Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: HfV5aJKROLhwoNcy4knVoQKAGZZCkLRDlFCfNxR+Y8A=
Subject key identifier: 7D:B7:1A:7F:6E:F6:2C:68:0D:21:E4:03:5D:48:82:C6:FB:51:7B:5E
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 019655DCABF65DDB6DED100D506A7958F42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 9E
Signing time: Mon 21 Apr 2025 01:00:47 +0000
Manifest this update: Mon 21 Apr 2025 01:00:47 +0000
Manifest next update: Tue 22 Apr 2025 01:00:47 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: 5bdlhLaliHxW7AWOCE+ElS3NMc1n2pMcXeyFo/18UK4=)
2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ab:f6:5d:db:6d:ed:10:0d:50:6a:79:58:f4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Apr 21 01:00:47 2025 GMT
Not After : Apr 22 01:00:47 2025 GMT
Subject: CN=7db71a7f6ef62c680d21e4035d4882c6fb517b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:4a:e5:ff:12:0a:aa:91:6b:40:b0:ff:e7:
15:dc:aa:2a:b2:5c:07:d7:19:be:e5:e9:c7:f2:34:
f6:d7:a4:27:9b:6a:a3:9d:b9:da:6f:dc:98:67:3d:
65:35:4c:74:5c:7e:16:f6:ac:83:28:73:a2:58:55:
78:6d:8b:6f:bb:f0:47:c9:9f:1e:45:5a:fe:6c:fe:
fa:e8:3b:b6:a2:40:f4:54:91:31:81:d0:cc:48:30:
c9:86:49:85:34:d4:57:a5:27:b0:90:14:00:ae:0a:
d8:8c:e2:31:f6:3f:d1:e9:18:e9:3b:dc:0c:d5:dd:
c1:5d:3c:d1:ca:b6:cc:8d:40:7d:0b:17:a9:83:61:
8e:56:e9:aa:f0:2b:9f:09:c7:15:55:02:af:81:90:
ab:4a:cf:48:c3:b7:5b:17:fa:f0:69:86:04:2e:0c:
25:28:bb:92:db:f4:5d:30:a4:76:70:0d:ef:62:44:
b6:3e:dd:ac:8c:f4:c0:05:ed:04:91:9a:5d:83:df:
58:e7:9a:60:57:7d:0b:b8:46:c0:e7:f7:6e:db:fe:
b1:fa:fc:1d:6f:8c:45:29:e2:ea:9f:d5:fd:16:18:
b0:48:99:18:6b:00:b7:68:52:5c:9c:2e:5d:b6:95:
2a:66:f7:5b:79:3a:17:f7:46:4a:9e:47:17:d2:16:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:1A:7F:6E:F6:2C:68:0D:21:E4:03:5D:48:82:C6:FB:51:7B:5E
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ba:5c:53:9d:04:d4:e1:f3:1b:e4:ea:35:e5:14:90:12:3b:
a5:2d:8c:87:99:a1:b1:c5:43:32:8f:86:39:52:e5:68:5a:c5:
e7:a6:dc:93:36:b2:0a:8a:b7:f9:44:c0:25:ff:11:a5:74:ff:
eb:f6:69:d8:aa:0f:7e:64:54:25:0a:5d:3f:53:10:7e:de:10:
db:f1:d5:11:21:c2:43:b1:04:d1:1f:81:64:ff:5c:f7:e1:44:
26:b3:82:5e:cb:63:aa:c2:be:5c:54:22:7f:13:89:4e:75:40:
d4:f1:1f:45:b5:98:1e:31:24:ce:1c:8a:96:b9:c1:ac:3a:de:
ee:f8:4d:be:b9:b6:e3:bf:f4:c2:5e:a1:3c:6c:35:2a:74:78:
05:60:40:20:e1:ba:af:42:30:13:41:98:ad:9b:3a:b8:30:7d:
0e:ba:3a:ca:19:24:40:b9:97:e4:fc:08:5f:45:6d:c5:60:25:
6c:65:90:bc:c5:c4:3f:3e:af:9f:bc:c7:7f:c0:62:9c:a4:bc:
ff:fe:ef:d4:ef:61:42:6c:62:4f:9f:8e:17:9a:99:e0:02:d8:
93:63:28:a6:57:e9:37:65:19:07:d8:87:70:7d:29:85:a6:ab:
78:ad:8a:23:6b:52:a1:65:c4:ad:d7:3b:51:ab:ce:4d:49:2a:
b4:91:e1:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3Kv2Xdtt7RANUGp5WPQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDQ3NzNiYjQzZGI2YjI5ZTg3ZGUwMmUzNjUzZmE3ZDhm
MjZmNjUwHhcNMjUwNDIxMDEwMDQ3WhcNMjUwNDIyMDEwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZGI3MWE3ZjZlZjYyYzY4MGQyMWU0MDM1ZDQ4ODJjNmZiNTE3YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3RK5f8SCqqRa0Cw/+cV3KoqslwH
1xm+5enH8jT216Qnm2qjnbnab9yYZz1lNUx0XH4W9qyDKHOiWFV4bYtvu/BHyZ8e
RVr+bP766Du2okD0VJExgdDMSDDJhkmFNNRXpSewkBQArgrYjOIx9j/R6RjpO9wM
1d3BXTzRyrbMjUB9Cxepg2GOVumq8CufCccVVQKvgZCrSs9Iw7dbF/rwaYYELgwl
KLuS2/RdMKR2cA3vYkS2Pt2sjPTABe0EkZpdg99Y55pgV30LuEbA5/du2/6x+vwd
b4xFKeLqn9X9FhiwSJkYawC3aFJcnC5dtpUqZvdbeToX90ZKnkcX0hYB4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH23Gn9u9ixoDSHkA11Igsb7UXteMB8GA1UdIwQY
MBaAFAnUdzu0PbaynofeAuNlP6fY8m9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGIt
YWZiNTAwYTQ0ODJhLzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGItYWZiNTAwYTQ0ODJh
LzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrpcU50E
1OHzG+TqNeUUkBI7pS2Mh5mhscVDMo+GOVLlaFrF56bckzayCoq3+UTAJf8RpXT/
6/Zp2KoPfmRUJQpdP1MQft4Q2/HVESHCQ7EE0R+BZP9c9+FEJrOCXstjqsK+XFQi
fxOJTnVA1PEfRbWYHjEkzhyKlrnBrDre7vhNvrm247/0wl6hPGw1KnR4BWBAIOG6
r0IwE0GYrZs6uDB9Dro6yhkkQLmX5PwIX0VtxWAlbGWQvMXEPz6vn7zHf8BinKS8
//7v1O9hQmxiT5+OF5qZ4ALYk2MoplfpN2UZB9iHcH0phaareK2KI2tSoWXErdc7
UavOTUkqtJHhyQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:51:22 2025 by rpki-client