Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: N5J9pNvbhI06PRNfF6Nk+fX2ATy/ntSLMrnwNO/lMFw=
Subject key identifier: F9:AC:53:05:7F:CD:ED:90:52:23:DB:E8:C1:45:E3:77:D1:9A:91:CC
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019654256F39CBEA0266F83B2B2E2E2E263D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1509
Signing time: Sun 20 Apr 2025 17:01:01 +0000
Manifest this update: Sun 20 Apr 2025 17:01:01 +0000
Manifest next update: Mon 21 Apr 2025 17:01:01 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: e60X3tk0L5DId2c4R0Z5BPk/wqub5xPRDQUCu57ENvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:6f:39:cb:ea:02:66:f8:3b:2b:2e:2e:2e:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Apr 20 17:01:01 2025 GMT
Not After : Apr 21 17:01:01 2025 GMT
Subject: CN=f9ac53057fcded905223dbe8c145e377d19a91cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:42:72:93:76:6f:53:7b:aa:cc:63:b8:8d:89:
8a:c0:9b:27:89:d0:5e:72:07:32:8f:9f:9d:71:e8:
f9:e3:a9:55:97:2b:20:61:40:d4:30:fd:93:ae:c9:
b6:44:89:c1:7e:20:52:46:94:f4:06:7c:c5:9a:00:
95:81:67:d4:e7:c0:04:42:19:2f:6f:a5:f7:cd:9d:
de:5f:8b:2d:75:e3:62:1a:35:ae:72:42:9e:67:cf:
42:de:2e:e8:0f:28:d1:17:93:06:b0:db:7b:c6:03:
55:e9:f5:71:99:ff:4b:a3:ab:8a:41:1a:60:4e:6b:
fb:22:77:c2:fd:ad:f8:24:53:d8:1d:bd:b6:3d:c8:
97:1d:12:f2:99:4e:1d:6c:c9:76:b8:7c:2a:50:25:
ae:af:82:3a:a9:24:0a:ee:7e:1c:7f:bc:bb:06:6e:
5d:50:7d:85:78:b4:15:f9:7d:cf:72:90:3e:ce:ed:
db:45:c0:8e:9d:f9:7c:cd:3b:5b:6c:6e:f7:8d:83:
b7:44:ac:a7:6b:c7:39:6b:fc:c5:12:82:ab:c5:c6:
8a:07:94:16:9c:86:72:0e:2f:54:06:d6:de:59:89:
4b:26:16:ab:81:ee:50:d5:a4:d6:0d:08:f7:31:cc:
74:d4:d7:5d:9c:aa:22:70:3d:3c:62:f2:84:22:53:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:53:05:7F:CD:ED:90:52:23:DB:E8:C1:45:E3:77:D1:9A:91:CC
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b3:88:0a:fd:45:ba:cf:4c:86:60:5c:b1:bc:58:c6:08:87:
3c:a5:0f:0c:02:4d:0b:71:78:e0:92:74:57:04:7d:6c:61:3c:
d4:dd:e6:bb:53:57:f0:a0:d3:eb:ff:e7:e2:60:9d:1d:d8:66:
49:3c:ea:bb:0d:bb:16:93:1e:5c:54:cd:d1:18:a0:13:5a:f6:
61:e3:05:c3:cd:60:b2:b9:d2:35:ad:bb:91:f1:14:17:93:9c:
39:13:f3:a1:6b:43:bc:68:0d:bf:ba:71:91:9f:23:98:46:f5:
48:7b:a7:ef:8d:0f:e3:ac:40:fe:39:ab:23:03:aa:34:0c:c3:
80:35:69:c8:c0:af:d6:61:bc:0b:09:b7:b3:df:85:7a:94:55:
eb:2b:04:74:40:cd:ef:ee:9a:b3:20:2c:ee:8a:d7:0b:69:1b:
39:88:8c:e8:6e:26:96:5f:a4:87:49:a3:67:a7:45:7a:8a:5b:
89:41:87:15:12:13:ef:ab:5d:7d:74:e5:f7:ca:a6:fb:dd:9b:
b8:f2:94:17:03:85:97:11:6b:27:c0:84:d5:b2:1a:7c:55:e0:
e3:d4:c5:6c:74:55:ca:7b:04:81:fe:85:13:26:c3:9b:20:af:
e2:a2:06:62:7c:7f:ed:c1:58:f8:ff:ed:dd:ad:11:17:8c:79:
bb:3f:a8:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJW85y+oCZvg7Ky4uLiY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjUwNDIwMTcwMTAxWhcNMjUwNDIxMTcwMTAxWjAzMTEwLwYDVQQD
EyhmOWFjNTMwNTdmY2RlZDkwNTIyM2RiZThjMTQ1ZTM3N2QxOWE5MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0Jyk3ZvU3uqzGO4jYmKwJsnidBe
cgcyj5+dcej546lVlysgYUDUMP2Trsm2RInBfiBSRpT0BnzFmgCVgWfU58AEQhkv
b6X3zZ3eX4stdeNiGjWuckKeZ89C3i7oDyjRF5MGsNt7xgNV6fVxmf9Lo6uKQRpg
Tmv7InfC/a34JFPYHb22PciXHRLymU4dbMl2uHwqUCWur4I6qSQK7n4cf7y7Bm5d
UH2FeLQV+X3PcpA+zu3bRcCOnfl8zTtbbG73jYO3RKyna8c5a/zFEoKrxcaKB5QW
nIZyDi9UBtbeWYlLJharge5Q1aTWDQj3Mcx01NddnKoicD08YvKEIlNVgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmsUwV/ze2QUiPb6MFF43fRmpHMMB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLOICv1F
us9MhmBcsbxYxgiHPKUPDAJNC3F44JJ0VwR9bGE81N3mu1NX8KDT6//n4mCdHdhm
STzquw27FpMeXFTN0RigE1r2YeMFw81gsrnSNa27kfEUF5OcORPzoWtDvGgNv7px
kZ8jmEb1SHun740P46xA/jmrIwOqNAzDgDVpyMCv1mG8Cwm3s9+FepRV6ysEdEDN
7+6asyAs7orXC2kbOYiM6G4mll+kh0mjZ6dFeopbiUGHFRIT76tdfXTl98qm+92b
uPKUFwOFlxFrJ8CE1bIafFXg49TFbHRVynsEgf6FEybDmyCv4qIGYnx/7cFY+P/t
3a0RF4x5uz+oiA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:29:19 2025 by rpki-client