Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: VIPVeoA+e00q/0UXYywYHAobHUYegeRqYlscQvte9II=
Subject key identifier: DD:15:13:E0:D7:64:A4:0C:4E:94:3E:AE:6B:84:32:86:7D:EC:1A:26
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019657943542B6E713CB0A6A604A6B11C808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0B7A
Signing time: Mon 21 Apr 2025 09:00:52 +0000
Manifest this update: Mon 21 Apr 2025 09:00:52 +0000
Manifest next update: Tue 22 Apr 2025 09:00:52 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: QKjq775ip/haxcYk1lrJvMQs3/t+vginAghsjl1LswE=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:35:42:b6:e7:13:cb:0a:6a:60:4a:6b:11:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Apr 21 09:00:52 2025 GMT
Not After : Apr 22 09:00:52 2025 GMT
Subject: CN=dd1513e0d764a40c4e943eae6b8432867dec1a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:bb:95:16:80:7a:c0:fd:7f:a2:81:9d:9e:
df:76:b4:50:9c:a9:0e:fc:2b:1b:77:b6:8f:93:1d:
09:20:47:90:df:3f:ee:d4:46:ea:97:ae:49:8a:08:
89:04:13:8a:99:eb:69:19:09:a8:f8:03:a1:e0:a9:
9e:be:57:ec:2c:70:b3:1b:c1:82:21:99:bc:b2:2f:
6b:0a:aa:a9:14:2b:35:ba:c6:ee:65:0d:57:f5:80:
87:65:ed:9b:2f:e1:63:6e:dc:ee:97:b3:ce:11:04:
0f:a4:d2:69:be:dc:29:d8:3f:86:d6:08:28:86:86:
63:9d:3e:fb:76:f3:46:7a:34:0c:c3:64:f4:77:c4:
41:77:6e:8f:6b:34:14:1b:03:2c:90:0b:1a:3c:84:
64:e8:e4:de:3c:ce:93:15:f2:17:f1:f6:f6:0e:27:
9f:78:d4:18:ff:7d:3a:5a:f8:54:6b:21:6e:70:a4:
af:ee:b2:21:6f:51:7d:b6:5a:e6:de:91:3b:b7:8b:
9d:69:e3:48:26:6f:f1:a2:e5:27:3f:3c:32:40:79:
21:0c:88:de:c6:f9:1b:f3:a1:2a:ea:6e:26:23:1b:
0a:7d:b8:9e:50:79:8c:18:9a:17:ea:0f:5c:32:5d:
e7:0d:55:d5:d8:49:a6:23:9e:d6:74:96:04:94:5a:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:15:13:E0:D7:64:A4:0C:4E:94:3E:AE:6B:84:32:86:7D:EC:1A:26
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7d:4d:ed:96:22:53:b9:96:5a:ce:24:53:5c:29:ab:54:a3:
c0:b0:e2:3d:0e:d4:6c:a0:44:72:f3:77:2f:20:59:3a:b4:4e:
9b:a9:02:93:08:92:8a:27:ca:cd:d8:2d:3c:b3:35:83:ff:3f:
6d:cf:d6:b8:54:55:be:d2:e3:42:72:fe:c6:be:a5:dc:be:41:
a0:15:89:d3:41:5b:9a:a6:e2:14:ce:ba:18:d5:57:f8:12:3f:
8d:66:93:e7:78:84:35:e5:23:87:b6:2d:ea:64:b4:a0:30:19:
07:b0:69:ec:43:fb:fe:98:de:b2:a9:d8:cc:f5:fb:5b:af:84:
66:33:96:b7:d5:c7:15:cc:45:08:0c:d8:c4:94:98:9c:14:58:
a0:ef:31:1d:c5:28:90:da:e8:a3:67:2b:db:37:4a:44:a5:f3:
99:86:30:ec:c0:74:35:be:0e:81:89:28:cd:8b:df:9a:11:84:
c5:c7:38:38:1b:24:4b:d1:eb:d3:6d:82:4d:94:b2:1a:59:b4:
fb:c7:3f:a1:ef:c0:13:db:93:23:ef:29:ca:e9:4f:73:97:b0:
e1:12:16:cb:ae:43:85:a5:73:fa:c7:6c:08:ba:ea:fa:92:4b:
ba:27:1e:4c:69:07:23:07:d2:55:c4:5c:75:61:0f:cb:a2:5b:
0c:2c:3f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlDVCtucTywpqYEprEcgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0
MDc4YjIwHhcNMjUwNDIxMDkwMDUyWhcNMjUwNDIyMDkwMDUyWjAzMTEwLwYDVQQD
EyhkZDE1MTNlMGQ3NjRhNDBjNGU5NDNlYWU2Yjg0MzI4NjdkZWMxYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud67lRaAesD9f6KBnZ7fdrRQnKkO
/Csbd7aPkx0JIEeQ3z/u1Ebql65JigiJBBOKmetpGQmo+AOh4KmevlfsLHCzG8GC
IZm8si9rCqqpFCs1usbuZQ1X9YCHZe2bL+Fjbtzul7POEQQPpNJpvtwp2D+G1ggo
hoZjnT77dvNGejQMw2T0d8RBd26PazQUGwMskAsaPIRk6OTePM6TFfIX8fb2Dief
eNQY/306WvhUayFucKSv7rIhb1F9tlrm3pE7t4udaeNIJm/xouUnPzwyQHkhDIje
xvkb86Eq6m4mIxsKfbieUHmMGJoX6g9cMl3nDVXV2EmmI57WdJYElFqCmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0VE+DXZKQMTpQ+rmuEMoZ97BomMB8GA1UdIwQY
MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt
ODBhNjZjMGZjODg0LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0
LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan1N7ZYi
U7mWWs4kU1wpq1SjwLDiPQ7UbKBEcvN3LyBZOrROm6kCkwiSiifKzdgtPLM1g/8/
bc/WuFRVvtLjQnL+xr6l3L5BoBWJ00FbmqbiFM66GNVX+BI/jWaT53iENeUjh7Yt
6mS0oDAZB7Bp7EP7/pjesqnYzPX7W6+EZjOWt9XHFcxFCAzYxJSYnBRYoO8xHcUo
kNroo2cr2zdKRKXzmYYw7MB0Nb4OgYkozYvfmhGExcc4OBskS9Hr022CTZSyGlm0
+8c/oe/AE9uTI+8pyulPc5ew4RIWy65DhaVz+sdsCLrq+pJLuiceTGkHIwfSVcRc
dWEPy6JbDCw/rQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:46 2025 by rpki-client