Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: 7cr9gm2i44qsGOGjSy9Bc4+Aq+bmwMJBpYo5GTo39DQ=
Subject key identifier: 9B:2E:D9:06:88:F5:9B:42:04:B9:D4:C5:9F:F5:1D:95:73:65:0E:28
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 01965123C3118A4A037F9F06957E7D67AC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 0368
Signing time: Sun 20 Apr 2025 03:00:20 +0000
Manifest this update: Sun 20 Apr 2025 03:00:20 +0000
Manifest next update: Mon 21 Apr 2025 03:00:20 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: Un3J0PEYju4rcg7qP9gBzYZ4h48hIjIQplqiVYPpEgM=)
2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:c3:11:8a:4a:03:7f:9f:06:95:7e:7d:67:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Apr 20 03:00:20 2025 GMT
Not After : Apr 21 03:00:20 2025 GMT
Subject: CN=9b2ed90688f59b4204b9d4c59ff51d9573650e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:42:f8:b4:02:74:3b:5f:5d:21:c4:6e:04:
62:56:a7:ef:4d:d8:c1:fd:36:0b:4b:22:fe:dc:ba:
0f:29:91:bf:e8:a4:d9:6b:56:c6:54:a7:58:fa:e9:
25:9a:0c:1e:3c:12:49:bb:e3:7e:58:36:af:1f:d1:
84:f7:51:da:36:e1:6b:e3:2c:9a:53:29:f8:7c:7d:
11:34:a2:0e:6a:af:d6:4b:42:f6:0a:66:05:e0:48:
96:75:01:92:36:32:c1:a9:5d:94:71:cc:53:ff:ed:
00:23:45:4e:c8:af:fc:16:02:92:55:1c:4f:99:32:
c6:58:ff:8b:ce:2e:53:0e:1a:01:df:e9:15:9a:b0:
a9:b4:08:01:49:4b:f6:ec:85:ef:31:f4:f3:50:4c:
16:7b:26:92:89:5d:75:b3:ad:b7:5d:bd:e7:e5:e4:
45:0d:e6:ae:7d:02:8e:09:a1:94:4c:f7:1d:df:a3:
74:07:9a:70:e7:aa:cc:41:86:43:c9:a5:18:aa:3f:
06:14:a0:1a:c4:aa:c7:96:d3:51:df:8f:44:0a:d5:
69:1f:ce:95:92:ed:fc:79:24:8e:86:92:45:cc:cc:
bf:60:5c:cd:63:0e:c8:74:52:d6:f4:4a:bd:00:c3:
5b:b4:5e:c8:64:5e:32:4d:15:15:5a:b7:02:45:65:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:D9:06:88:F5:9B:42:04:B9:D4:C5:9F:F5:1D:95:73:65:0E:28
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:a2:a6:7e:63:48:53:c0:78:31:40:aa:2b:62:ca:29:b7:
2b:77:3e:21:27:62:f8:5c:f0:52:26:d5:9c:d3:bf:c3:80:3d:
56:c7:09:82:7a:b9:fa:8c:fd:d4:55:45:0f:96:c9:f5:39:60:
c8:d0:0e:e7:0a:42:2e:4b:32:bc:41:58:9d:f5:97:f5:0f:62:
18:c4:dd:8a:fb:25:f4:71:10:7e:6a:f1:93:cc:1c:ea:5a:91:
a4:4d:c7:85:41:37:93:e1:7f:bc:84:0e:53:92:cf:10:26:d0:
ad:20:12:e6:f5:24:05:1d:af:8f:ad:e3:83:11:95:2a:d0:c4:
99:4a:1c:61:a9:e2:8d:95:b9:7b:12:04:07:91:4b:4d:42:6f:
6b:b7:a7:fe:0b:7b:3c:fc:d8:06:87:3b:26:cd:6c:dd:6a:f1:
a2:5a:09:16:75:24:59:ff:53:c9:87:b8:3a:37:b6:e7:aa:b8:
5b:1e:60:2f:98:19:c9:56:7f:0e:ed:c7:28:ed:7a:61:bb:19:
ab:14:13:9e:1d:11:2f:99:f2:15:c6:44:62:b1:68:81:96:12:
05:81:75:70:7e:6b:d7:60:cd:22:70:e4:2a:4f:cd:72:3d:4b:
c3:26:9a:0f:2d:64:ab:2b:33:22:5b:18:a4:93:95:32:93:17:
21:cc:bc:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRI8MRikoDf58GlX59Z6xLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGZmOGIxYmQwNzI0YmExMzBmODZiODQ4ZTMzY2FlYThl
OWYxMWQwHhcNMjUwNDIwMDMwMDIwWhcNMjUwNDIxMDMwMDIwWjAzMTEwLwYDVQQD
Eyg5YjJlZDkwNjg4ZjU5YjQyMDRiOWQ0YzU5ZmY1MWQ5NTczNjUwZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVC+LQCdDtfXSHEbgRiVqfvTdjB
/TYLSyL+3LoPKZG/6KTZa1bGVKdY+uklmgwePBJJu+N+WDavH9GE91HaNuFr4yya
Uyn4fH0RNKIOaq/WS0L2CmYF4EiWdQGSNjLBqV2UccxT/+0AI0VOyK/8FgKSVRxP
mTLGWP+Lzi5TDhoB3+kVmrCptAgBSUv27IXvMfTzUEwWeyaSiV11s623Xb3n5eRF
DeaufQKOCaGUTPcd36N0B5pw56rMQYZDyaUYqj8GFKAaxKrHltNR349ECtVpH86V
ku38eSSOhpJFzMy/YFzNYw7IdFLW9Eq9AMNbtF7IZF4yTRUVWrcCRWUdeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsu2QaI9ZtCBLnUxZ/1HZVzZQ4oMB8GA1UdIwQY
MBaAFPTf+LG9ByS6Ew+GuEjjPK6o6fEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWIt
NzRmNmEyZWFlMTc1LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWItNzRmNmEyZWFlMTc1
LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs+ipn5j
SFPAeDFAqitiyim3K3c+ISdi+FzwUibVnNO/w4A9VscJgnq5+oz91FVFD5bJ9Tlg
yNAO5wpCLksyvEFYnfWX9Q9iGMTdivsl9HEQfmrxk8wc6lqRpE3HhUE3k+F/vIQO
U5LPECbQrSAS5vUkBR2vj63jgxGVKtDEmUocYanijZW5exIEB5FLTUJva7en/gt7
PPzYBoc7Js1s3WrxoloJFnUkWf9TyYe4Oje256q4Wx5gL5gZyVZ/Du3HKO16YbsZ
qxQTnh0RL5nyFcZEYrFogZYSBYF1cH5r12DNInDkKk/Ncj1LwyaaDy1kqyszIlsY
pJOVMpMXIcy85g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:38:50 2025 by rpki-client