Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: U2feQDV4BDp1QjDJWL5y0LVcOsvD4gA/JT61Ny81/lM=
Subject key identifier: EE:69:41:B3:32:78:28:30:5D:0C:F8:B9:77:95:8F:0A:23:86:98:FC
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 01967D5803E5B41F0541976AE11259C99D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 17:00:42 +0000
Manifest this update: Mon 28 Apr 2025 17:00:42 +0000
Manifest next update: Tue 29 Apr 2025 17:00:42 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: F/VPF42zdheV2H3ufNdC4mdBJW7fRCSTj7mmdEeAXPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:58:03:e5:b4:1f:05:41:97:6a:e1:12:59:c9:9d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Apr 28 17:00:42 2025 GMT
Not After : Apr 29 17:00:42 2025 GMT
Subject: CN=ee6941b3327828305d0cf8b977958f0a238698fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:3b:8b:cd:75:96:32:bc:56:cd:fa:9d:05:
c4:d1:06:ec:72:81:d7:5a:21:83:79:ac:92:6c:db:
df:9e:22:27:ec:51:4c:04:a5:3c:56:57:15:0d:40:
dd:69:af:03:55:80:e5:4e:9e:3c:39:fd:01:32:9a:
87:53:9b:50:7a:2b:45:92:fe:fc:58:6a:f3:71:aa:
e8:c7:4d:66:0d:b8:33:8f:d4:85:03:27:73:2c:d1:
ba:5f:45:79:a1:87:3b:ae:b7:0e:33:7f:18:e5:8b:
fb:31:88:d4:61:2b:31:a3:05:71:e2:6a:de:1b:05:
c9:9c:ed:3d:ce:2b:c3:c4:dd:81:d7:ca:1b:b8:0f:
33:b5:ba:c1:f1:78:40:08:0d:16:1b:ed:00:8d:b1:
1a:84:e8:a4:ba:fe:b9:38:52:92:ef:49:3d:ed:ae:
68:ba:98:cd:ee:a7:9a:0f:ba:20:95:6c:c1:4f:5d:
3c:f8:6b:11:72:90:3b:54:0d:57:88:4f:bc:13:ce:
bd:0b:77:62:1a:ff:bb:3b:37:e7:45:aa:97:06:33:
3b:5f:15:2b:c9:4e:ad:0c:c3:3e:3a:e6:08:c1:18:
2b:47:92:95:77:25:7d:14:57:6a:c1:bf:0d:19:52:
6f:1a:19:1b:25:1f:ee:64:c0:b3:ee:ce:6e:71:bf:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:41:B3:32:78:28:30:5D:0C:F8:B9:77:95:8F:0A:23:86:98:FC
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:45:9d:eb:c0:90:7d:c9:7c:c6:bb:5c:d1:02:f2:77:6e:80:
9a:4b:ea:3c:50:1d:d1:26:9c:84:50:0c:5f:2a:b0:a7:c8:3f:
44:ed:18:cc:0b:be:e1:b0:74:bf:7d:b2:d4:1e:a8:ca:78:4d:
41:c0:9a:bf:13:8b:d7:01:12:50:63:b0:47:38:f0:64:98:7d:
01:bb:9d:d1:e7:72:f9:83:39:2c:ef:59:94:92:ac:30:50:fe:
19:92:d5:52:5c:af:35:de:ee:39:9e:1c:02:75:70:21:66:ec:
8f:ad:e4:1f:67:56:4b:a6:26:db:3b:1d:ec:fa:d8:fe:45:cd:
e5:36:6c:74:d6:b1:12:a4:2e:72:f5:f8:bf:55:bf:40:d8:29:
08:57:82:62:b8:fc:9d:f7:aa:ee:ea:25:01:9b:ce:05:86:f9:
32:6a:18:40:bf:b6:34:89:2e:1d:f0:9c:41:a8:1e:8e:68:47:
7c:41:75:b1:26:fd:57:91:df:e2:6f:87:04:ee:91:28:fd:de:
93:d3:48:0c:63:34:7a:cc:65:36:ed:fc:59:ea:0e:b2:79:99:
8b:a2:ac:10:c2:54:f2:9e:ff:08:d5:32:0c:9a:8b:5e:91:d0:
8d:17:ef:61:a5:2c:e8:b0:a0:7f:c3:26:07:45:42:27:2b:3c:
b3:ee:79:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9WAPltB8FQZdq4RJZyZ1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3
ODhlNmUwHhcNMjUwNDI4MTcwMDQyWhcNMjUwNDI5MTcwMDQyWjAzMTEwLwYDVQQD
EyhlZTY5NDFiMzMyNzgyODMwNWQwY2Y4Yjk3Nzk1OGYwYTIzODY5OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXU7i811ljK8Vs36nQXE0QbscoHX
WiGDeaySbNvfniIn7FFMBKU8VlcVDUDdaa8DVYDlTp48Of0BMpqHU5tQeitFkv78
WGrzcarox01mDbgzj9SFAydzLNG6X0V5oYc7rrcOM38Y5Yv7MYjUYSsxowVx4mre
GwXJnO09zivDxN2B18obuA8ztbrB8XhACA0WG+0AjbEahOikuv65OFKS70k97a5o
upjN7qeaD7oglWzBT108+GsRcpA7VA1XiE+8E869C3diGv+7OzfnRaqXBjM7XxUr
yU6tDMM+OuYIwRgrR5KVdyV9FFdqwb8NGVJvGhkbJR/uZMCz7s5ucb++5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5pQbMyeCgwXQz4uXeVjwojhpj8MB8GA1UdIwQY
MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt
YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj
LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEWd68CQ
fcl8xrtc0QLyd26AmkvqPFAd0SachFAMXyqwp8g/RO0YzAu+4bB0v32y1B6oynhN
QcCavxOL1wESUGOwRzjwZJh9Abud0edy+YM5LO9ZlJKsMFD+GZLVUlyvNd7uOZ4c
AnVwIWbsj63kH2dWS6Ym2zsd7PrY/kXN5TZsdNaxEqQucvX4v1W/QNgpCFeCYrj8
nfeq7uolAZvOBYb5MmoYQL+2NIkuHfCcQagejmhHfEF1sSb9V5Hf4m+HBO6RKP3e
k9NIDGM0esxlNu38WeoOsnmZi6KsEMJU8p7/CNUyDJqLXpHQjRfvYaUs6LCgf8Mm
B0VCJys8s+55Ww==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:30:37 2025 by rpki-client