Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: BotXBFjUw7JePO0A1X47YPzjJQKdwi+8DF43kLBcjIA=
Subject key identifier: 0C:89:ED:06:B3:37:DB:30:57:43:EB:EB:0C:58:EB:E1:7B:04:37:59
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 01965A270B9DF567BCF06120036E7A66E925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 08
Signing time: Mon 21 Apr 2025 21:00:30 +0000
Manifest this update: Mon 21 Apr 2025 21:00:30 +0000
Manifest next update: Tue 22 Apr 2025 21:00:30 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: DE+WEtUIb+CN89aRSOV2+uSZdeSBxKJ8D/99OXVOgn8=)
2: DQNOpuW7alFuKYD5j_JSqk7IFU4.roa (hash: 6C44NWHlW6U81Do2ghWHYPG/47r2oKsBxUUtRI3liYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:0b:9d:f5:67:bc:f0:61:20:03:6e:7a:66:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Apr 21 21:00:30 2025 GMT
Not After : Apr 22 21:00:30 2025 GMT
Subject: CN=0c89ed06b337db305743ebeb0c58ebe17b043759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:65:e1:04:30:45:cf:ad:e7:02:9f:7f:d9:
62:4d:ac:35:fc:36:f8:c7:92:66:6c:10:5f:b9:c0:
77:da:29:05:78:f8:16:a5:6f:ad:0c:1c:32:ef:09:
87:b0:1a:16:dc:34:e7:16:d6:a0:5b:4b:e5:17:c3:
3b:eb:82:3c:09:29:52:50:55:35:8a:c6:68:23:23:
05:b5:48:49:75:60:a3:fb:9f:88:08:60:b9:de:9b:
a7:1a:75:e8:85:3d:80:19:e9:16:5f:bd:af:75:67:
58:f6:aa:02:b1:4c:24:c8:3c:c9:23:07:0e:a2:a6:
73:d1:fb:a7:e5:26:66:c3:95:4d:fb:92:7f:1a:74:
a8:8d:ec:3c:b0:9d:37:58:75:26:c3:dc:e2:af:3d:
3a:0e:89:03:f8:5c:03:d9:c7:d2:06:e8:79:f8:f5:
a5:9a:28:df:1b:22:07:36:e5:5d:af:0e:d8:bd:f0:
74:67:ce:3f:c3:c1:e9:62:9d:d7:b6:65:6a:dc:42:
8e:62:55:c5:0e:d9:2b:08:b0:fb:15:34:69:82:f7:
da:7a:c0:be:64:4e:3e:f4:54:8c:64:7c:da:96:7e:
61:57:bf:78:23:d0:06:88:63:14:c5:93:b2:ae:90:
14:dc:82:44:9b:08:c3:ad:b5:e4:75:bd:d6:6b:4d:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:89:ED:06:B3:37:DB:30:57:43:EB:EB:0C:58:EB:E1:7B:04:37:59
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:81:6a:e4:a1:c2:8f:a1:bf:fb:6e:9c:57:3b:95:08:34:ba:
dc:5a:d4:79:d0:a4:52:26:b3:36:fd:38:79:d3:47:57:34:a9:
6a:d6:67:6c:48:c2:26:44:2d:00:62:df:ec:9f:84:f3:f4:61:
07:eb:a9:cd:b2:b9:0f:00:75:d7:fc:a6:2d:16:94:b2:d1:01:
22:d3:1f:1c:59:44:a8:85:51:b3:c1:ac:fe:a9:26:06:3d:42:
ae:00:18:40:87:74:72:a2:16:f0:ad:a1:c9:56:57:24:00:cf:
91:19:61:aa:79:57:ef:c0:77:13:00:75:c0:a9:42:b1:67:ea:
19:b4:f4:22:83:b5:18:c1:44:c9:27:6b:68:8e:77:40:e7:24:
f0:43:98:79:51:d4:e5:62:ee:35:56:6d:a4:b0:b2:d1:a0:ed:
52:9d:a9:7b:97:83:ce:ea:4e:12:4d:8a:bb:6d:f2:e4:06:32:
0c:79:f0:77:1d:6c:47:0e:8f:c3:b8:3d:66:b4:49:e5:38:8e:
b1:60:0b:e8:8e:a2:a7:f6:84:04:31:46:de:d7:7e:35:48:53:
a0:f1:bc:71:33:3a:51:dc:69:0d:65:89:24:c1:af:33:48:19:
e5:df:41:48:e7:9e:14:4a:2a:e1:4a:0b:83:2b:9c:4e:17:57:
36:7d:9f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaJwud9We88GEgA256ZuklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MjY1NDY1OGY2NzJhYWNmMzcxMzNiNWM3MWNmNGIxMWMx
ODY5ZGEwHhcNMjUwNDIxMjEwMDMwWhcNMjUwNDIyMjEwMDMwWjAzMTEwLwYDVQQD
EygwYzg5ZWQwNmIzMzdkYjMwNTc0M2ViZWIwYzU4ZWJlMTdiMDQzNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v1l4QQwRc+t5wKff9liTaw1/Db4
x5JmbBBfucB32ikFePgWpW+tDBwy7wmHsBoW3DTnFtagW0vlF8M764I8CSlSUFU1
isZoIyMFtUhJdWCj+5+ICGC53punGnXohT2AGekWX72vdWdY9qoCsUwkyDzJIwcO
oqZz0fun5SZmw5VN+5J/GnSojew8sJ03WHUmw9zirz06DokD+FwD2cfSBuh5+PWl
mijfGyIHNuVdrw7YvfB0Z84/w8HpYp3XtmVq3EKOYlXFDtkrCLD7FTRpgvfaesC+
ZE4+9FSMZHzaln5hV794I9AGiGMUxZOyrpAU3IJEmwjDrbXkdb3Wa03YfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyJ7QazN9swV0Pr6wxY6+F7BDdZMB8GA1UdIwQY
MBaAFPYmVGWPZyqs83Eztccc9LEcGGnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWlaVVpZOW5LcXp6Y1RPMXh4ejBzUndZYWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hNjhlMjYtOTJlNS00ZjQ5LWFkYjgt
NjY0Nzc4ODQ1YjE2LzEvOWlaVVpZOW5LcXp6Y1RPMXh4ejBzUndZYWRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hNjhlMjYtOTJlNS00ZjQ5LWFkYjgtNjY0Nzc4ODQ1YjE2
LzEvOWlaVVpZOW5LcXp6Y1RPMXh4ejBzUndZYWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoFq5KHC
j6G/+26cVzuVCDS63FrUedCkUiazNv04edNHVzSpatZnbEjCJkQtAGLf7J+E8/Rh
B+upzbK5DwB11/ymLRaUstEBItMfHFlEqIVRs8Gs/qkmBj1CrgAYQId0cqIW8K2h
yVZXJADPkRlhqnlX78B3EwB1wKlCsWfqGbT0IoO1GMFEySdraI53QOck8EOYeVHU
5WLuNVZtpLCy0aDtUp2pe5eDzupOEk2Ku23y5AYyDHnwdx1sRw6Pw7g9ZrRJ5TiO
sWAL6I6ip/aEBDFG3td+NUhToPG8cTM6UdxpDWWJJMGvM0gZ5d9BSOeeFEoq4UoL
gyucThdXNn2fiw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:36 2025 by rpki-client