Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier: mtPkAzeI2uMDWg+W1jN8ZRxXWT09F+t8UoPbdgNzHOE=
Subject key identifier: 9A:75:E9:66:9A:EF:08:C3:CE:24:2B:71:E6:1E:6F:96:37:58:E9:64
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 0196A27771F0E6469090CF1F57B69C2A48A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number: 1237
Signing time: Mon 05 May 2025 22:00:59 +0000
Manifest this update: Mon 05 May 2025 22:00:59 +0000
Manifest next update: Tue 06 May 2025 22:00:59 +0000
Files and hashes: 1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: kGY/vfOnstT0AoCoo2tUE0zXDHt94UBUL2Z/Ap6dR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:71:f0:e6:46:90:90:cf:1f:57:b6:9c:2a:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: May 5 22:00:59 2025 GMT
Not After : May 6 22:00:59 2025 GMT
Subject: CN=9a75e9669aef08c3ce242b71e61e6f963758e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:eb:df:10:7b:40:31:5c:03:4e:36:f9:80:
a1:df:c4:26:2c:8a:94:10:92:49:29:87:03:2b:0d:
87:66:43:dd:30:e0:d3:cc:93:bc:c0:5d:e9:33:a2:
ba:3f:0a:a5:db:82:2d:33:0d:53:d9:19:c6:e5:01:
4f:2e:8b:f4:01:0d:e2:3e:3d:ca:32:02:e6:a0:85:
a7:14:c7:28:a9:e8:6d:50:90:1b:39:1f:41:0f:4e:
f7:33:db:40:0f:14:2a:57:78:72:3c:c7:a5:0c:aa:
a0:60:9e:3e:4b:c6:1f:28:e2:d9:4b:96:31:30:42:
26:82:06:b7:e2:e1:b7:69:67:a6:5e:52:9a:77:28:
13:4d:63:2e:da:47:ba:30:45:a9:1d:d7:d8:71:d1:
6c:01:77:b1:03:c5:21:01:01:08:10:c9:eb:26:59:
2b:40:91:48:a7:85:7c:c2:38:cb:51:7d:b6:68:aa:
71:fd:a6:0e:8b:09:fe:28:ef:2e:b8:73:a1:47:f8:
a7:7b:fd:07:6a:4f:e3:22:fb:12:47:bf:cb:ee:d3:
e7:47:46:98:91:a9:01:21:1e:fb:00:be:cc:81:1a:
8a:d7:9a:2d:49:a1:1f:0c:94:22:17:41:ce:8f:59:
da:62:69:58:68:c2:d7:a2:9a:58:f8:3e:84:f6:c1:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:E9:66:9A:EF:08:C3:CE:24:2B:71:E6:1E:6F:96:37:58:E9:64
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:43:08:bc:09:7c:d4:d6:3d:92:4b:97:1a:a8:56:88:fd:ca:
99:88:06:e8:f7:2b:00:05:7a:af:21:31:c1:93:c8:50:8d:7a:
b3:f3:64:a7:3f:9e:60:62:a6:18:8a:cf:ac:90:92:a4:68:51:
af:48:8a:f5:de:48:3b:0d:7c:35:3e:3a:b1:6d:d2:8c:ee:76:
34:80:9c:6d:cd:02:cb:a3:ef:c3:44:e8:80:ec:9b:1b:ba:aa:
c1:09:7b:74:3b:f7:f5:25:c0:29:53:6e:e5:6a:0b:0a:64:99:
80:a7:fa:cc:ba:f2:8b:1a:d1:0c:f4:7a:b9:4e:d0:5a:b0:78:
7e:f2:75:79:d0:cd:46:e9:4c:8e:32:30:76:a1:f2:ea:7a:ee:
66:ed:d2:0f:19:4e:6a:28:cf:46:c4:bf:ef:cc:2d:30:2a:c9:
8e:bc:6d:3b:d4:47:4c:d6:76:da:70:d4:04:c4:63:c9:e2:f2:
7d:3d:8b:a9:d9:36:84:5a:12:f4:27:ba:03:78:d5:e9:2e:9b:
9a:aa:dd:5d:6a:27:b9:4a:7f:ba:10:74:81:e8:fd:08:fe:1e:
7d:50:1c:a2:68:c8:fb:93:07:84:e2:74:d7:ee:20:d0:ec:46:
a8:d9:2b:ca:8d:fd:8d:4f:5b:4f:43:98:90:c7:b9:78:f6:57:
ec:9f:82:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid3Hw5kaQkM8fV7acKkioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4
NzdiNmYwHhcNMjUwNTA1MjIwMDU5WhcNMjUwNTA2MjIwMDU5WjAzMTEwLwYDVQQD
Eyg5YTc1ZTk2NjlhZWYwOGMzY2UyNDJiNzFlNjFlNmY5NjM3NThlOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaTr3xB7QDFcA042+YCh38QmLIqU
EJJJKYcDKw2HZkPdMODTzJO8wF3pM6K6Pwql24ItMw1T2RnG5QFPLov0AQ3iPj3K
MgLmoIWnFMcoqehtUJAbOR9BD073M9tADxQqV3hyPMelDKqgYJ4+S8YfKOLZS5Yx
MEImgga34uG3aWemXlKadygTTWMu2ke6MEWpHdfYcdFsAXexA8UhAQEIEMnrJlkr
QJFIp4V8wjjLUX22aKpx/aYOiwn+KO8uuHOhR/ine/0Hak/jIvsSR7/L7tPnR0aY
kakBIR77AL7MgRqK15otSaEfDJQiF0HOj1naYmlYaMLXoppY+D6E9sGqUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp16Waa7wjDziQrceYeb5Y3WOlkMB8GA1UdIwQY
MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt
YzE1NWY5NTQzNmUxLzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx
LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkMIvAl8
1NY9kkuXGqhWiP3KmYgG6PcrAAV6ryExwZPIUI16s/Nkpz+eYGKmGIrPrJCSpGhR
r0iK9d5IOw18NT46sW3SjO52NICcbc0Cy6Pvw0TogOybG7qqwQl7dDv39SXAKVNu
5WoLCmSZgKf6zLryixrRDPR6uU7QWrB4fvJ1edDNRulMjjIwdqHy6nruZu3SDxlO
aijPRsS/78wtMCrJjrxtO9RHTNZ22nDUBMRjyeLyfT2Lqdk2hFoS9Ce6A3jV6S6b
mqrdXWonuUp/uhB0gej9CP4efVAcomjI+5MHhOJ01+4g0OxGqNkryo39jU9bT0OY
kMe5ePZX7J+CPw==
-----END CERTIFICATE-----
Generated at Tue May 6 07:12:29 2025 by rpki-client