Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
File: i9lSvUDOCXP5EEEfWS426QE2wuo.mft (raw, json)
Hash identifier: t+Gv2+Am0wO8myJefaSTm6otLLqjwnq+QcmXY4PPSHQ=
Subject key identifier: FA:A4:90:80:85:F4:40:95:A4:3D:CB:D5:9F:6A:7E:EB:B6:14:95:E7
Authority key identifier: 8B:D9:52:BD:40:CE:09:73:F9:10:41:1F:59:2E:36:E9:01:36:C2:EA
Certificate issuer: /CN=8bd952bd40ce0973f910411f592e36e90136c2ea
Certificate serial: 01965492919689E94598B3AEDC5D5F1BBF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9lSvUDOCXP5EEEfWS426QE2wuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
Manifest number: 067D
Signing time: Sun 20 Apr 2025 19:00:13 +0000
Manifest this update: Sun 20 Apr 2025 19:00:13 +0000
Manifest next update: Mon 21 Apr 2025 19:00:13 +0000
Files and hashes: 1: i9lSvUDOCXP5EEEfWS426QE2wuo.crl (hash: mPDWTdnpbhhTuXGNSTxPWhvbD2AE/NQUheJsfgeU7PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9lSvUDOCXP5EEEfWS426QE2wuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:91:96:89:e9:45:98:b3:ae:dc:5d:5f:1b:bf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd952bd40ce0973f910411f592e36e90136c2ea
Validity
Not Before: Apr 20 19:00:13 2025 GMT
Not After : Apr 21 19:00:13 2025 GMT
Subject: CN=faa4908085f44095a43dcbd59f6a7eebb61495e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:f1:b9:46:e3:3d:41:c2:78:d7:27:20:03:
ef:fc:cb:5d:d1:cf:f9:d6:6c:df:8b:d9:bf:08:87:
3e:f6:a0:01:c2:92:65:4b:b2:bb:5e:66:e5:4a:fb:
25:30:98:16:17:0d:a2:84:2d:59:b6:82:1c:0b:df:
2c:4d:d8:1a:65:13:c7:a2:8b:cb:e8:2c:6f:b9:a1:
2c:cf:49:db:8a:8c:e0:34:5f:1c:11:c4:94:b4:05:
75:18:6d:da:67:70:d6:67:23:f5:31:dc:52:57:34:
29:bc:42:48:60:26:0b:52:4a:9f:c0:d3:4b:f8:bf:
cf:61:7d:81:e3:5d:68:80:c6:74:e7:8a:3f:8e:b5:
41:55:6f:f1:0f:94:d7:73:71:b1:55:15:fa:eb:bb:
82:a6:a6:c8:4f:52:9a:91:9e:0c:69:07:c0:18:fe:
92:c5:bb:bf:53:bb:86:ed:d0:01:1a:ac:40:76:dc:
92:f4:8f:60:d6:32:88:ad:ab:99:71:07:c6:fe:49:
b9:6a:12:99:34:fa:b1:a5:f3:2f:ec:3e:20:a3:f7:
2f:f5:07:bd:d2:cf:dd:b8:5e:4b:11:1e:d7:13:fa:
85:96:5a:35:ce:5a:c8:0a:35:2f:9b:23:77:96:55:
d2:bf:94:cb:87:f1:e3:19:7d:bd:6a:78:61:96:05:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:90:80:85:F4:40:95:A4:3D:CB:D5:9F:6A:7E:EB:B6:14:95:E7
X509v3 Authority Key Identifier:
