10:ee:b6:21:df:64:ea:70:18:fe:a8:cd:83:a7:
44:41:ab:83:70:d7:5e:f3:45:7c:2e:ed:ab:13:8c:b3:06:97:
e7:d8:a7:32:2c:55:1c:80:10:d5:47:17:5a:0a:b1:d9:7f:7d:
66:cd:3d:b6:76:d7:57:ff:88:61:ae:eb:cb:05:4f:f5:6d:d8:
bf:cb:53:2f:49:96:ff:a9:96:a2:5c:17:c7:ee:aa:73:c1:0a:
40:ca:de:2e:0d:54:a5:6d:41:3b:1f:4c:25:53:ad:a8:27:97:
3d:4d:7e:4b:ec:9d:63:d5:1b:48:df:f4:04:34:94:6b:45:02:
8d:28:11:33:18:4d:8e:c9:80:20:7f:aa:c4:ba:6b:82:c4:9c:
07:05:2a:b3:9c:86:49:90:4e:a2:6b:fd:cf:07:c0:c7:9e:a8:
f2:b8:05:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41ij3ojevVR+LPzcg1AHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz
ZTllZjkwHhcNMjUwNDI3MjAwMDIzWhcNMjUwNDI4MjAwMDIzWjAzMTEwLwYDVQQD
Eyg2MWYxMDAwZTA2NTM4NTU5MTk2NWI2NmE0ODM5OTFlYTgwNmE2ODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q2BUn0W39vafsLhCW0oJFtFjD2h
SY2rUBiHBB0IewbKKCUgl/yr6Ydj4x34edSXZvTZKQD8K78AU7CwI5KahpLfMQoA
sz+x9v3d1EA5t6/kaVMD6gYgxYfvJsweJc9jUAA+61N9yVojbTmJhQ0Vk6c+GQgz
+f47jrQQoIW8XkX1yhd3Xh7gXLpJndWbeEFebj/GGhUXPczrKRVdk/v9/1w5hZSF
rAgZ2zXWS5Q7UKIO8vuijxxGPMMyJmjY+j74k+SAqv6gaxGXEsnID9nR+bW47W/3
dNgBycmvwt++5w+Iv9/t5y+175ZPNdBXdsof4L3sdxd68QpDLZt0Z0uC2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHxAA4GU4VZGWW2akg5keqAamiSMB8GA1UdIwQY
MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt
ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw
LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVWxuK/c
OLq7/S2a8YO/GGKap5SVNsIpHMKwJzn5PRDE8Cq+p1HND01eIxjI3gf+mKvc/EMp
0yhE271CVVQePS4o85DksgypM0hmCiFRjniK65UkKZvqFzbd0eOooxDutiHfZOpw
GP6ozYOnREGrg3DXXvNFfC7tqxOMswaX59inMixVHIAQ1UcXWgqx2X99Zs09tnbX
V/+IYa7rywVP9W3Yv8tTL0mW/6mWolwXx+6qc8EKQMreLg1UpW1BOx9MJVOtqCeX
PU1+S+ydY9UbSN/0BDSUa0UCjSgRMxhNjsmAIH+qxLprgsScBwUqs5yGSZBOomv9
zwfAx56o8rgFjA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:09:57 2025 by rpki-client