Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: LmgsgVO5lFZ+YfPj5ftP2QVhUrkDcNiUTBt6uZZyl0I=
Subject key identifier: 02:2B:AA:67:5D:EF:32:C5:11:30:4D:B1:17:D9:6A:21:0C:66:42:8C
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019655A5A848DEA12C66BC45B862CFD37EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:00:41 +0000
Manifest this update: Mon 21 Apr 2025 00:00:41 +0000
Manifest next update: Tue 22 Apr 2025 00:00:41 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: bFQ8cRmxhA+RFG8lU+exhBkqVRxuFRpSqWuJ5vFxSqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:a8:48:de:a1:2c:66:bc:45:b8:62:cf:d3:7e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Apr 21 00:00:41 2025 GMT
Not After : Apr 22 00:00:41 2025 GMT
Subject: CN=022baa675def32c511304db117d96a210c66428c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:f3:6a:80:b1:9e:d3:1e:6c:81:7a:e5:93:
26:01:47:59:6f:cc:4d:46:6a:93:36:d2:c7:fc:e9:
74:4e:0f:95:a2:57:26:b4:ad:c6:b2:3f:b3:8d:64:
29:57:7a:a3:7a:e2:e9:ed:f7:3f:11:e4:48:04:f3:
84:85:21:c6:e6:1b:78:10:f5:fd:61:f7:9c:27:08:
52:37:ff:79:78:58:f9:ce:69:56:10:02:bb:07:78:
8d:d7:bd:ef:ea:30:5a:0a:95:7c:6c:fc:d4:e6:5e:
4e:a3:ac:f4:e4:bb:cc:95:36:c5:77:1a:ca:72:56:
56:a7:c6:c4:74:fe:c8:99:78:7a:b9:5c:71:05:05:
67:ac:2d:f0:2a:cc:f5:93:73:54:d0:a1:65:13:31:
f8:5f:71:ce:de:5c:f4:8b:10:8a:62:e3:56:b6:cf:
e0:b6:90:ea:e5:09:14:66:13:d1:fc:25:16:c8:d4:
96:82:4f:21:c8:71:90:2c:15:c3:0a:39:1c:b8:1c:
1d:b0:ef:b6:f9:ab:f0:37:7f:ae:5b:52:05:88:97:
c0:29:ff:df:f6:88:f4:17:13:79:b3:57:e8:38:53:
94:93:3d:ad:78:2a:53:65:ee:e4:3e:00:76:6a:9c:
f1:10:8e:0a:ec:93:d4:69:fc:92:be:8e:fa:60:29:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:AA:67:5D:EF:32:C5:11:30:4D:B1:17:D9:6A:21:0C:66:42:8C
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f7:40:a0:96:af:5a:c9:a9:42:3f:49:9a:cd:bf:1c:b6:38:
19:c1:93:dc:6a:ce:a5:ef:a3:80:04:49:c0:74:06:18:8f:38:
d3:06:b5:36:3b:b7:30:df:03:4c:97:c2:6a:69:ff:14:fd:83:
c1:bb:f9:d1:a9:94:34:66:78:03:1c:1b:1a:11:dc:30:e4:39:
2a:6f:29:0d:9d:dc:2d:55:59:d9:45:e6:49:61:90:13:2d:12:
9e:cc:3c:b3:cd:25:c8:a0:14:b3:1d:4d:ff:c6:5c:71:33:e3:
bd:d4:a0:99:f7:c6:be:d7:21:4f:7a:6d:10:c5:a8:d5:1c:7f:
fa:bc:9b:24:42:1c:86:67:8a:b4:32:83:b6:28:e8:c7:af:26:
d5:89:50:0a:35:54:3e:9e:75:38:b4:cb:b5:e2:7c:e3:93:49:
59:28:b0:48:33:5f:4e:46:e2:85:61:30:85:40:8c:dc:01:fd:
20:58:e9:4f:e1:8f:bf:b0:c3:92:da:73:62:a7:0d:16:e6:96:
15:e0:c8:3c:bc:1c:ec:6f:fa:a9:cc:b1:d0:9a:7b:d5:c4:60:
b9:e6:ee:c4:c0:09:77:2c:bb:91:c4:84:cf:9a:52:cd:ad:06:
7a:bb:c4:59:33:d8:8b:bb:0c:9e:14:31:16:e1:b4:82:d2:9d:
f0:21:cf:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpahI3qEsZrxFuGLP0378MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2
NzMyMzkwHhcNMjUwNDIxMDAwMDQxWhcNMjUwNDIyMDAwMDQxWjAzMTEwLwYDVQQD
EygwMjJiYWE2NzVkZWYzMmM1MTEzMDRkYjExN2Q5NmEyMTBjNjY0MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rnzaoCxntMebIF65ZMmAUdZb8xN
RmqTNtLH/Ol0Tg+VolcmtK3Gsj+zjWQpV3qjeuLp7fc/EeRIBPOEhSHG5ht4EPX9
YfecJwhSN/95eFj5zmlWEAK7B3iN173v6jBaCpV8bPzU5l5Oo6z05LvMlTbFdxrK
clZWp8bEdP7ImXh6uVxxBQVnrC3wKsz1k3NU0KFlEzH4X3HO3lz0ixCKYuNWts/g
tpDq5QkUZhPR/CUWyNSWgk8hyHGQLBXDCjkcuBwdsO+2+avwN3+uW1IFiJfAKf/f
9oj0FxN5s1foOFOUkz2teCpTZe7kPgB2apzxEI4K7JPUafySvo76YClZ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIrqmdd7zLFETBNsRfZaiEMZkKMMB8GA1UdIwQY
MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt
ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4
LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxvdAoJav
WsmpQj9Jms2/HLY4GcGT3GrOpe+jgARJwHQGGI840wa1Nju3MN8DTJfCamn/FP2D
wbv50amUNGZ4AxwbGhHcMOQ5Km8pDZ3cLVVZ2UXmSWGQEy0Snsw8s80lyKAUsx1N
/8ZccTPjvdSgmffGvtchT3ptEMWo1Rx/+rybJEIchmeKtDKDtijox68m1YlQCjVU
Pp51OLTLteJ845NJWSiwSDNfTkbihWEwhUCM3AH9IFjpT+GPv7DDktpzYqcNFuaW
FeDIPLwc7G/6qcyx0Jp71cRguebuxMAJdyy7kcSEz5pSza0GervEWTPYi7sMnhQx
FuG0gtKd8CHPBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:08:44 2025 by rpki-client