keyid:8B:D9:52:BD:40:CE:09:73:F9:10:41:1F:59:2E:36:E9:01:36:C2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9lSvUDOCXP5EEEfWS426QE2wuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:73:56:5a:79:21:84:af:3c:1c:03:81:cc:3b:a9:64:7e:
ba:9e:13:68:d6:9b:f0:7a:7f:10:2e:d9:84:9f:48:6f:a4:a7:
4c:1e:4e:8d:3f:b5:44:bb:73:09:88:16:b6:ee:10:57:7c:92:
c0:31:d9:77:8c:73:08:91:d1:29:8d:ff:c9:b2:e4:e7:48:bd:
da:61:5d:ce:96:05:c3:bb:12:15:31:26:58:0a:e2:cc:e7:10:
ea:1c:3b:00:fb:9c:d1:c6:00:f9:f2:7d:0d:69:9c:0c:15:27:
da:15:6e:ec:01:4e:45:ac:08:91:85:35:db:83:e4:d8:41:56:
42:8d:a6:64:e2:97:4b:26:12:ae:79:6b:05:29:b7:f8:90:c9:
6b:07:27:21:4d:6e:b2:3d:a0:2a:5f:c5:21:3f:9c:5a:8d:f0:
66:d8:59:e0:4d:5e:2e:b8:5e:f4:05:2e:83:89:9d:37:7e:47:
4f:18:06:77:dd:e0:f3:2a:13:2e:be:ea:1a:9b:41:64:7c:38:
e8:27:b4:34:ba:6b:4f:b8:b6:ef:30:98:70:60:d4:07:33:65:
b6:91:95:c2:97:fb:74:51:65:f7:d5:12:c4:7a:83:f8:c1:77:
73:f1:9c:40:2e:99:28:1a:eb:f4:fd:a2:a5:c1:6a:6d:c1:f4:
ed:d0:b7:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkpGWielFmLOu3F1fG78mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDk1MmJkNDBjZTA5NzNmOTEwNDExZjU5MmUzNmU5MDEz
NmMyZWEwHhcNMjUwNDIwMTkwMDEzWhcNMjUwNDIxMTkwMDEzWjAzMTEwLwYDVQQD
EyhmYWE0OTA4MDg1ZjQ0MDk1YTQzZGNiZDU5ZjZhN2VlYmI2MTQ5NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIjxuUbjPUHCeNcnIAPv/Mtd0c/5
1mzfi9m/CIc+9qABwpJlS7K7XmblSvslMJgWFw2ihC1ZtoIcC98sTdgaZRPHoovL
6CxvuaEsz0nbiozgNF8cEcSUtAV1GG3aZ3DWZyP1MdxSVzQpvEJIYCYLUkqfwNNL
+L/PYX2B411ogMZ054o/jrVBVW/xD5TXc3GxVRX667uCpqbIT1KakZ4MaQfAGP6S
xbu/U7uG7dABGqxAdtyS9I9g1jKIrauZcQfG/km5ahKZNPqxpfMv7D4go/cv9Qe9
0s/duF5LER7XE/qFllo1zlrICjUvmyN3llXSv5TLh/HjGX29anhhlgXUEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqkkICF9ECVpD3L1Z9qfuu2FJXnMB8GA1UdIwQY
MBaAFIvZUr1Azglz+RBBH1kuNukBNsLqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYt
NWMyYWJlNTM5NGU2LzEvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYtNWMyYWJlNTM5NGU2
LzEvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaihzVlp5
IYSvPBwDgcw7qWR+up4TaNab8Hp/EC7ZhJ9Ib6SnTB5OjT+1RLtzCYgWtu4QV3yS
wDHZd4xzCJHRKY3/ybLk50i92mFdzpYFw7sSFTEmWArizOcQ6hw7APuc0cYA+fJ9
DWmcDBUn2hVu7AFORawIkYU124Pk2EFWQo2mZOKXSyYSrnlrBSm3+JDJawcnIU1u
sj2gKl/FIT+cWo3wZthZ4E1eLrhe9AUug4mdN35HTxgGd93g8yoTLr7qGptBZHw4
6Ce0NLprT7i27zCYcGDUBzNltpGVwpf7dFFl99USxHqD+MF3c/GcQC6ZKBrr9P2i
pcFqbcH07dC3jQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:28 2025 by rpki-client