Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: KMkNOKiksMiVR9/5MuE0vdp7vVE/whzFCQn8UL895Gw=
Subject key identifier: 77:7D:17:E5:A3:6B:23:83:CA:FB:FA:8F:12:17:38:01:D2:39:1D:0F
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 01967868A332B643BE2683B1339C369ED930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0B53
Signing time: Sun 27 Apr 2025 18:00:45 +0000
Manifest this update: Sun 27 Apr 2025 18:00:45 +0000
Manifest next update: Mon 28 Apr 2025 18:00:45 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: T3Q0Ol1QALZsaNw7iPDv0Q03AXc60OvWJInd2PXcEXs=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:a3:32:b6:43:be:26:83:b1:33:9c:36:9e:d9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Apr 27 18:00:45 2025 GMT
Not After : Apr 28 18:00:45 2025 GMT
Subject: CN=777d17e5a36b2383cafbfa8f12173801d2391d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:5c:ec:08:dd:15:a0:9a:be:90:21:90:1b:
ae:47:35:52:95:79:0b:82:6b:d3:6f:42:0d:11:5f:
3b:92:c3:81:ee:14:a0:45:b5:4f:a0:ce:c2:7e:5d:
2e:3d:b3:51:d9:0b:9d:df:2e:5a:b6:23:73:d5:71:
75:4d:66:92:5e:ea:9f:3c:6c:77:a1:c8:54:3f:20:
f3:57:6e:70:95:9f:6e:b2:6a:4e:63:e9:58:9e:31:
e2:11:08:f1:79:68:2c:45:4d:88:3b:79:36:31:bf:
5f:1a:eb:85:2a:32:c7:4c:49:0c:d0:e7:f0:7b:10:
0a:5f:40:17:c7:c0:d2:26:df:eb:64:b5:98:01:5b:
00:b3:6e:ea:5f:9a:1a:16:1d:d1:cb:31:86:50:76:
3d:a4:64:61:54:85:2f:ba:20:ef:1f:1c:75:36:10:
a4:e1:af:a4:e9:c2:6c:a8:6a:88:fa:fd:f1:d7:90:
50:cd:5e:c8:9e:63:b9:2b:db:1a:01:69:2b:63:6d:
18:8a:19:9a:9b:0f:33:ca:1d:f7:b7:cf:0c:6d:ec:
0c:a2:39:f6:be:c7:cc:d4:b5:47:e7:73:1b:6d:20:
7d:35:3f:b0:7b:29:31:12:c9:10:86:60:3c:91:b9:
a4:2b:a1:93:5e:df:f9:dc:06:b6:03:5a:8c:ac:3a:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7D:17:E5:A3:6B:23:83:CA:FB:FA:8F:12:17:38:01:D2:39:1D:0F
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:d0:c6:2c:3b:90:1f:9e:82:15:6b:c1:3b:ee:8a:67:a2:
5a:ed:5d:b0:48:df:f7:f9:92:73:74:1b:04:83:58:4e:e1:6e:
ce:67:a9:f1:c6:dd:af:dc:33:62:85:12:b5:72:54:ec:78:e9:
f8:f4:8e:f9:35:5f:b3:01:3a:c1:6d:4b:21:fb:27:64:a3:66:
06:e1:27:c1:b7:28:a3:b3:19:bd:58:2e:0f:17:3f:de:8a:25:
0c:0e:e5:95:26:64:83:7b:f7:02:29:90:cf:3d:c1:c8:e3:6c:
19:27:92:0e:44:d2:ba:5b:23:31:93:28:3e:9f:6c:05:07:6b:
b9:4d:59:67:db:cf:39:7b:5c:ba:ce:a8:c7:2a:f7:fd:d9:e8:
86:ac:ed:b4:b4:38:f3:5a:78:c5:fb:19:78:e6:31:0f:9d:e4:
8b:11:04:91:77:76:cb:5e:d7:47:40:ab:3a:3a:6e:62:ed:c1:
95:25:04:ea:52:30:bd:40:24:07:33:10:6c:11:55:b4:01:6b:
e4:f9:30:33:a0:69:3f:6b:22:1e:fa:0b:d5:3d:59:2d:7c:65:
25:df:a5:c8:fa:05:08:b9:9a:79:27:4d:75:c1:0f:e9:19:4d:
d9:9d:2b:2f:26:28:49:bd:83:0f:b8:24:16:ae:d8:cd:a5:2a:
e7:97:6c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aKMytkO+JoOxM5w2ntkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx
YjY5MjMwHhcNMjUwNDI3MTgwMDQ1WhcNMjUwNDI4MTgwMDQ1WjAzMTEwLwYDVQQD
Eyg3NzdkMTdlNWEzNmIyMzgzY2FmYmZhOGYxMjE3MzgwMWQyMzkxZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Nc7AjdFaCavpAhkBuuRzVSlXkL
gmvTb0INEV87ksOB7hSgRbVPoM7Cfl0uPbNR2Qud3y5atiNz1XF1TWaSXuqfPGx3
ochUPyDzV25wlZ9usmpOY+lYnjHiEQjxeWgsRU2IO3k2Mb9fGuuFKjLHTEkM0Ofw
exAKX0AXx8DSJt/rZLWYAVsAs27qX5oaFh3RyzGGUHY9pGRhVIUvuiDvHxx1NhCk
4a+k6cJsqGqI+v3x15BQzV7InmO5K9saAWkrY20Yihmamw8zyh33t88MbewMojn2
vsfM1LVH53MbbSB9NT+weykxEskQhmA8kbmkK6GTXt/53Aa2A1qMrDpMvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd9F+WjayODyvv6jxIXOAHSOR0PMB8GA1UdIwQY
MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt
YTQyOTZhZDk4NjM1LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1
LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY03Qxiw7
kB+eghVrwTvuimeiWu1dsEjf9/mSc3QbBINYTuFuzmep8cbdr9wzYoUStXJU7Hjp
+PSO+TVfswE6wW1LIfsnZKNmBuEnwbcoo7MZvVguDxc/3oolDA7llSZkg3v3AimQ
zz3ByONsGSeSDkTSulsjMZMoPp9sBQdruU1ZZ9vPOXtcus6oxyr3/dnohqzttLQ4
81p4xfsZeOYxD53kixEEkXd2y17XR0CrOjpuYu3BlSUE6lIwvUAkBzMQbBFVtAFr
5PkwM6BpP2siHvoL1T1ZLXxlJd+lyPoFCLmaeSdNdcEP6RlN2Z0rLyYoSb2DD7gk
Fq7YzaUq55dsow==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:19:35 2025 by rpki-client