Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: ogg4snTfNQS0LjIg56jkCyPpgVkSin7nhBFvmVUnrvg=
Subject key identifier: 87:DF:AC:B5:92:7B:63:DF:F0:B4:52:5A:BF:85:F7:4C:41:87:39:B2
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 01964F6D2B7CA60D03824F48D90D3901CA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 106A
Signing time: Sat 19 Apr 2025 19:01:16 +0000
Manifest this update: Sat 19 Apr 2025 19:01:16 +0000
Manifest next update: Sun 20 Apr 2025 19:01:16 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: MmC5We6Rg1IGZaVOfnkRIzlsjA/rulcxeGfYZQlCYCQ=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:2b:7c:a6:0d:03:82:4f:48:d9:0d:39:01:ca:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Apr 19 19:01:16 2025 GMT
Not After : Apr 20 19:01:16 2025 GMT
Subject: CN=87dfacb5927b63dff0b4525abf85f74c418739b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:eb:b7:74:38:93:5a:95:03:cb:62:a6:cc:
b8:df:0d:02:6e:51:ab:0c:b0:6b:97:31:7c:b0:aa:
27:7a:6c:da:96:88:c2:22:1d:0b:48:e3:14:d8:35:
ac:04:fb:4b:c5:c3:1e:8c:5b:27:e4:64:81:f5:09:
ba:46:10:4d:0f:32:c8:b9:79:28:c6:5e:fc:26:4c:
cc:f9:a5:22:c8:bb:73:34:12:20:23:b7:39:78:a9:
7a:aa:7e:34:ec:59:6f:41:af:23:4e:ab:ec:c7:7d:
6d:83:2e:f3:a2:0e:f0:1d:6c:6a:ec:e4:b4:e2:e4:
45:77:96:ef:ea:1b:90:f5:cd:b3:f6:a6:7a:49:7c:
53:a0:01:25:15:46:1d:56:c8:77:d1:b1:c4:61:c7:
7b:78:4c:b0:78:64:d7:83:58:1f:8b:09:d9:1d:e5:
89:0f:a7:32:8b:a3:cb:c6:a4:08:da:ff:7b:09:77:
c0:89:6c:dc:51:9c:c9:48:b9:20:30:a9:19:84:df:
2f:59:68:df:a0:2b:d2:8f:ea:31:f9:95:e1:98:a3:
ae:03:f9:86:23:d0:a4:24:b4:f8:28:51:cf:26:fa:
d7:ed:fc:82:f9:49:16:86:b0:30:ba:9f:33:69:8f:
63:90:c4:c3:bf:ca:6a:dc:e7:e9:d7:fd:a6:75:56:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:AC:B5:92:7B:63:DF:F0:B4:52:5A:BF:85:F7:4C:41:87:39:B2
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:74:2b:cc:c5:02:9b:8f:d9:68:1d:90:08:fb:23:48:5d:3f:
2d:31:01:22:45:1b:ca:45:c4:91:f4:ad:c7:eb:14:e4:8e:c1:
81:80:7a:47:18:e2:66:b9:26:87:bc:e8:ec:6e:f9:03:16:c7:
6a:ce:67:b9:25:40:e4:19:74:bb:c3:35:08:a7:45:10:ec:9f:
d3:85:87:b9:bc:f5:30:07:3c:92:34:71:77:31:a9:af:09:39:
19:d8:62:dc:77:ec:d9:4a:24:73:b0:6a:db:04:34:09:e3:38:
20:a4:50:b6:fb:d4:c6:c6:e7:f7:fe:91:6d:9b:1f:98:54:7f:
3e:50:ea:de:3a:68:4e:18:e9:30:83:2d:79:2e:2e:1d:7c:f7:
f0:82:29:ba:54:59:45:0f:bf:91:5e:71:18:a8:fe:00:31:2b:
a4:7e:11:ce:0f:6c:f7:d9:d1:98:ce:c7:04:65:5b:e0:dd:cc:
43:92:56:b1:35:c4:a2:bb:8b:a3:54:70:25:c6:18:c1:c9:de:
04:b4:12:36:dc:3f:b1:d9:fd:1a:33:aa:26:8a:06:83:e2:56:
8f:6f:65:eb:70:3e:c3:4b:8e:49:42:f7:ec:42:33:0d:79:29:
ff:8c:3c:7b:50:a0:e9:87:c6:ad:03:84:6d:03:f2:71:00:c8:
08:5d:3a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbSt8pg0Dgk9I2Q05AcpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDFmNTBkZjI2M2ZlNTA5ZmM1ZGU5YzVhNDczYTI4ZTM4
MTI2MzkwHhcNMjUwNDE5MTkwMTE2WhcNMjUwNDIwMTkwMTE2WjAzMTEwLwYDVQQD
Eyg4N2RmYWNiNTkyN2I2M2RmZjBiNDUyNWFiZjg1Zjc0YzQxODczOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZnrt3Q4k1qVA8tipsy43w0CblGr
DLBrlzF8sKonemzalojCIh0LSOMU2DWsBPtLxcMejFsn5GSB9Qm6RhBNDzLIuXko
xl78JkzM+aUiyLtzNBIgI7c5eKl6qn407FlvQa8jTqvsx31tgy7zog7wHWxq7OS0
4uRFd5bv6huQ9c2z9qZ6SXxToAElFUYdVsh30bHEYcd7eEyweGTXg1gfiwnZHeWJ
D6cyi6PLxqQI2v97CXfAiWzcUZzJSLkgMKkZhN8vWWjfoCvSj+ox+ZXhmKOuA/mG
I9CkJLT4KFHPJvrX7fyC+UkWhrAwup8zaY9jkMTDv8pq3Ofp1/2mdVbU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIffrLWSe2Pf8LRSWr+F90xBhzmyMB8GA1UdIwQY
MBaAFEvR9Q3yY/5Qn8XenFpHOijjgSY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUt
MmI2ODA5MzM5NzAyLzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUtMmI2ODA5MzM5NzAy
LzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHQrzMUC
m4/ZaB2QCPsjSF0/LTEBIkUbykXEkfStx+sU5I7BgYB6RxjiZrkmh7zo7G75AxbH
as5nuSVA5Bl0u8M1CKdFEOyf04WHubz1MAc8kjRxdzGprwk5Gdhi3Hfs2Uokc7Bq
2wQ0CeM4IKRQtvvUxsbn9/6RbZsfmFR/PlDq3jpoThjpMIMteS4uHXz38IIpulRZ
RQ+/kV5xGKj+ADErpH4Rzg9s99nRmM7HBGVb4N3MQ5JWsTXEoruLo1RwJcYYwcne
BLQSNtw/sdn9GjOqJooGg+JWj29l63A+w0uOSUL37EIzDXkp/4w8e1Cg6YfGrQOE
bQPycQDICF06QA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:18 2025 by rpki-client