Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: snmAyOkWaWLU+b0t0Squ5kHcAnhmeyh6f6gM0gaJBP8=
Subject key identifier: 20:CD:42:DF:98:57:14:E5:93:7D:6D:12:3A:15:50:75:04:60:51:EB
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 01965E71A4DFF41A7AD4119886B104162879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 08
Signing time: Tue 22 Apr 2025 17:00:28 +0000
Manifest this update: Tue 22 Apr 2025 17:00:28 +0000
Manifest next update: Wed 23 Apr 2025 17:00:28 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: 7ex9uZ7DGnYtsocAuS6w80FzOQLFCuC3WQ98VCFwq3o=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:a4:df:f4:1a:7a:d4:11:98:86:b1:04:16:28:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Apr 22 17:00:28 2025 GMT
Not After : Apr 23 17:00:28 2025 GMT
Subject: CN=20cd42df985714e5937d6d123a155075046051eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:d7:d0:2a:c7:99:1a:f8:17:ba:a5:05:96:
d4:0c:c2:69:8d:5e:1a:69:5c:ad:ed:51:fd:71:76:
9d:3a:df:8a:5f:06:d6:67:42:df:4e:f3:80:eb:53:
65:b8:4e:39:53:5a:48:37:bf:f1:75:a8:b4:5a:66:
22:38:10:35:39:a7:01:62:36:03:f9:1e:fb:27:66:
20:27:78:5d:a2:3e:ca:70:0d:b3:3b:0d:46:61:66:
54:cc:4b:22:2c:01:65:9e:cd:98:a2:90:65:9b:cc:
7d:23:1b:d9:b7:75:5a:70:e4:dc:76:a8:6e:7a:b6:
1a:c8:89:5b:b1:7a:7f:56:ce:08:a6:c2:c2:75:d2:
bf:25:d0:8b:52:51:78:07:6f:4a:07:ec:db:7b:7e:
3b:6d:84:11:e8:85:90:c2:5f:c3:86:29:ff:ed:4a:
91:8d:c8:48:66:03:d2:15:29:45:6c:03:0a:11:83:
51:6c:6f:7c:a9:98:be:02:f0:31:2f:b7:cd:03:74:
2d:dc:9a:f5:00:95:3c:f7:0f:6b:c2:62:e9:ce:8d:
17:f7:fc:b8:18:52:ee:2d:40:80:7e:ba:7b:0e:36:
8a:32:8b:1d:2f:61:81:b6:c0:36:4e:34:6e:db:c1:
72:7a:64:45:1a:9f:7d:54:79:60:3f:f1:b0:9b:38:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:42:DF:98:57:14:E5:93:7D:6D:12:3A:15:50:75:04:60:51:EB
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:27:50:3d:29:55:38:0f:c2:d9:7d:f8:1b:8e:78:2a:15:
c8:a8:c8:cc:5c:7e:35:eb:c5:91:92:01:2a:8c:9d:28:46:74:
5f:ff:16:03:82:73:97:33:cf:c3:f7:2a:46:08:d7:b9:58:c2:
aa:d3:d9:c3:96:2e:53:1b:b8:f4:a5:9f:8d:bd:46:7d:ce:a6:
65:51:78:12:a5:38:96:55:e0:a0:a5:ff:e1:a7:d0:6f:9f:67:
4e:bb:ef:a0:d8:3e:3c:fd:59:4b:54:2c:45:70:ef:3f:44:03:
eb:08:e2:8f:dc:08:9d:45:3c:f4:ec:2b:03:e0:b5:0e:28:0d:
80:78:d0:9c:3b:4e:9f:59:49:ff:2e:71:de:27:66:4d:8f:48:
9e:29:03:81:6d:24:d6:76:bc:60:aa:d7:34:34:12:9c:06:a8:
6a:b2:af:9a:8a:f7:a0:bb:a8:56:e2:c0:84:6f:33:26:89:29:
09:a7:bf:71:50:a5:4a:a2:53:a4:4d:cd:ed:c1:f2:7e:ad:f7:
3c:a1:03:72:6f:de:65:28:e3:2e:88:07:e6:89:c3:a9:46:69:
85:9d:6f:e5:66:9e:b4:75:0d:8a:57:10:48:0d:2f:a4:c4:75:
8a:86:f7:1e:32:59:e0:5f:28:ad:bd:b3:4a:d0:f3:53:93:e3:
eb:7d:52:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZecaTf9Bp61BGYhrEEFih5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2
MzhhYTYwHhcNMjUwNDIyMTcwMDI4WhcNMjUwNDIzMTcwMDI4WjAzMTEwLwYDVQQD
EygyMGNkNDJkZjk4NTcxNGU1OTM3ZDZkMTIzYTE1NTA3NTA0NjA1MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOHX0CrHmRr4F7qlBZbUDMJpjV4a
aVyt7VH9cXadOt+KXwbWZ0LfTvOA61NluE45U1pIN7/xdai0WmYiOBA1OacBYjYD
+R77J2YgJ3hdoj7KcA2zOw1GYWZUzEsiLAFlns2YopBlm8x9IxvZt3VacOTcdqhu
erYayIlbsXp/Vs4IpsLCddK/JdCLUlF4B29KB+zbe347bYQR6IWQwl/Dhin/7UqR
jchIZgPSFSlFbAMKEYNRbG98qZi+AvAxL7fNA3Qt3Jr1AJU89w9rwmLpzo0X9/y4
GFLuLUCAfrp7DjaKMosdL2GBtsA2TjRu28FyemRFGp99VHlgP/Gwmzii2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDNQt+YVxTlk31tEjoVUHUEYFHrMB8GA1UdIwQY
MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt
YjY3ZDMyMDk5MGM2LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2
LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqQnUD0p
VTgPwtl9+BuOeCoVyKjIzFx+NevFkZIBKoydKEZ0X/8WA4JzlzPPw/cqRgjXuVjC
qtPZw5YuUxu49KWfjb1Gfc6mZVF4EqU4llXgoKX/4afQb59nTrvvoNg+PP1ZS1Qs
RXDvP0QD6wjij9wInUU89OwrA+C1DigNgHjQnDtOn1lJ/y5x3idmTY9InikDgW0k
1na8YKrXNDQSnAaoarKvmor3oLuoVuLAhG8zJokpCae/cVClSqJTpE3N7cHyfq33
PKEDcm/eZSjjLogH5onDqUZphZ1v5WaetHUNilcQSA0vpMR1iob3HjJZ4F8orb2z
StDzU5Pj631SAQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:23 2025 by rpki-client