Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: bZ31p3irjnrAP1mYK682V77ITqCJ/7SysRd0ah5cGwA=
Subject key identifier: C6:72:1A:71:CF:FD:9F:D3:64:F7:9A:74:70:02:50:59:42:01:37:2B
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 01965726945BE2542D9CAC245FC2616360F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 14FA
Signing time: Mon 21 Apr 2025 07:01:08 +0000
Manifest this update: Mon 21 Apr 2025 07:01:08 +0000
Manifest next update: Tue 22 Apr 2025 07:01:08 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: HQh4T886uYptpfTqIHOpfdNPU/1r5xRnlKfV4Frmai4=)
2: yhhMqOayivlP0HqWgBqkxI1f14U.roa (hash: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:94:5b:e2:54:2d:9c:ac:24:5f:c2:61:63:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Apr 21 07:01:08 2025 GMT
Not After : Apr 22 07:01:08 2025 GMT
Subject: CN=c6721a71cffd9fd364f79a74700250594201372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:db:8c:d2:5c:9c:e8:81:1c:5a:d4:80:bf:
57:c2:20:12:35:fb:1a:55:3c:57:aa:ee:1f:72:d7:
a0:06:13:a1:d1:26:89:88:e8:60:3f:a6:a1:90:35:
cd:e8:88:ff:80:cc:2b:a9:ab:a1:18:56:58:5e:10:
76:56:c5:6c:1e:d8:d5:21:f8:6b:8c:48:2c:f5:ea:
93:b5:cd:b5:e6:53:05:4a:1b:87:fe:3d:8a:e3:12:
15:29:3e:7e:c5:00:f0:f3:8e:8e:8c:4e:61:e0:a6:
1b:f1:b7:6c:dc:4f:22:8c:b2:9d:03:82:fe:5c:b8:
54:0b:c0:49:5e:4c:71:7a:8a:95:34:c4:f0:38:4e:
6e:f4:73:1a:7a:a5:3f:d0:fc:3c:9d:3a:eb:7b:8e:
e9:a9:00:cb:03:3e:8c:0f:2c:e3:83:ce:88:71:44:
26:53:83:aa:2f:3b:d5:f4:d3:93:ff:8a:cd:d7:d6:
5f:a5:b9:38:bb:9e:34:8a:6e:1c:9c:ca:df:83:5e:
c0:13:db:91:39:ac:28:10:cc:22:cd:88:d0:ef:20:
f3:13:90:ea:fd:39:26:8e:95:9d:5f:31:59:65:1d:
f3:8c:f9:13:3a:42:f6:90:4f:a5:47:d5:68:4e:f7:
6b:47:4c:3b:40:fe:c4:38:5e:d9:cb:73:b1:a8:86:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:1A:71:CF:FD:9F:D3:64:F7:9A:74:70:02:50:59:42:01:37:2B
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3a:91:02:fc:04:b4:f9:11:c7:ed:7f:c3:61:66:74:aa:20:
9b:b6:09:37:49:a4:69:c1:b3:71:47:f9:a9:1a:d7:03:50:e8:
d9:af:71:11:82:f1:70:5d:24:56:fc:ba:de:c8:37:df:e1:c7:
12:16:68:3c:95:4a:cd:ac:4f:48:62:f4:65:a0:94:5e:7e:c2:
1d:60:6b:09:93:56:a4:3c:ee:c9:cb:a0:2c:29:ce:15:f8:ed:
19:0a:a8:3b:f9:9b:b6:ad:65:4e:ea:e1:06:c6:71:3d:32:c6:
30:d5:05:c0:3a:f7:c6:0b:a1:a6:21:5f:81:e5:a6:53:33:53:
82:a7:e4:5e:58:05:67:c3:e4:da:cd:24:fa:9f:4e:3f:09:96:
5b:bf:32:b0:9b:2d:d4:3e:16:31:51:ce:19:5d:f1:a4:f8:f7:
a2:ef:7c:e6:c6:44:66:80:bf:12:92:e3:3c:2c:cd:35:f9:68:
c7:59:dc:ee:36:b2:e4:4b:6b:b4:33:2c:38:93:97:50:e7:aa:
44:9f:e9:77:bc:6b:27:3c:b0:9d:62:be:17:96:87:25:8c:8a:
b2:87:db:31:20:4d:a2:9a:47:0e:c8:82:5e:a4:78:70:9c:49:
4b:72:04:b0:0e:2b:5e:ea:32:13:24:ff:15:74:d5:ce:66:82:
02:86:c3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJpRb4lQtnKwkX8JhY2D1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2QwMzM3N2NjMTA4ZjQ0MDkxMjZiOWEwYzIwMTYzMjQy
MWM2NGEwHhcNMjUwNDIxMDcwMTA4WhcNMjUwNDIyMDcwMTA4WjAzMTEwLwYDVQQD
EyhjNjcyMWE3MWNmZmQ5ZmQzNjRmNzlhNzQ3MDAyNTA1OTQyMDEzNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEjbjNJcnOiBHFrUgL9XwiASNfsa
VTxXqu4fctegBhOh0SaJiOhgP6ahkDXN6Ij/gMwrqauhGFZYXhB2VsVsHtjVIfhr
jEgs9eqTtc215lMFShuH/j2K4xIVKT5+xQDw846OjE5h4KYb8bds3E8ijLKdA4L+
XLhUC8BJXkxxeoqVNMTwOE5u9HMaeqU/0Pw8nTrre47pqQDLAz6MDyzjg86IcUQm
U4OqLzvV9NOT/4rN19Zfpbk4u540im4cnMrfg17AE9uROawoEMwizYjQ7yDzE5Dq
/TkmjpWdXzFZZR3zjPkTOkL2kE+lR9VoTvdrR0w7QP7EOF7Zy3OxqIZYjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZyGnHP/Z/TZPeadHACUFlCATcrMB8GA1UdIwQY
MBaAFPR9Azd8wQj0QJEmuaDCAWMkIcZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgt
ZTFkMGZkZDViZmY1LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgtZTFkMGZkZDViZmY1
LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjqRAvwE
tPkRx+1/w2FmdKogm7YJN0mkacGzcUf5qRrXA1Do2a9xEYLxcF0kVvy63sg33+HH
EhZoPJVKzaxPSGL0ZaCUXn7CHWBrCZNWpDzuycugLCnOFfjtGQqoO/mbtq1lTurh
BsZxPTLGMNUFwDr3xguhpiFfgeWmUzNTgqfkXlgFZ8Pk2s0k+p9OPwmWW78ysJst
1D4WMVHOGV3xpPj3ou985sZEZoC/EpLjPCzNNflox1nc7jay5EtrtDMsOJOXUOeq
RJ/pd7xrJzywnWK+F5aHJYyKsofbMSBNoppHDsiCXqR4cJxJS3IEsA4rXuoyEyT/
FXTVzmaCAobDWQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:22 2025 by rpki-client