Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File: 9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier: c38qp5KfhVfGo/QuEMexLmnri2plZ9UkNr0de2pOTOw=
Subject key identifier: 6D:5D:BA:2A:42:41:FA:3B:44:01:D8:C2:91:9D:3E:7E:6E:92:68:16
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 01965CF1E437CC618453DE79340C1F3D9AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number: 12BB
Signing time: Tue 22 Apr 2025 10:01:18 +0000
Manifest this update: Tue 22 Apr 2025 10:01:18 +0000
Manifest next update: Wed 23 Apr 2025 10:01:18 +0000
Files and hashes: 1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=)
2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: xZRzBWVLb7lR6HvtPaev7NTF0VoBTKkAFYRMEqw3kTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:e4:37:cc:61:84:53:de:79:34:0c:1f:3d:9a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Apr 22 10:01:18 2025 GMT
Not After : Apr 23 10:01:18 2025 GMT
Subject: CN=6d5dba2a4241fa3b4401d8c2919d3e7e6e926816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:3e:ae:68:b8:07:a8:f9:c8:35:e8:9f:70:
70:54:21:d5:e7:0e:3b:c8:c7:27:b8:45:a1:b2:67:
11:35:f4:bb:40:b0:82:2e:05:4a:df:b2:5f:7c:59:
3d:b2:39:e7:45:71:4e:e9:b0:b2:61:fc:a7:5b:75:
5b:e5:67:49:2c:63:63:2a:25:3f:ce:f9:94:68:e7:
d7:b3:45:7a:6f:b3:c9:fb:e8:15:83:80:31:8e:3c:
82:da:46:80:79:e0:42:34:40:80:29:74:4d:a5:26:
12:1b:28:38:f7:01:42:9e:ba:af:74:7d:77:8e:91:
89:cd:bc:ce:64:fd:f5:68:38:57:a8:66:9b:5b:be:
cc:c7:df:06:39:9d:24:10:31:48:6f:b7:15:11:37:
6c:95:3e:ee:95:a7:eb:f8:17:03:cd:c5:65:fd:82:
40:07:8c:6b:67:10:9f:ba:0a:d5:e1:9a:3d:d9:92:
e4:91:41:f1:36:04:f9:9d:a3:d1:13:89:25:fd:03:
7e:5a:c2:2b:3c:a4:9d:26:ee:2d:ae:1e:cb:9e:cf:
f7:59:e5:ab:bc:58:48:87:f2:7e:5b:a2:28:9e:40:
df:e5:9c:6d:c1:d7:a5:ba:18:c0:91:c1:7c:fa:03:
1c:37:24:d8:83:22:65:83:6b:f9:1d:6f:67:e7:00:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:BA:2A:42:41:FA:3B:44:01:D8:C2:91:9D:3E:7E:6E:92:68:16
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:c3:f2:3a:3b:e4:da:75:f7:a4:14:98:5e:08:23:66:a3:
fa:58:f0:77:cc:80:ff:c0:33:f8:f2:93:49:4e:ff:c3:d2:f7:
cd:75:b6:85:d1:70:63:a7:b0:b0:a0:9c:ec:31:77:c3:7c:3e:
99:23:55:33:40:43:5a:e7:d8:ba:7e:0c:b5:a5:2c:3c:67:b9:
c8:0b:bd:78:65:bd:08:f0:d4:6d:24:88:7d:b6:3b:c0:e2:12:
d3:57:f6:20:7a:76:05:d8:a9:35:5c:95:dd:13:3e:f4:8e:e0:
a0:84:8b:9a:f0:a5:3b:db:49:7a:12:f8:83:49:0e:6d:c0:14:
5a:38:3e:c4:46:cb:40:68:cb:60:24:7e:d7:14:18:b6:f6:bd:
27:fd:17:05:0b:66:bd:d4:c0:b8:cd:3d:58:f8:fd:a2:de:65:
72:9e:5f:0c:47:04:38:98:bf:07:9d:20:85:8e:a6:4d:fb:6a:
a1:85:76:63:f8:55:40:76:cd:a8:95:2b:a2:3e:23:16:83:b6:
ca:bc:2e:cf:88:ca:ae:9b:d5:36:b1:f8:b8:45:81:93:86:90:
5f:47:5d:d7:01:00:ee:f0:1b:c7:a7:38:cd:34:ee:82:bb:04:
57:1d:bf:22:96:72:d5:fe:b7:0f:f4:ec:2e:36:bd:be:9c:68:
cc:67:33:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8eQ3zGGEU955NAwfPZqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTgyNTYxZDJkYTE3OTAyZjgzZWZmZTEzMjQ5OWY4MmQ1
MmYxNjMwHhcNMjUwNDIyMTAwMTE4WhcNMjUwNDIzMTAwMTE4WjAzMTEwLwYDVQQD
Eyg2ZDVkYmEyYTQyNDFmYTNiNDQwMWQ4YzI5MTlkM2U3ZTZlOTI2ODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK0+rmi4B6j5yDXon3BwVCHV5w47
yMcnuEWhsmcRNfS7QLCCLgVK37JffFk9sjnnRXFO6bCyYfynW3Vb5WdJLGNjKiU/
zvmUaOfXs0V6b7PJ++gVg4AxjjyC2kaAeeBCNECAKXRNpSYSGyg49wFCnrqvdH13
jpGJzbzOZP31aDhXqGabW77Mx98GOZ0kEDFIb7cVETdslT7ulafr+BcDzcVl/YJA
B4xrZxCfugrV4Zo92ZLkkUHxNgT5naPRE4kl/QN+WsIrPKSdJu4trh7Lns/3WeWr
vFhIh/J+W6IonkDf5ZxtwdeluhjAkcF8+gMcNyTYgyJlg2v5HW9n5wCLwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1duipCQfo7RAHYwpGdPn5ukmgWMB8GA1UdIwQY
MBaAFPaYJWHS2heQL4Pv/hMkmfgtUvFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQt
ODczMTRkZjdkZWI0LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQtODczMTRkZjdkZWI0
LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1XD8jo7
5Np196QUmF4II2aj+ljwd8yA/8Az+PKTSU7/w9L3zXW2hdFwY6ewsKCc7DF3w3w+
mSNVM0BDWufYun4MtaUsPGe5yAu9eGW9CPDUbSSIfbY7wOIS01f2IHp2BdipNVyV
3RM+9I7goISLmvClO9tJehL4g0kObcAUWjg+xEbLQGjLYCR+1xQYtva9J/0XBQtm
vdTAuM09WPj9ot5lcp5fDEcEOJi/B50ghY6mTftqoYV2Y/hVQHbNqJUroj4jFoO2
yrwuz4jKrpvVNrH4uEWBk4aQX0dd1wEA7vAbx6c4zTTugrsEVx2/IpZy1f63D/Ts
Lja9vpxozGczUw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:23 2025 by rpki-client