Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: R00Nv/bBhpeHx2YOyxhAMRyK0GP75Gpb6aHjDsDVeLw=
Subject key identifier: 69:D0:01:4B:BB:51:36:C2:82:9B:98:1B:E0:99:95:59:72:55:AF:8E
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 0196579448D12F3743567A1E2EBA57895EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 0EF9
Signing time: Mon 21 Apr 2025 09:00:57 +0000
Manifest this update: Mon 21 Apr 2025 09:00:57 +0000
Manifest next update: Tue 22 Apr 2025 09:00:57 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: TD0f4jOcExHTPeufjT1yw3RLrgvvvznLk6hRk+rvZsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:48:d1:2f:37:43:56:7a:1e:2e:ba:57:89:5e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Apr 21 09:00:57 2025 GMT
Not After : Apr 22 09:00:57 2025 GMT
Subject: CN=69d0014bbb5136c2829b981be09995597255af8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:9a:8b:50:48:75:84:41:d5:10:3b:dd:15:
72:48:be:77:f0:72:bb:c7:f9:9c:70:de:75:e2:d0:
c7:eb:a2:df:68:d6:8e:97:a2:8a:66:9b:b5:bf:1c:
7c:fb:6a:45:10:55:16:7d:48:f3:30:0c:28:e1:ab:
68:ce:b4:51:08:38:7b:24:68:79:7c:9c:a2:ca:ad:
cd:7d:fa:48:79:a0:e8:0c:f1:63:fb:86:ba:6b:11:
5e:c6:af:7d:dd:b7:24:23:0b:dc:95:92:6d:ac:bb:
32:f4:4c:60:63:7d:e0:39:e0:df:59:ed:e0:7c:53:
00:19:5a:ed:8d:ae:4b:03:5d:bc:47:d2:eb:f1:14:
f8:67:88:49:64:ae:da:67:1a:f5:45:8a:e9:51:04:
bb:89:4c:0a:a2:a3:f7:56:5f:75:4e:9c:da:18:07:
f6:e8:72:27:40:5d:79:b8:c9:73:87:95:f5:e8:16:
7d:dc:ca:22:35:8a:b2:7e:65:39:e3:0f:e1:98:f6:
da:f2:04:bd:28:63:75:68:6f:db:f8:e3:45:c1:3f:
99:12:66:35:31:63:9c:5b:6c:2e:eb:ce:7a:2e:f5:
f0:ae:a3:a1:6b:4f:66:8b:d4:97:f6:e2:26:31:6a:
66:02:32:c9:f5:0b:8e:dd:cb:a7:9f:d6:88:23:d6:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:01:4B:BB:51:36:C2:82:9B:98:1B:E0:99:95:59:72:55:AF:8E
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:6a:91:39:5b:43:3d:f8:45:09:19:e4:60:5a:cd:1b:22:
af:c1:ba:ec:d3:c7:03:23:a1:15:a5:b9:6a:5b:f3:24:37:56:
d5:aa:33:f9:1a:88:34:76:1e:5c:c6:2d:c0:0e:7c:cd:b0:7b:
09:11:f9:5b:9d:0a:c8:53:d7:8d:e5:cb:1e:22:71:74:ef:17:
05:13:6a:1e:a4:5f:62:3a:1b:97:7e:a1:3c:17:12:fc:98:2a:
cd:67:e3:db:68:d7:eb:cf:e9:0b:6b:f2:56:4d:56:db:73:a7:
e8:82:92:f4:5f:be:d1:60:42:e1:44:c9:be:2c:ee:f5:37:b0:
1e:f5:40:23:9d:1e:72:02:97:28:68:22:86:63:12:9d:98:4c:
51:9b:3a:48:e8:16:26:dc:61:25:76:8b:71:4f:66:1f:b6:a3:
20:da:cd:6e:a2:4e:83:ae:dd:96:84:22:1f:63:db:96:7f:dd:
7d:82:26:2f:18:49:0d:bd:bf:9b:d3:1b:24:ae:b3:ad:64:77:
47:58:c1:99:14:41:8d:1a:62:1f:7f:fd:1f:a4:58:49:09:eb:
4e:6d:94:96:40:9d:55:ca:7a:43:96:93:d4:25:3d:6c:54:f2:
7f:4c:27:1b:ac:03:ae:73:ca:6e:eb:9b:91:4c:97:b8:eb:23:
9a:02:2b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlEjRLzdDVnoeLrpXiV62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZjgwNzM4MzUxZGNmYzc1YWY5OTY5OTNhMjkyOWMzNzEz
NGEyMDgwHhcNMjUwNDIxMDkwMDU3WhcNMjUwNDIyMDkwMDU3WjAzMTEwLwYDVQQD
Eyg2OWQwMDE0YmJiNTEzNmMyODI5Yjk4MWJlMDk5OTU1OTcyNTVhZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECai1BIdYRB1RA73RVySL538HK7
x/mccN514tDH66LfaNaOl6KKZpu1vxx8+2pFEFUWfUjzMAwo4atozrRRCDh7JGh5
fJyiyq3NffpIeaDoDPFj+4a6axFexq993bckIwvclZJtrLsy9ExgY33gOeDfWe3g
fFMAGVrtja5LA128R9Lr8RT4Z4hJZK7aZxr1RYrpUQS7iUwKoqP3Vl91TpzaGAf2
6HInQF15uMlzh5X16BZ93MoiNYqyfmU54w/hmPba8gS9KGN1aG/b+ONFwT+ZEmY1
MWOcW2wu6856LvXwrqOha09mi9SX9uImMWpmAjLJ9QuO3cunn9aII9Y0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnQAUu7UTbCgpuYG+CZlVlyVa+OMB8GA1UdIwQY
MBaAFPX4Bzg1Hc/HWvmWmTopKcNxNKIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYt
ZWE4NDExZDU3MmFlLzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYtZWE4NDExZDU3MmFl
LzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwBqkTlb
Qz34RQkZ5GBazRsir8G67NPHAyOhFaW5alvzJDdW1aoz+RqINHYeXMYtwA58zbB7
CRH5W50KyFPXjeXLHiJxdO8XBRNqHqRfYjobl36hPBcS/JgqzWfj22jX68/pC2vy
Vk1W23On6IKS9F++0WBC4UTJvizu9TewHvVAI50ecgKXKGgihmMSnZhMUZs6SOgW
JtxhJXaLcU9mH7ajINrNbqJOg67dloQiH2Pbln/dfYImLxhJDb2/m9MbJK6zrWR3
R1jBmRRBjRpiH3/9H6RYSQnrTm2UlkCdVcp6Q5aT1CU9bFTyf0wnG6wDrnPKbuub
kUyXuOsjmgIrFg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:14 2025 by rpki-client