Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: 8O1f1mlFWfPmVk5z94M5xh9iZkhfiNzttEjQwsG2INA=
Subject key identifier: 07:CC:0E:B2:FA:73:23:60:0C:6D:E9:0E:30:19:87:8C:2B:C7:D9:D0
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 01965CF18021EA4E67F109660682DA959167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 0B98
Signing time: Tue 22 Apr 2025 10:00:52 +0000
Manifest this update: Tue 22 Apr 2025 10:00:52 +0000
Manifest next update: Wed 23 Apr 2025 10:00:52 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: Su1Eao7tu3SnHmKFBktmvq1lTi/GOXU3gPgabyly3cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:80:21:ea:4e:67:f1:09:66:06:82:da:95:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Apr 22 10:00:52 2025 GMT
Not After : Apr 23 10:00:52 2025 GMT
Subject: CN=07cc0eb2fa7323600c6de90e3019878c2bc7d9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:21:65:fe:97:f0:8f:26:31:b9:b3:2b:54:
ca:2b:ef:9c:35:4c:38:b5:85:98:39:3f:cf:1d:33:
2d:0d:eb:54:51:f9:40:83:81:03:c5:92:60:89:b1:
fa:f0:93:40:28:bb:20:7b:e3:f3:c0:da:bf:3a:6f:
d1:9f:84:50:6e:27:45:35:6e:e7:b4:ae:8a:9f:a8:
19:8b:44:77:75:88:64:61:5b:b3:78:19:b4:86:90:
5a:5c:f2:78:da:39:ac:ad:31:6b:e7:a7:18:02:2d:
92:30:2c:eb:86:28:64:97:ca:c2:16:ff:27:ef:88:
f2:fe:c6:82:98:1d:9e:50:87:45:f9:51:18:59:f6:
e2:c8:f8:12:c4:16:2f:c6:d1:96:dd:7e:ba:5e:50:
fd:63:ed:2e:e2:d9:00:99:fc:68:bd:5a:be:bd:dd:
08:48:ec:92:f9:36:40:3f:49:4c:c8:bd:1c:f5:72:
d5:79:ce:17:55:2b:80:af:94:5e:b0:04:3d:c7:6f:
06:33:ea:12:97:ec:f8:15:fb:04:48:4b:90:0e:59:
a9:e2:ec:9a:dc:5e:95:18:bb:6a:6f:d5:d9:51:01:
38:b7:87:e1:15:74:fc:7f:40:d9:80:e9:5a:be:5c:
73:14:a9:f3:98:27:e1:36:62:b4:ea:5b:7d:4f:68:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CC:0E:B2:FA:73:23:60:0C:6D:E9:0E:30:19:87:8C:2B:C7:D9:D0
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:f3:00:6e:8c:76:9d:3f:23:d9:2d:8f:4e:11:d6:49:7b:
5a:72:f0:45:39:64:d8:08:19:96:b7:71:0d:5f:b2:2c:af:5a:
13:83:a0:97:31:36:93:75:5f:65:82:3b:9f:3a:3c:7b:6b:15:
e8:bf:2f:9e:78:6f:80:27:e3:d1:a1:7f:1c:e5:a6:f7:5d:82:
27:45:ce:51:3a:72:97:55:74:bf:e7:fc:a3:7b:4e:5d:99:bf:
cf:2a:01:7c:4f:72:9c:c3:5f:be:f5:30:11:4c:84:61:1f:21:
c1:a6:70:5e:84:b9:03:94:ca:f2:17:bb:99:ec:47:94:aa:98:
0a:ef:7d:bc:3b:e9:f2:15:aa:65:36:3a:6f:44:14:ab:d1:94:
94:fd:cd:12:05:06:1a:cf:c5:d8:f1:3a:e4:5b:9f:21:63:fc:
6e:b9:60:07:92:f6:39:20:f6:55:95:e8:33:6e:e3:39:61:ed:
d9:68:cb:3f:70:ba:36:f6:c9:56:c7:00:38:34:39:5a:7c:88:
93:3a:35:3c:61:ee:65:e2:fd:36:95:2a:6a:f9:f2:f6:a5:3f:
39:eb:81:69:55:76:d8:a5:b3:25:46:d6:da:86:bc:44:25:87:
0b:a2:a5:e4:15:9e:76:c4:cd:70:9e:72:14:56:ca:9f:df:b0:
22:cc:cb:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8YAh6k5n8QlmBoLalZFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTUwMGYzOTc2MjNhYjFkNTYwMDQ4MzU0NjdmY2NmM2Qw
YTNiMGYwHhcNMjUwNDIyMTAwMDUyWhcNMjUwNDIzMTAwMDUyWjAzMTEwLwYDVQQD
EygwN2NjMGViMmZhNzMyMzYwMGM2ZGU5MGUzMDE5ODc4YzJiYzdkOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHEhZf6X8I8mMbmzK1TKK++cNUw4
tYWYOT/PHTMtDetUUflAg4EDxZJgibH68JNAKLsge+PzwNq/Om/Rn4RQbidFNW7n
tK6Kn6gZi0R3dYhkYVuzeBm0hpBaXPJ42jmsrTFr56cYAi2SMCzrhihkl8rCFv8n
74jy/saCmB2eUIdF+VEYWfbiyPgSxBYvxtGW3X66XlD9Y+0u4tkAmfxovVq+vd0I
SOyS+TZAP0lMyL0c9XLVec4XVSuAr5ResAQ9x28GM+oSl+z4FfsESEuQDlmp4uya
3F6VGLtqb9XZUQE4t4fhFXT8f0DZgOlavlxzFKnzmCfhNmK06lt9T2iR+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfMDrL6cyNgDG3pDjAZh4wrx9nQMB8GA1UdIwQY
MBaAFPWlAPOXYjqx1WAEg1Rn/M89CjsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAt
ZTc2ZmQ5YzlkYzhjLzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAtZTc2ZmQ5YzlkYzhj
LzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+7zAG6M
dp0/I9ktj04R1kl7WnLwRTlk2AgZlrdxDV+yLK9aE4OglzE2k3VfZYI7nzo8e2sV
6L8vnnhvgCfj0aF/HOWm912CJ0XOUTpyl1V0v+f8o3tOXZm/zyoBfE9ynMNfvvUw
EUyEYR8hwaZwXoS5A5TK8he7mexHlKqYCu99vDvp8hWqZTY6b0QUq9GUlP3NEgUG
Gs/F2PE65FufIWP8brlgB5L2OSD2VZXoM27jOWHt2WjLP3C6NvbJVscAODQ5WnyI
kzo1PGHuZeL9NpUqavny9qU/OeuBaVV22KWzJUbW2oa8RCWHC6Kl5BWedsTNcJ5y
FFbKn9+wIszL8w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:34 2025 by rpki-client