Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: EZpVYLgx/N4PFWW7jU9pVpN1lWMTPN0kEteg6AkXGv8=
Subject key identifier: CA:C7:93:CE:48:ED:CC:EE:B6:E4:A5:C4:27:F3:CD:BB:E9:9C:BB:09
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 01965649FF48F67A054356F42FA99538DF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 13D4
Signing time: Mon 21 Apr 2025 03:00:12 +0000
Manifest this update: Mon 21 Apr 2025 03:00:12 +0000
Manifest next update: Tue 22 Apr 2025 03:00:12 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: bt8swMuqlQmbpGFzHdO50P4A9v1T9tAeCzxPoB3M5cs=)
2: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:49:ff:48:f6:7a:05:43:56:f4:2f:a9:95:38:df:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Apr 21 03:00:12 2025 GMT
Not After : Apr 22 03:00:12 2025 GMT
Subject: CN=cac793ce48edcceeb6e4a5c427f3cdbbe99cbb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:e6:ab:a5:b6:21:91:40:e8:87:47:95:58:
04:49:68:31:24:d6:c3:77:06:22:13:16:3a:57:5d:
ab:b7:90:05:ea:05:df:a1:aa:1c:b1:2d:52:11:68:
11:6b:8e:00:69:09:d2:19:e5:25:9b:69:8a:56:31:
e0:84:f8:5e:a3:e5:c1:b0:4b:6a:3f:c3:3a:d4:51:
db:e8:85:11:1a:9e:f0:76:92:5e:b6:e8:4f:fe:a9:
0b:9b:02:49:4d:73:06:c7:c7:27:de:57:36:10:b9:
de:dd:16:2f:5a:86:74:88:c9:72:01:86:77:87:45:
b0:df:e8:f4:96:87:c7:40:41:cb:74:4c:9c:72:48:
bb:2e:9a:a6:44:41:a1:58:92:72:4d:fe:35:b5:c1:
a7:b9:23:3f:b5:a4:75:23:4b:f1:6c:fc:40:dd:e7:
d5:83:52:be:6f:3e:01:17:95:fc:e9:06:1e:63:8b:
66:9c:b6:eb:8f:41:7c:c5:c6:89:fa:b1:3d:2d:1a:
24:37:0c:34:9a:01:a5:ff:c1:7c:93:9d:47:51:bb:
24:72:50:b6:88:40:d0:4e:6e:68:dd:48:c4:53:71:
38:26:20:1f:b1:cf:74:61:3a:5b:20:f9:4f:fc:db:
dd:e9:02:1d:5f:9b:bb:7d:50:41:c9:bc:aa:b3:af:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C7:93:CE:48:ED:CC:EE:B6:E4:A5:C4:27:F3:CD:BB:E9:9C:BB:09
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a6:61:5a:ca:66:ee:c8:5b:bb:91:ac:2a:4c:e7:e5:61:ff:
bb:c5:3a:b9:c4:ac:9e:4a:ee:25:05:46:b4:b1:2d:d4:a7:23:
6e:0d:46:a0:18:fd:2b:67:33:b0:28:9f:a4:fa:89:d8:9a:d7:
c6:90:78:5f:5a:21:a2:05:b2:a8:a5:e5:1b:ba:95:ad:bf:7b:
c4:11:24:81:05:6d:d9:a1:42:3c:56:84:a5:43:13:19:84:1b:
ff:1f:04:69:7d:57:12:9b:60:65:ba:08:0d:7f:05:3e:cc:c3:
c4:e0:00:24:3d:e3:bb:0f:ba:41:d4:95:60:52:18:67:f4:46:
1f:2b:ad:d5:96:fa:60:c7:98:f9:24:1c:3b:87:e9:35:ec:08:
05:9b:05:01:a9:78:74:24:fa:2f:39:3d:3b:09:cf:9b:d4:5b:
67:a0:ce:2b:89:43:9d:6e:1a:67:a1:39:bb:db:83:5d:5f:d6:
a5:ba:92:a4:e7:88:d1:17:f1:47:74:63:4c:e2:54:d0:25:94:
ec:2c:e0:65:1b:65:79:e6:6a:40:43:dc:cf:81:e1:a2:1c:11:
af:02:dd:c5:f3:0e:1a:40:88:62:e8:21:25:ee:ef:7e:3c:e2:
2e:46:70:fd:96:4b:ef:50:1d:19:fa:ee:28:6d:6c:40:30:07:
aa:15:b1:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSf9I9noFQ1b0L6mVON8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDNjMGMxMTUzMjhjM2QyOGMwZjU3MjFiMDA5ODJiMmNk
NDIxNWUwHhcNMjUwNDIxMDMwMDEyWhcNMjUwNDIyMDMwMDEyWjAzMTEwLwYDVQQD
EyhjYWM3OTNjZTQ4ZWRjY2VlYjZlNGE1YzQyN2YzY2RiYmU5OWNiYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwHmq6W2IZFA6IdHlVgESWgxJNbD
dwYiExY6V12rt5AF6gXfoaocsS1SEWgRa44AaQnSGeUlm2mKVjHghPheo+XBsEtq
P8M61FHb6IURGp7wdpJetuhP/qkLmwJJTXMGx8cn3lc2ELne3RYvWoZ0iMlyAYZ3
h0Ww3+j0lofHQEHLdEyccki7LpqmREGhWJJyTf41tcGnuSM/taR1I0vxbPxA3efV
g1K+bz4BF5X86QYeY4tmnLbrj0F8xcaJ+rE9LRokNww0mgGl/8F8k51HUbskclC2
iEDQTm5o3UjEU3E4JiAfsc90YTpbIPlP/Nvd6QIdX5u7fVBBybyqs69JiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrHk85I7czutuSlxCfzzbvpnLsJMB8GA1UdIwQY
MBaAFAfTwMEVMow9KMD1chsAmCss1CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDct
MmIxZDQzOWIyMjI3LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDctMmIxZDQzOWIyMjI3
LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqZhWspm
7shbu5GsKkzn5WH/u8U6ucSsnkruJQVGtLEt1Kcjbg1GoBj9K2czsCifpPqJ2JrX
xpB4X1ohogWyqKXlG7qVrb97xBEkgQVt2aFCPFaEpUMTGYQb/x8EaX1XEptgZboI
DX8FPszDxOAAJD3juw+6QdSVYFIYZ/RGHyut1Zb6YMeY+SQcO4fpNewIBZsFAal4
dCT6Lzk9OwnPm9RbZ6DOK4lDnW4aZ6E5u9uDXV/WpbqSpOeI0RfxR3RjTOJU0CWU
7CzgZRtleeZqQEPcz4HhohwRrwLdxfMOGkCIYughJe7vfjziLkZw/ZZL71AdGfru
KG1sQDAHqhWxsQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:34:25 2025 by rpki-client