Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier: b5B5UH3YuwMxyIk9U1mx0el0v5+YBi6aTf7E9yfKM58=
Subject key identifier: AF:A1:82:69:3E:64:E1:F7:3B:F8:37:32:41:65:AA:79:DE:C3:12:54
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 01965E3B0683B9AB645EA4E367C079B65453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number: 109C
Signing time: Tue 22 Apr 2025 16:00:48 +0000
Manifest this update: Tue 22 Apr 2025 16:00:48 +0000
Manifest next update: Wed 23 Apr 2025 16:00:48 +0000
Files and hashes: 1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: zvPA6cjC6obFI47VYVBUkjRUMMGj+WU6DGRf5m3lSWU=)
2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=)
3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=)
4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3b:06:83:b9:ab:64:5e:a4:e3:67:c0:79:b6:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Apr 22 16:00:48 2025 GMT
Not After : Apr 23 16:00:48 2025 GMT
Subject: CN=afa182693e64e1f73bf837324165aa79dec31254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:73:42:3e:19:1d:5c:04:b8:d4:16:db:9f:
79:7e:a5:4e:5c:68:27:64:04:ee:05:fd:1b:5a:66:
5a:cb:46:29:93:06:cf:02:c4:ce:2e:66:e1:6a:8f:
36:8a:c6:f8:0b:15:3a:9b:89:3d:d5:5a:c2:7f:73:
92:d9:97:8c:3e:72:4f:40:92:db:4a:3e:a2:25:5e:
48:e2:59:c6:a9:c5:66:43:7b:42:0f:fc:1f:fd:51:
e9:5a:4c:44:a5:2f:7a:fa:63:93:29:08:a0:6f:a6:
64:38:0d:5b:81:f9:1d:e3:57:fd:26:bf:f8:2f:6d:
39:1d:7d:42:6b:74:6e:ce:ca:60:9a:8b:44:1a:ba:
62:79:c1:11:84:c8:31:6d:62:15:48:80:7f:71:06:
56:b9:01:4c:1f:37:dc:79:fe:30:64:3d:f5:9f:aa:
53:28:80:85:be:bd:d2:00:1c:70:f6:10:ca:66:52:
30:69:b0:7f:9b:eb:89:0b:e5:3b:93:43:01:72:b1:
44:73:f8:ef:37:fe:4d:91:d5:28:e7:02:b0:db:15:
51:1e:79:69:0d:d5:f2:9a:ba:35:81:ac:29:ed:0b:
db:d9:a6:10:e6:c0:06:b5:89:5f:cf:8f:5c:78:e1:
de:6d:8f:eb:25:88:a3:fa:7a:08:1c:eb:5f:fa:95:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A1:82:69:3E:64:E1:F7:3B:F8:37:32:41:65:AA:79:DE:C3:12:54
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3d:90:64:51:75:ec:ca:11:4a:b9:5e:ec:b9:17:2c:0e:38:
06:0b:7e:10:d4:a9:2d:f7:5b:33:2b:40:5f:14:4d:49:e4:dd:
96:55:2a:54:ef:b7:56:1a:a1:e4:6c:47:d6:c5:8b:0e:c1:d9:
84:e0:ed:be:03:cf:21:93:3d:9f:40:c8:82:d1:32:cf:43:4c:
05:78:4a:1b:cf:78:32:83:b4:e2:e4:b1:10:b1:3d:c3:4f:c9:
ad:7c:e2:54:a5:fc:e9:1b:9b:ef:77:b5:e2:bc:0b:dd:e0:80:
40:12:20:f3:d6:b7:60:59:80:05:c4:a3:53:64:17:ea:ae:76:
71:bb:3d:02:7f:40:ac:9c:a6:c4:8f:66:86:49:94:18:b1:af:
b4:83:f0:b8:98:14:9f:a2:3b:03:d7:ed:06:02:ca:f8:ec:1a:
65:86:92:0c:87:83:75:a8:0e:9b:3c:c5:28:39:79:9d:24:1e:
77:3b:f6:94:e7:fd:af:b8:a0:44:44:f0:a7:bd:5c:9a:6f:0c:
4f:52:46:ac:92:ff:ba:8a:8a:4f:d3:23:8e:a6:ca:40:58:a4:
ac:5b:10:10:a6:f2:bd:99:9f:ab:6b:56:89:3e:5a:57:08:32:
81:dd:a5:72:3b:82:be:73:ab:db:ef:9a:a4:fc:7b:cf:a9:6b:
d4:d3:6e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeOwaDuatkXqTjZ8B5tlRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2
OWQxMGUwHhcNMjUwNDIyMTYwMDQ4WhcNMjUwNDIzMTYwMDQ4WjAzMTEwLwYDVQQD
EyhhZmExODI2OTNlNjRlMWY3M2JmODM3MzI0MTY1YWE3OWRlYzMxMjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3hzQj4ZHVwEuNQW2595fqVOXGgn
ZATuBf0bWmZay0YpkwbPAsTOLmbhao82isb4CxU6m4k91VrCf3OS2ZeMPnJPQJLb
Sj6iJV5I4lnGqcVmQ3tCD/wf/VHpWkxEpS96+mOTKQigb6ZkOA1bgfkd41f9Jr/4
L205HX1Ca3RuzspgmotEGrpiecERhMgxbWIVSIB/cQZWuQFMHzfcef4wZD31n6pT
KICFvr3SABxw9hDKZlIwabB/m+uJC+U7k0MBcrFEc/jvN/5NkdUo5wKw2xVRHnlp
DdXymro1gawp7Qvb2aYQ5sAGtYlfz49ceOHebY/rJYij+noIHOtf+pUhtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+hgmk+ZOH3O/g3MkFlqnnewxJUMB8GA1UdIwQY
MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt
OWVjN2FkZDBlYjY4LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4
LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzD2QZFF1
7MoRSrle7LkXLA44Bgt+ENSpLfdbMytAXxRNSeTdllUqVO+3Vhqh5GxH1sWLDsHZ
hODtvgPPIZM9n0DIgtEyz0NMBXhKG894MoO04uSxELE9w0/JrXziVKX86Rub73e1
4rwL3eCAQBIg89a3YFmABcSjU2QX6q52cbs9An9ArJymxI9mhkmUGLGvtIPwuJgU
n6I7A9ftBgLK+OwaZYaSDIeDdagOmzzFKDl5nSQedzv2lOf9r7igRETwp71cmm8M
T1JGrJL/uoqKT9MjjqbKQFikrFsQEKbyvZmfq2tWiT5aVwgygd2lcjuCvnOr2++a
pPx7z6lr1NNuoQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:23 2025 by rpki-client