Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: Z4kuGy6KeP4DH/llwoqC8YHmoY9hQoQoUIK1pUZxLf0=
Subject key identifier: 60:73:EE:B6:05:01:5C:56:CC:A6:DD:66:70:83:D9:73:18:33:C8:95
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 01964C34CB3CFC336F8724CF053CD2E3044F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 12D4
Signing time: Sat 19 Apr 2025 04:00:50 +0000
Manifest this update: Sat 19 Apr 2025 04:00:50 +0000
Manifest next update: Sun 20 Apr 2025 04:00:50 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: /ieDVsttym2skF/WfY90C5wNbL5tcZdkS923A2DUnhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:cb:3c:fc:33:6f:87:24:cf:05:3c:d2:e3:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Apr 19 04:00:50 2025 GMT
Not After : Apr 20 04:00:50 2025 GMT
Subject: CN=6073eeb605015c56cca6dd667083d9731833c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:62:ad:63:ad:c0:0e:47:e9:74:04:d4:76:
53:ac:30:f4:9f:47:fc:1f:a5:30:44:05:d7:81:48:
c0:ee:5d:25:9c:35:45:63:e3:90:5f:02:1c:46:64:
c1:ce:45:11:dc:8e:e3:c4:aa:c4:ee:6f:25:3c:86:
a8:87:31:ec:1d:eb:61:9a:e4:e5:5e:c4:2a:df:bf:
e1:50:5d:b7:99:37:f2:b9:6d:a0:c6:95:77:aa:89:
fc:fb:07:24:2e:bc:a8:ae:db:2d:38:b4:0f:5a:cc:
09:58:b2:32:9b:6b:5a:43:2e:d6:f3:49:15:54:fb:
f9:67:a0:d9:83:12:57:10:4c:08:c9:6d:52:5a:79:
af:31:f7:88:77:9d:be:c1:7d:f1:ad:d5:4c:6e:46:
ac:a0:d6:12:54:0c:8f:c5:be:f9:13:c4:a1:a1:a9:
c0:94:b9:55:87:c1:d9:c2:5b:b1:aa:f9:c2:8e:60:
24:f3:c9:1c:74:2d:48:42:26:27:eb:34:97:c7:ec:
85:87:44:74:22:42:10:c2:a8:32:c0:b9:b5:62:06:
93:b7:97:83:67:ae:9e:85:77:b0:63:07:a6:02:aa:
e8:4e:3c:68:d9:19:2d:ed:0a:98:41:fb:ed:81:37:
9c:f2:56:2b:4e:db:07:f2:02:ec:a9:f3:d1:2c:9f:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:EE:B6:05:01:5C:56:CC:A6:DD:66:70:83:D9:73:18:33:C8:95
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f0:2f:1a:be:28:b3:ce:2e:ad:66:a3:5f:15:ce:8d:40:71:
66:e3:d8:28:b9:d1:87:8e:5d:af:25:81:7f:0c:d0:a9:83:21:
69:51:8b:e3:d8:f0:cf:8b:55:0b:f1:b9:eb:59:a3:e1:3d:5c:
28:7a:a6:06:29:6a:85:15:86:f0:c3:31:57:53:78:bf:47:4e:
61:6c:d3:cc:6a:f5:81:b0:bc:32:e7:15:a8:d3:33:0c:1a:32:
61:fb:d0:99:fe:9c:20:29:1c:ff:9a:b1:24:2c:7b:58:91:83:
c7:b0:34:ce:75:0c:c7:38:c9:cc:cb:e8:1c:48:3f:60:b3:9f:
7f:94:3e:6f:af:74:f7:57:6d:f7:4c:0b:b1:8d:af:da:1d:15:
97:0d:7a:90:55:c3:33:c7:3b:c7:65:32:e9:cd:ac:e3:f1:69:
d2:b8:c7:75:b3:38:b4:63:ae:d2:65:4e:8c:ab:44:8e:4c:67:
3e:b8:0d:c7:fe:7d:20:44:48:20:83:24:9e:d9:08:05:7a:72:
18:d2:c2:ac:41:2a:24:54:a7:c3:20:f5:11:1b:2c:a3:0b:7e:
8f:1b:a4:d9:f5:f4:67:89:b2:f6:9b:f1:37:c4:d9:32:14:c0:
d9:e5:55:4b:52:10:b0:f1:2e:ae:e6:08:f3:6e:29:c5:0c:a6:
89:20:5f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNMs8/DNvhyTPBTzS4wRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGZmYzhiZGI4NDQ5NzBiOGUyOGI5YjRiZTZmMmMwNmRm
ZDc5ODUwHhcNMjUwNDE5MDQwMDUwWhcNMjUwNDIwMDQwMDUwWjAzMTEwLwYDVQQD
Eyg2MDczZWViNjA1MDE1YzU2Y2NhNmRkNjY3MDgzZDk3MzE4MzNjODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IdirWOtwA5H6XQE1HZTrDD0n0f8
H6UwRAXXgUjA7l0lnDVFY+OQXwIcRmTBzkUR3I7jxKrE7m8lPIaohzHsHethmuTl
XsQq37/hUF23mTfyuW2gxpV3qon8+wckLryortstOLQPWswJWLIym2taQy7W80kV
VPv5Z6DZgxJXEEwIyW1SWnmvMfeId52+wX3xrdVMbkasoNYSVAyPxb75E8ShoanA
lLlVh8HZwluxqvnCjmAk88kcdC1IQiYn6zSXx+yFh0R0IkIQwqgywLm1YgaTt5eD
Z66ehXewYwemAqroTjxo2Rkt7QqYQfvtgTec8lYrTtsH8gLsqfPRLJ/5UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBz7rYFAVxWzKbdZnCD2XMYM8iVMB8GA1UdIwQY
MBaAFJvf/IvbhElwuOKLm0vm8sBt/XmFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMt
MDUzZjNkZmMxNTIxLzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMtMDUzZjNkZmMxNTIx
LzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfAvGr4o
s84urWajXxXOjUBxZuPYKLnRh45dryWBfwzQqYMhaVGL49jwz4tVC/G561mj4T1c
KHqmBilqhRWG8MMxV1N4v0dOYWzTzGr1gbC8MucVqNMzDBoyYfvQmf6cICkc/5qx
JCx7WJGDx7A0znUMxzjJzMvoHEg/YLOff5Q+b69091dt90wLsY2v2h0Vlw16kFXD
M8c7x2Uy6c2s4/Fp0rjHdbM4tGOu0mVOjKtEjkxnPrgNx/59IERIIIMkntkIBXpy
GNLCrEEqJFSnwyD1ERssowt+jxuk2fX0Z4my9pvxN8TZMhTA2eVVS1IQsPEuruYI
824pxQymiSBfFw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:24 2025 by rpki-client