Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: aaeltMqMWH3JJJDdnD/hCxtiP2dlkDPB73twkeM9RAU=
Subject key identifier: 6E:AA:30:66:BA:55:01:68:1F:77:77:32:E7:D0:06:57:B7:A9:4A:24
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 01963BE5FB2187EA0F2D9FC90EB15777E7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 12F4
Signing time: Wed 16 Apr 2025 00:00:49 +0000
Manifest this update: Wed 16 Apr 2025 00:00:49 +0000
Manifest next update: Thu 17 Apr 2025 00:00:49 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: JRZF0CTJcIlIAf2HIECImovPnkLrmL2LSccQdcWnGg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:fb:21:87:ea:0f:2d:9f:c9:0e:b1:57:77:e7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Apr 16 00:00:49 2025 GMT
Not After : Apr 17 00:00:49 2025 GMT
Subject: CN=6eaa3066ba5501681f777732e7d00657b7a94a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:82:bc:15:8a:76:9e:ea:c8:9f:00:8a:21:
fb:44:f7:d5:c8:de:e4:c2:98:bc:a5:bf:5a:23:05:
47:ae:1a:49:fc:86:6f:53:41:e9:52:ab:c1:90:8d:
5f:cd:0e:f7:1a:01:ef:6e:1b:ec:18:da:04:84:53:
c0:45:1b:de:25:cb:0d:d5:b1:18:b3:d7:52:b6:34:
f2:35:4c:f6:b3:6a:23:4f:be:7e:81:fc:00:75:ad:
ba:13:66:5b:f2:d5:ab:a5:3a:f8:89:d6:0a:b0:37:
12:31:dd:8f:0e:0e:e5:4b:f1:79:d1:3b:e9:cb:51:
7b:82:8c:be:b2:14:24:88:51:8f:c5:ef:59:81:05:
6e:eb:09:cb:b5:b5:e9:36:7e:37:e8:6d:a5:4d:9f:
16:5e:37:00:c5:fb:ca:7b:2e:d9:64:47:3b:10:b1:
96:e7:86:16:bc:e3:d2:a8:7d:76:fa:d5:a5:c5:5c:
11:ce:1c:07:42:c1:b6:f0:eb:72:3f:22:57:25:ec:
a5:41:6e:08:24:d9:64:07:03:f2:85:23:65:2b:f0:
31:fd:d8:bd:18:72:9f:02:4b:75:fa:34:c1:28:75:
90:30:3d:c1:54:47:2b:e6:20:d8:12:da:00:13:51:
f4:7a:d1:21:b1:f1:3b:6a:58:1f:77:7e:b8:c4:27:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:30:66:BA:55:01:68:1F:77:77:32:E7:D0:06:57:B7:A9:4A:24
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:14:03:e5:95:4d:4b:30:a6:67:ed:ae:f4:3f:9d:a1:16:d1:
6c:48:a7:c5:df:46:c4:15:c1:5b:ad:c4:0a:57:78:7d:73:0d:
76:fb:c8:5a:be:0c:75:d4:ff:16:c3:d8:47:74:6c:e2:5b:cc:
55:88:66:ef:c2:cf:d7:2a:14:49:fd:c0:84:d8:13:57:98:d5:
95:df:b1:aa:6a:ab:9b:bf:ef:f0:76:c2:c4:a6:37:5b:e1:1d:
05:ed:fc:93:39:de:a7:49:af:0e:68:c8:4d:11:71:f0:d1:47:
1f:82:c5:6a:81:10:64:a1:11:87:ca:6b:e6:78:fb:51:f2:6c:
0a:61:ea:5b:6c:f2:ba:97:6f:6c:b2:0c:d6:ac:44:1b:77:b9:
d3:6c:88:cb:e8:c0:85:3d:9f:03:bf:b0:bf:7f:d8:0e:eb:ae:
95:d0:ee:6b:20:24:54:ca:3d:15:f7:9c:73:21:54:d1:4c:8f:
39:32:f0:49:ff:a8:79:83:a2:0d:8f:7d:6c:dd:85:e0:28:aa:
fd:92:36:bc:97:34:50:45:96:85:d0:d4:96:e7:26:f8:ab:32:
26:75:06:a1:d2:8c:78:45:00:6c:7d:5b:5a:9b:8d:a4:32:c1:
53:09:7f:b3:24:d7:5f:64:50:63:a1:0b:1e:f5:73:98:03:e7:
7e:a8:56:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY75fshh+oPLZ/JDrFXd+fDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDkxNDYyYzRkYzFkZjZhOGEzYTk3YTFhZWU1N2EwY2Mx
NGVmYmEwHhcNMjUwNDE2MDAwMDQ5WhcNMjUwNDE3MDAwMDQ5WjAzMTEwLwYDVQQD
Eyg2ZWFhMzA2NmJhNTUwMTY4MWY3Nzc3MzJlN2QwMDY1N2I3YTk0YTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGiCvBWKdp7qyJ8AiiH7RPfVyN7k
wpi8pb9aIwVHrhpJ/IZvU0HpUqvBkI1fzQ73GgHvbhvsGNoEhFPARRveJcsN1bEY
s9dStjTyNUz2s2ojT75+gfwAda26E2Zb8tWrpTr4idYKsDcSMd2PDg7lS/F50Tvp
y1F7goy+shQkiFGPxe9ZgQVu6wnLtbXpNn436G2lTZ8WXjcAxfvKey7ZZEc7ELGW
54YWvOPSqH12+tWlxVwRzhwHQsG28OtyPyJXJeylQW4IJNlkBwPyhSNlK/Ax/di9
GHKfAkt1+jTBKHWQMD3BVEcr5iDYEtoAE1H0etEhsfE7algfd364xCeSEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6qMGa6VQFoH3d3MufQBle3qUokMB8GA1UdIwQY
MBaAFMfZFGLE3B32qKOpehruV6DMFO+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzIt
MzQ5N2Y3ZTJkZTYyLzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzItMzQ5N2Y3ZTJkZTYy
LzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxQD5ZVN
SzCmZ+2u9D+doRbRbEinxd9GxBXBW63ECld4fXMNdvvIWr4MddT/FsPYR3Rs4lvM
VYhm78LP1yoUSf3AhNgTV5jVld+xqmqrm7/v8HbCxKY3W+EdBe38kznep0mvDmjI
TRFx8NFHH4LFaoEQZKERh8pr5nj7UfJsCmHqW2zyupdvbLIM1qxEG3e502yIy+jA
hT2fA7+wv3/YDuuuldDuayAkVMo9FfeccyFU0UyPOTLwSf+oeYOiDY99bN2F4Ciq
/ZI2vJc0UEWWhdDUlucm+KsyJnUGodKMeEUAbH1bWpuNpDLBUwl/syTXX2RQY6EL
HvVzmAPnfqhWfw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:19:40 2025 by rpki-client