Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: m/fQcwCQQZOq+/Jtebfo2Knx7acvuZ8mbzMcL/4VYso=
Subject key identifier: B9:CB:8F:45:B6:33:7C:98:62:C2:6E:35:DD:2D:92:C2:84:0E:6C:03
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 01964CA28BFA6C463AF6B8566D67726067E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 06:00:42 +0000
Manifest this update: Sat 19 Apr 2025 06:00:42 +0000
Manifest next update: Sun 20 Apr 2025 06:00:42 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: aGRmjZOCpva9fMAwIFMSMfYMlJ2g5L//126DcXTGiPo=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:8b:fa:6c:46:3a:f6:b8:56:6d:67:72:60:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Apr 19 06:00:42 2025 GMT
Not After : Apr 20 06:00:42 2025 GMT
Subject: CN=b9cb8f45b6337c9862c26e35dd2d92c2840e6c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:24:6a:d7:b4:18:9a:23:36:5e:0e:69:5a:
4d:ac:38:bf:9a:7b:68:84:43:4e:ae:fc:63:a1:e2:
1f:d5:21:4f:a0:b9:c0:66:30:74:82:34:28:33:5c:
74:1b:4d:6a:fa:f2:18:1d:67:52:41:b0:4c:5a:fe:
e8:8d:92:06:ae:84:2d:93:e4:c6:5e:56:2c:f8:d4:
72:71:a6:ec:35:11:e5:61:7a:37:6a:15:f9:50:9b:
95:3b:dd:13:c3:38:9a:c3:e2:06:f3:25:44:62:98:
f1:f5:95:bc:bb:f2:03:f1:cc:89:2d:a0:f3:d5:3b:
f1:9e:15:4f:09:4a:6e:1f:9b:65:e3:78:88:1d:82:
ff:5e:99:58:d8:5c:6a:0a:38:5d:bf:f6:40:b5:4b:
6a:c2:e0:f0:d6:bb:0a:e7:96:95:3e:a2:89:9c:2d:
d5:da:6c:6d:58:ed:2c:36:3a:cc:5f:72:da:aa:92:
f5:4b:f2:a1:17:e8:5c:00:02:2e:17:93:5c:e9:22:
1e:ee:f1:31:35:54:f0:23:78:7c:95:86:c5:af:da:
33:c3:89:e3:4d:d4:12:7e:6e:49:17:c5:95:ef:9e:
3a:62:d9:ad:32:d5:76:95:dc:09:8a:70:da:74:a8:
c5:27:6c:28:c7:82:52:e8:f9:1a:90:5f:5c:6a:a8:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:8F:45:B6:33:7C:98:62:C2:6E:35:DD:2D:92:C2:84:0E:6C:03
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f3:68:d5:d5:61:1f:d3:cf:60:19:a9:d4:19:ea:fa:12:d5:
60:de:e3:7b:26:bc:5c:ef:52:fd:11:d4:9a:ea:a5:4f:93:fb:
8f:9c:3d:77:7f:e5:df:c4:bd:80:86:23:cf:5b:ac:2e:34:f3:
e4:c2:a5:86:b1:af:97:b2:42:de:68:02:e3:48:58:79:b0:6e:
b0:bc:69:22:fd:6f:1b:4c:0a:0c:d3:32:a6:38:d6:95:70:f0:
9d:8b:f9:36:d4:7d:b6:12:28:e0:48:86:cd:06:6f:5c:3c:50:
09:aa:d0:b9:e4:a6:f6:1a:2d:d1:df:cd:75:59:18:fc:46:70:
eb:37:da:f8:88:dd:58:b9:d8:9c:d9:27:40:32:f1:68:10:60:
40:21:ff:2b:f1:4f:15:35:4a:1f:8e:62:66:49:0d:b3:ba:38:
8d:36:fa:83:f1:a3:d5:4b:13:63:5e:a4:4e:fe:00:62:65:7d:
a3:23:d1:9d:3d:87:d3:ef:0d:cc:d4:74:38:12:4f:d5:ca:64:
e8:fb:d2:cc:06:5f:38:5a:bb:0f:7b:2a:77:ab:29:50:fe:e7:
a6:91:e2:6e:ed:25:9c:7f:eb:10:16:40:d3:65:70:05:4d:72:
2e:04:8f:76:4c:40:bc:fd:f9:4f:d3:69:d6:3e:5f:b0:5d:d4:
53:6a:45:5f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZMoov6bEY69rhWbWdyYGfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YTM1MjBmZDljMjk5YTI4NzRkZjVlNDdiNjMwMmE0MjUy
YTcyNmIwHhcNMjUwNDE5MDYwMDQyWhcNMjUwNDIwMDYwMDQyWjAzMTEwLwYDVQQD
EyhiOWNiOGY0NWI2MzM3Yzk4NjJjMjZlMzVkZDJkOTJjMjg0MGU2YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdUkate0GJojNl4OaVpNrDi/mnto
hENOrvxjoeIf1SFPoLnAZjB0gjQoM1x0G01q+vIYHWdSQbBMWv7ojZIGroQtk+TG
XlYs+NRycabsNRHlYXo3ahX5UJuVO90Twziaw+IG8yVEYpjx9ZW8u/ID8cyJLaDz
1TvxnhVPCUpuH5tl43iIHYL/XplY2FxqCjhdv/ZAtUtqwuDw1rsK55aVPqKJnC3V
2mxtWO0sNjrMX3LaqpL1S/KhF+hcAAIuF5Nc6SIe7vExNVTwI3h8lYbFr9ozw4nj
TdQSfm5JF8WV7546YtmtMtV2ldwJinDadKjFJ2wox4JS6PkakF9caqi9OwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLnLj0W2M3yYYsJuNd0tksKEDmwDMB8GA1UdIwQY
MBaAFPmjUg/Zwpmih0315HtjAqQlKnJrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hTlNEOW5DbWFLSFRmWGtlMk1DcENVcWNtcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvODQwNzU3LTgxNDktNDBmZS1hNDli
LWFlNWU3NGVkNWJhMC8xLzEtYU5TRDluQ21hS0hUZlhrZTJNQ3BDVXFjbXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI1Lzg0MDc1Ny04MTQ5LTQwZmUtYTQ5Yi1hZTVlNzRlZDVi
YTAvMS8xLWFOU0Q5bkNtYUtIVGZYa2UyTUNwQ1VxY21zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPNo
1dVhH9PPYBmp1Bnq+hLVYN7jeya8XO9S/RHUmuqlT5P7j5w9d3/l38S9gIYjz1us
LjTz5MKlhrGvl7JC3mgC40hYebBusLxpIv1vG0wKDNMypjjWlXDwnYv5NtR9thIo
4EiGzQZvXDxQCarQueSm9hot0d/NdVkY/EZw6zfa+IjdWLnYnNknQDLxaBBgQCH/
K/FPFTVKH45iZkkNs7o4jTb6g/Gj1UsTY16kTv4AYmV9oyPRnT2H0+8NzNR0OBJP
1cpk6PvSzAZfOFq7D3sqd6spUP7nppHibu0lnH/rEBZA02VwBU1yLgSPdkxAvP35
T9Np1j5fsF3UU2pFXw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:09 2025 by rpki-client