Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: P9oYav8X7pQ7i7RE8MFmv3Ul1mxIS/WwkHBYlIvS9XA=
Subject key identifier: 1C:99:4D:04:33:91:FE:5B:90:FE:CD:95:AC:5F:CC:12:2D:4E:B6:3B
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 01965B709ECAF15ACC5003AAF96F4E164FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 03:00:29 +0000
Manifest this update: Tue 22 Apr 2025 03:00:29 +0000
Manifest next update: Wed 23 Apr 2025 03:00:29 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: A8CwK//4CqUSvsNdyf0bqhZlYtjvOB5PvUpmq266RMo=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:9e:ca:f1:5a:cc:50:03:aa:f9:6f:4e:16:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Apr 22 03:00:29 2025 GMT
Not After : Apr 23 03:00:29 2025 GMT
Subject: CN=1c994d043391fe5b90fecd95ac5fcc122d4eb63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:05:cb:2e:ea:fe:b5:c8:0d:e6:18:4a:2e:
d0:f7:16:3f:fc:f6:93:8c:b5:ac:c0:d6:63:f4:61:
81:4e:ed:85:19:fa:c7:33:54:8a:33:f8:de:4a:f9:
33:2a:ae:81:d3:8a:5a:83:51:5d:a8:3c:c5:eb:af:
be:cb:c8:fc:9f:47:47:8f:52:bc:3a:9e:a5:9d:b8:
1d:64:d4:25:da:a8:8b:36:6b:bb:15:56:ab:6b:f8:
7e:cf:5f:b0:95:49:ef:69:94:ca:8f:c0:7e:39:3f:
a0:cc:52:67:8e:57:1d:fb:1e:fe:9b:a7:bf:91:4a:
ed:6b:da:d3:ce:10:98:cc:08:0a:33:15:44:fd:64:
6c:eb:1e:95:be:fd:48:48:45:da:2f:65:9c:56:85:
df:cc:40:52:ee:9b:e2:40:80:44:d2:d9:e6:7f:2e:
b2:a4:fa:25:5a:70:18:b8:f8:c9:3e:4a:61:a1:3f:
10:79:c5:65:0a:7a:0d:a0:e6:b3:54:88:d5:1c:5a:
02:be:b9:58:c2:49:50:6a:81:53:59:5d:13:5a:de:
9a:d0:5d:fc:1c:3b:6b:90:75:78:0b:8e:ec:b5:ce:
19:f1:39:91:48:ca:bd:39:d2:2a:9f:3d:f6:8e:05:
40:61:3b:34:6c:cb:5f:12:70:bf:04:90:56:e3:e3:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:4D:04:33:91:FE:5B:90:FE:CD:95:AC:5F:CC:12:2D:4E:B6:3B
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:ef:47:b6:19:ac:18:5d:be:c6:4e:60:14:1d:26:a3:bc:
fe:15:d5:05:cf:5e:6f:7d:8b:4d:e9:b8:b9:a8:00:45:a8:43:
55:9b:f6:c1:33:d9:90:3e:8e:04:72:bc:ba:39:39:5a:6a:89:
f6:5e:f0:13:7e:c8:a7:ee:5d:12:ce:92:9b:d9:04:aa:13:77:
d2:c6:a5:f9:9d:54:28:39:4d:ca:80:45:48:f7:ac:4f:28:61:
93:6f:2e:6a:b0:fc:2e:bc:fd:bf:de:e9:f8:b5:60:a6:03:fc:
e1:db:3d:8e:03:bd:b9:19:e1:e2:ae:24:7b:ae:e6:e5:94:ef:
37:a2:50:0c:e1:57:48:52:b6:3a:c0:06:81:b0:cd:bf:ae:bc:
88:22:65:9c:75:8b:11:73:fb:3e:88:73:ee:38:34:be:1f:ad:
27:52:62:f1:de:b7:91:8c:cc:f5:29:b6:b4:36:e3:a1:4a:5c:
d9:68:da:44:81:43:40:e2:c1:55:df:3c:f4:4f:12:dd:43:a7:
80:4d:0b:eb:a2:86:bb:99:ea:15:88:fa:da:49:a9:1e:9c:d8:
d3:4a:98:94:3e:9e:e8:bb:de:1e:34:7f:f5:61:a3:ed:2c:30:
d9:59:07:41:f4:4f:68:11:54:e5:a3:e6:b3:9b:ee:6b:3b:fe:
0f:c5:72:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcJ7K8VrMUAOq+W9OFk/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDNlYTUyODcxNDg5ZDg2YWE5Y2E1Y2EwYzI5N2M4OGFi
ODJhYjYwHhcNMjUwNDIyMDMwMDI5WhcNMjUwNDIzMDMwMDI5WjAzMTEwLwYDVQQD
EygxYzk5NGQwNDMzOTFmZTViOTBmZWNkOTVhYzVmY2MxMjJkNGViNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ4Fyy7q/rXIDeYYSi7Q9xY//PaT
jLWswNZj9GGBTu2FGfrHM1SKM/jeSvkzKq6B04pag1FdqDzF66++y8j8n0dHj1K8
Op6lnbgdZNQl2qiLNmu7FVara/h+z1+wlUnvaZTKj8B+OT+gzFJnjlcd+x7+m6e/
kUrta9rTzhCYzAgKMxVE/WRs6x6Vvv1ISEXaL2WcVoXfzEBS7pviQIBE0tnmfy6y
pPolWnAYuPjJPkphoT8QecVlCnoNoOazVIjVHFoCvrlYwklQaoFTWV0TWt6a0F38
HDtrkHV4C47stc4Z8TmRSMq9OdIqnz32jgVAYTs0bMtfEnC/BJBW4+PwRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByZTQQzkf5bkP7NlaxfzBItTrY7MB8GA1UdIwQY
MBaAFPVD6lKHFInYaqnKXKDCl8iKuCq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYt
ZGZiYmVkYTIxNTk0LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYtZGZiYmVkYTIxNTk0
LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9HvR7YZ
rBhdvsZOYBQdJqO8/hXVBc9eb32LTem4uagARahDVZv2wTPZkD6OBHK8ujk5WmqJ
9l7wE37Ip+5dEs6Sm9kEqhN30sal+Z1UKDlNyoBFSPesTyhhk28uarD8Lrz9v97p
+LVgpgP84ds9jgO9uRnh4q4ke67m5ZTvN6JQDOFXSFK2OsAGgbDNv668iCJlnHWL
EXP7Pohz7jg0vh+tJ1Ji8d63kYzM9Sm2tDbjoUpc2WjaRIFDQOLBVd889E8S3UOn
gE0L66KGu5nqFYj62kmpHpzY00qYlD6e6LveHjR/9WGj7Sww2VkHQfRPaBFU5aPm
s5vuazv+D8VyfQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:56 2025 by rpki-client