Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: X1oYKkAKvAHChNiXjVV7NGplD+tbZTi+jRO2ZcQbuBI=
Subject key identifier: 52:39:C6:13:5C:4C:52:D8:11:04:C0:1E:39:E9:84:07:A5:33:24:6A
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 01965B037BDF1C01EAB1FDA078122AE05414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 08CB
Signing time: Tue 22 Apr 2025 01:01:17 +0000
Manifest this update: Tue 22 Apr 2025 01:01:17 +0000
Manifest next update: Wed 23 Apr 2025 01:01:17 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: Y+HiRtDwKLXLRaO8AtVYph+23dQEl+1WPSagQ6op7B0=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:7b:df:1c:01:ea:b1:fd:a0:78:12:2a:e0:54:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Apr 22 01:01:17 2025 GMT
Not After : Apr 23 01:01:17 2025 GMT
Subject: CN=5239c6135c4c52d81104c01e39e98407a533246a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:27:c9:1d:7d:84:a8:ce:2e:5e:e8:8b:97:
bc:fd:43:14:cb:64:41:c8:3d:d2:6f:bd:c5:04:0e:
2f:2f:0f:31:3e:28:79:74:d3:a2:96:c7:de:5c:7a:
c4:93:d0:9b:d7:70:7d:9b:21:dd:c6:77:41:e9:b9:
85:fb:db:59:d9:47:02:2d:ec:ed:26:a8:49:45:f9:
92:7c:c0:c4:1f:b7:8f:1d:6a:6c:22:d8:e6:1b:61:
66:c2:83:a7:26:09:c7:0a:4e:59:c8:da:08:8c:84:
c1:1e:d6:98:b5:b6:48:e3:74:3d:03:83:49:d4:2d:
56:c2:d1:0e:a7:b3:85:34:93:fd:49:37:52:4e:28:
ac:ad:18:f0:22:c1:f3:02:6d:f0:3b:e0:78:14:93:
62:64:f2:f6:95:c1:96:87:21:8b:cb:0c:59:05:82:
e4:eb:f5:76:7a:dc:a0:4d:05:9d:73:42:2a:d9:85:
c0:6e:bb:b4:b3:10:8e:fe:7e:47:cb:3a:62:bd:d9:
de:09:ec:48:69:6e:8f:e0:fb:bc:12:87:17:9e:98:
32:22:c4:11:c9:23:6f:0e:ec:bb:2f:31:80:01:70:
9f:b5:9c:63:54:6a:14:f6:cf:91:20:df:e4:3b:00:
67:bd:49:96:5e:4e:b8:91:07:d0:d6:4e:11:db:32:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:C6:13:5C:4C:52:D8:11:04:C0:1E:39:E9:84:07:A5:33:24:6A
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:11:e4:70:d1:d5:21:ef:87:8c:b9:f5:5e:c2:01:ec:30:2e:
0a:a7:3c:de:27:72:9a:cc:ed:22:f2:44:04:2b:50:2c:6f:bd:
17:8b:8c:81:ed:3c:a6:3f:72:54:2c:69:83:a8:a2:41:1d:e2:
ef:00:e3:6a:09:6f:50:ad:25:da:f9:53:90:0f:b5:1d:6d:7c:
0d:97:00:2e:8a:a0:7e:4e:d8:3c:59:13:06:cd:8b:72:31:90:
a8:a5:bf:24:70:86:7f:ce:47:96:2b:80:5e:33:56:99:bc:93:
27:af:7f:7b:96:f4:86:c9:6b:86:55:8b:d5:8d:76:64:c6:ed:
5c:cb:28:40:08:48:1c:16:d8:0a:36:d2:4f:6a:14:27:d1:f3:
a9:b2:61:30:b5:08:25:81:8f:7e:3e:7b:dd:8f:27:3d:55:94:
84:ad:69:0d:51:a4:14:bf:9a:cb:9a:3a:8d:12:5c:4a:c5:eb:
62:36:21:2a:d2:30:8e:b8:bb:f9:d7:d0:74:1a:50:b6:45:e0:
36:bf:66:c9:60:60:4b:24:65:1b:df:8e:91:20:3a:07:6d:c8:
6c:f8:43:c9:3a:d7:0f:84:39:0f:b2:6f:c0:83:ac:e2:5e:f1:
63:ab:1c:9c:97:40:9a:e2:8e:2a:b2:1e:9b:a8:61:d0:43:e7:
4f:4c:8d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbA3vfHAHqsf2geBIq4FQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmRlNzJiZjVhMDBiZGVjNGQxZWZkZDdkMDIwMjllZTc5
ZTQ3MjAwHhcNMjUwNDIyMDEwMTE3WhcNMjUwNDIzMDEwMTE3WjAzMTEwLwYDVQQD
Eyg1MjM5YzYxMzVjNGM1MmQ4MTEwNGMwMWUzOWU5ODQwN2E1MzMyNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJwnyR19hKjOLl7oi5e8/UMUy2RB
yD3Sb73FBA4vLw8xPih5dNOilsfeXHrEk9Cb13B9myHdxndB6bmF+9tZ2UcCLezt
JqhJRfmSfMDEH7ePHWpsItjmG2FmwoOnJgnHCk5ZyNoIjITBHtaYtbZI43Q9A4NJ
1C1WwtEOp7OFNJP9STdSTiisrRjwIsHzAm3wO+B4FJNiZPL2lcGWhyGLywxZBYLk
6/V2etygTQWdc0Iq2YXAbru0sxCO/n5HyzpivdneCexIaW6P4Pu8EocXnpgyIsQR
ySNvDuy7LzGAAXCftZxjVGoU9s+RIN/kOwBnvUmWXk64kQfQ1k4R2zIr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFI5xhNcTFLYEQTAHjnphAelMyRqMB8GA1UdIwQY
MBaAFPX95yv1oAvexNHv3X0CAp7nnkcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYt
MDgzOGY3OGMwMjU5LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYtMDgzOGY3OGMwMjU5
LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBHkcNHV
Ie+HjLn1XsIB7DAuCqc83idymsztIvJEBCtQLG+9F4uMge08pj9yVCxpg6iiQR3i
7wDjaglvUK0l2vlTkA+1HW18DZcALoqgfk7YPFkTBs2LcjGQqKW/JHCGf85HliuA
XjNWmbyTJ69/e5b0hslrhlWL1Y12ZMbtXMsoQAhIHBbYCjbST2oUJ9HzqbJhMLUI
JYGPfj573Y8nPVWUhK1pDVGkFL+ay5o6jRJcSsXrYjYhKtIwjri7+dfQdBpQtkXg
Nr9myWBgSyRlG9+OkSA6B23IbPhDyTrXD4Q5D7JvwIOs4l7xY6scnJdAmuKOKrIe
m6hh0EPnT0yNUg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:44 2025 by rpki-client