Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: 5NAbN2bs474Uo62vipCNl2GsT7AgJrkWGuLtGWGGm1c=
Subject key identifier: D2:96:6E:49:C4:32:9D:CE:2B:D3:FE:D6:F5:A9:35:25:5B:16:1C:BF
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 0195903E0465BB91C57A3E21EF8E717EFD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 1200
Signing time: Thu 13 Mar 2025 16:02:18 +0000
Manifest this update: Thu 13 Mar 2025 16:02:18 +0000
Manifest next update: Fri 14 Mar 2025 16:02:18 +0000
Files and hashes: 1: DC457V004ebo_81e4fxQUpZs59k.roa (hash: koGSw3MBz9AwS+zqOmOgemnpgRcxTDfkN77KAf52zbM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: Hue/v3eWfwXvCDP80+KYdx0PiaPIPslzTSLyhy90jH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3e:04:65:bb:91:c5:7a:3e:21:ef:8e:71:7e:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Mar 13 16:02:18 2025 GMT
Not After : Mar 14 16:02:18 2025 GMT
Subject: CN=d2966e49c4329dce2bd3fed6f5a935255b161cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:f2:82:f3:cd:ee:46:e8:3d:5d:52:d7:8c:
ae:e1:4b:b2:40:ee:f9:9b:08:99:ac:ce:91:9d:a3:
68:e1:8d:76:ab:93:ff:d3:5a:8c:94:f3:e8:26:e2:
88:be:12:de:4f:e9:62:2e:79:56:12:56:62:9a:10:
f6:16:76:06:75:b7:41:a6:a9:72:c3:e3:d9:b8:99:
2e:69:81:2f:b7:32:d7:1b:1e:19:b7:23:62:64:73:
13:13:3b:41:e0:e9:e2:40:30:73:69:ce:bc:0e:e4:
ae:56:31:e8:2e:36:54:c3:13:59:79:93:84:02:54:
05:b1:81:80:55:09:8b:35:d2:4c:27:e8:26:65:e0:
f5:28:66:ba:5c:09:01:52:2d:f1:ec:fc:24:e5:91:
7f:26:03:dc:1d:6b:84:43:8d:f6:8a:7f:b0:5a:a5:
15:df:ee:b3:f7:b1:b3:43:35:33:05:8f:e6:2e:55:
39:26:2f:69:26:08:a5:ab:41:bc:05:39:9f:0b:5d:
4c:4f:f9:2d:19:14:04:dc:29:a2:66:98:f5:71:14:
0d:3e:c1:e8:34:a4:82:1c:0c:17:f6:86:be:45:ef:
20:1d:05:52:31:68:55:7c:cc:3b:70:75:f0:d3:c0:
a6:d9:71:93:08:ea:55:af:4e:fb:5b:d0:1a:10:93:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:6E:49:C4:32:9D:CE:2B:D3:FE:D6:F5:A9:35:25:5B:16:1C:BF
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:94:61:f6:da:23:3e:89:09:b8:c0:2f:f7:66:b3:d6:86:
8d:61:52:07:ea:ef:47:44:d6:0c:ce:28:5a:71:a4:7a:0c:10:
04:c5:49:06:ba:5a:5f:0c:5c:0d:34:43:c9:2c:31:1b:f6:c3:
83:b4:5d:27:9e:81:27:79:43:d5:49:aa:32:43:1c:f6:c1:14:
36:8f:74:7c:26:54:64:60:e0:23:0b:dc:d6:13:ce:11:3b:b4:
95:f7:7b:e6:7d:45:44:e0:1f:82:cf:99:d9:3f:12:99:bb:fe:
d4:4a:f1:a4:07:23:41:57:b0:63:0d:8a:da:30:ff:53:3d:11:
a4:78:77:fd:a4:68:8e:7c:20:5f:98:c9:49:1d:02:f3:71:e3:
e6:c7:5b:c9:9a:fd:78:53:c3:66:22:aa:38:f8:7e:26:10:6c:
f5:1f:8e:29:91:59:78:3a:88:fa:05:d6:48:77:35:22:df:5d:
f0:1d:93:6e:b2:a6:de:a6:1e:8a:5f:a9:dd:9b:4a:50:20:3c:
95:40:5e:6b:8c:7b:1d:07:82:8b:40:88:ab:d7:cc:72:21:b5:
cc:77:dd:ea:ea:f8:ee:9d:fc:87:2b:38:1f:c1:2e:8f:f1:ab:
79:27:43:fc:0c:97:0d:45:64:33:07:97:ea:1b:12:d2:17:33:
ec:9f:24:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPgRlu5HFej4h745xfv16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz
OTBkZTYwHhcNMjUwMzEzMTYwMjE4WhcNMjUwMzE0MTYwMjE4WjAzMTEwLwYDVQQD
EyhkMjk2NmU0OWM0MzI5ZGNlMmJkM2ZlZDZmNWE5MzUyNTViMTYxY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnXygvPN7kboPV1S14yu4UuyQO75
mwiZrM6RnaNo4Y12q5P/01qMlPPoJuKIvhLeT+liLnlWElZimhD2FnYGdbdBpqly
w+PZuJkuaYEvtzLXGx4ZtyNiZHMTEztB4OniQDBzac68DuSuVjHoLjZUwxNZeZOE
AlQFsYGAVQmLNdJMJ+gmZeD1KGa6XAkBUi3x7Pwk5ZF/JgPcHWuEQ432in+wWqUV
3+6z97GzQzUzBY/mLlU5Ji9pJgilq0G8BTmfC11MT/ktGRQE3CmiZpj1cRQNPsHo
NKSCHAwX9oa+Re8gHQVSMWhVfMw7cHXw08Cm2XGTCOpVr077W9AaEJMM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKWbknEMp3OK9P+1vWpNSVbFhy/MB8GA1UdIwQY
MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt
MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl
LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCmUYfba
Iz6JCbjAL/dms9aGjWFSB+rvR0TWDM4oWnGkegwQBMVJBrpaXwxcDTRDySwxG/bD
g7RdJ56BJ3lD1UmqMkMc9sEUNo90fCZUZGDgIwvc1hPOETu0lfd75n1FROAfgs+Z
2T8Smbv+1ErxpAcjQVewYw2K2jD/Uz0RpHh3/aRojnwgX5jJSR0C83Hj5sdbyZr9
eFPDZiKqOPh+JhBs9R+OKZFZeDqI+gXWSHc1It9d8B2TbrKm3qYeil+p3ZtKUCA8
lUBea4x7HQeCi0CIq9fMciG1zHfd6ur47p38hys4H8Euj/GreSdD/AyXDUVkMweX
6hsS0hcz7J8k0A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:30 2025 by rpki-client