Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: 20WncGBrdzOcnvudh9zRYxVbnkLeafqDbVj6ES+EeUM=
Subject key identifier: BE:D0:0E:E2:57:47:09:0A:91:99:E6:AE:73:EA:9C:20:11:DE:33:42
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 01965B70BF30E982368EDA1F8422A9C80C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 076B
Signing time: Tue 22 Apr 2025 03:00:37 +0000
Manifest this update: Tue 22 Apr 2025 03:00:37 +0000
Manifest next update: Wed 23 Apr 2025 03:00:37 +0000
Files and hashes: 1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: w32r3V0rR1DOGHD7GPYV6Zy/geKQNvLZlzSe5ms0WEI=)
2: F3ciK8Cs1X2iYdLyOuYTwjS5F9g.roa (hash: A16wEC2Kp22nG7pwFt2VgBVywuDsF1+tAv3rCz+vfPk=)
3: RqMgMpdcD54HUHiiovgo2_7eo94.roa (hash: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=)
4: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (hash: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=)
5: wdTC4RawEs-5fFZUa4R_HIRxO2U.roa (hash: Rtc4DEopTsErPd8Vo2cqobz/fHQCAfYf819UnyzhAlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:bf:30:e9:82:36:8e:da:1f:84:22:a9:c8:0c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Apr 22 03:00:37 2025 GMT
Not After : Apr 23 03:00:37 2025 GMT
Subject: CN=bed00ee25747090a9199e6ae73ea9c2011de3342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:15:fd:cd:b9:23:f4:1f:72:cc:ca:83:18:
f4:a5:e5:90:0e:93:2d:8a:01:a5:ae:cc:ac:98:b2:
6c:8d:1b:5d:95:fd:bc:88:27:84:d9:4e:fb:7c:eb:
03:cd:f2:2a:df:b6:01:c4:3b:90:71:97:e3:b4:b0:
d8:57:c2:70:68:6d:94:30:73:dc:cb:14:21:19:79:
00:8d:bc:72:f7:dd:46:9f:63:6b:59:87:af:91:d1:
96:82:dc:ec:a2:3c:23:43:95:50:03:66:d2:27:c2:
f9:ca:47:51:bb:b3:e7:cf:be:d7:cb:c6:6b:77:1a:
6b:e2:9d:82:9c:1d:cc:c8:99:27:8f:0b:c0:9b:27:
70:a7:ed:8a:cf:3e:2a:7b:54:48:1a:25:12:04:70:
ea:a5:da:79:57:80:78:20:33:4b:65:45:c1:20:8b:
be:03:b0:ec:85:ba:1b:bd:4a:90:56:21:72:97:65:
5b:e8:eb:ef:3c:e4:03:98:b1:95:c4:3b:dd:15:11:
6f:75:93:f1:c2:f9:8e:b1:c1:53:5b:c2:30:ed:74:
53:3d:9b:94:97:88:fc:4f:2e:5c:48:19:da:89:9a:
81:1a:10:30:12:5a:ad:4a:d7:92:f0:b3:c7:ea:52:
a2:a8:7c:ec:ca:cd:e5:44:7d:e7:6c:b9:80:04:49:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:0E:E2:57:47:09:0A:91:99:E6:AE:73:EA:9C:20:11:DE:33:42
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:9f:ba:32:66:82:fe:0f:07:42:98:2f:44:80:d9:66:8c:
39:9d:a5:a9:c2:04:b7:4c:8f:5c:16:b1:ae:dc:3a:8a:1d:c0:
e6:6c:62:ac:f3:ff:8f:24:bd:b0:7d:bf:db:89:94:0a:9d:84:
5d:60:49:5c:86:3a:98:32:45:96:ea:49:26:a1:d9:3b:3d:2d:
ee:4f:aa:b8:7e:3f:f9:4b:44:50:61:75:cc:f4:0e:cb:d9:48:
ec:4c:fe:4f:dc:b9:ac:26:4c:40:ef:07:c4:77:d7:78:41:ec:
33:7a:cc:ff:e6:07:b1:9c:b2:b2:37:86:23:47:b7:fc:65:d6:
ee:9a:9b:f4:a3:94:71:c7:42:52:d0:c7:6d:df:63:bb:70:24:
41:4c:7e:06:35:a7:6c:f0:b7:a8:ea:20:31:5d:ca:23:45:56:
e8:57:c4:26:37:7d:4e:93:1b:be:e8:80:23:20:9f:b3:89:87:
f4:9d:a1:f1:69:6e:ca:40:1e:e4:10:6e:8b:ab:ea:98:07:e0:
3a:4a:8b:eb:a4:27:94:14:38:00:90:8b:5a:7e:cb:4d:17:14:
11:9e:ec:52:6b:4e:f0:cd:f4:f5:1f:51:c9:a2:a4:52:14:b6:
ab:ba:93:db:c9:05:29:3d:5f:58:bf:ad:ef:7f:38:1a:d1:87:
2a:e3:d5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcL8w6YI2jtofhCKpyAxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx
OTUxYzIwHhcNMjUwNDIyMDMwMDM3WhcNMjUwNDIzMDMwMDM3WjAzMTEwLwYDVQQD
EyhiZWQwMGVlMjU3NDcwOTBhOTE5OWU2YWU3M2VhOWMyMDExZGUzMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SQV/c25I/QfcszKgxj0peWQDpMt
igGlrsysmLJsjRtdlf28iCeE2U77fOsDzfIq37YBxDuQcZfjtLDYV8JwaG2UMHPc
yxQhGXkAjbxy991Gn2NrWYevkdGWgtzsojwjQ5VQA2bSJ8L5ykdRu7Pnz77Xy8Zr
dxpr4p2CnB3MyJknjwvAmydwp+2Kzz4qe1RIGiUSBHDqpdp5V4B4IDNLZUXBIIu+
A7DshbobvUqQViFyl2Vb6OvvPOQDmLGVxDvdFRFvdZPxwvmOscFTW8Iw7XRTPZuU
l4j8Ty5cSBnaiZqBGhAwElqtSteS8LPH6lKiqHzsys3lRH3nbLmABEnskwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7QDuJXRwkKkZnmrnPqnCAR3jNCMB8GA1UdIwQY
MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct
YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3
LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlmfujJm
gv4PB0KYL0SA2WaMOZ2lqcIEt0yPXBaxrtw6ih3A5mxirPP/jyS9sH2/24mUCp2E
XWBJXIY6mDJFlupJJqHZOz0t7k+quH4/+UtEUGF1zPQOy9lI7Ez+T9y5rCZMQO8H
xHfXeEHsM3rM/+YHsZyysjeGI0e3/GXW7pqb9KOUccdCUtDHbd9ju3AkQUx+BjWn
bPC3qOogMV3KI0VW6FfEJjd9TpMbvuiAIyCfs4mH9J2h8WluykAe5BBui6vqmAfg
OkqL66QnlBQ4AJCLWn7LTRcUEZ7sUmtO8M309R9RyaKkUhS2q7qT28kFKT1fWL+t
7384GtGHKuPVNQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:23 2025 by rpki-client