Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
File: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft (raw, json)
Hash identifier: zqqILT4aIEblC9r3Olakr6NzipkNcO55ofwLv97LgVQ=
Subject key identifier: DB:28:6D:E6:BA:25:7E:CF:4C:6A:96:AB:1E:F6:6F:D8:E8:83:97:74
Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Certificate issuer: /CN=73d31367608564d8783bb242486e93d6506e7f95
Certificate serial: 019653EE6393E025F67D0E59841D82EBCE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 16:00:54 +0000
Manifest this update: Sun 20 Apr 2025 16:00:54 +0000
Manifest next update: Mon 21 Apr 2025 16:00:54 +0000
Files and hashes: 1: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl (hash: eJq102c83lXALSZj/RrUJwD0FydW7czaQCkSXYvLssg=)
2: sSpU4OsJ0JP6v-KsLTWyn3wkgzU.roa (hash: P3OhH37SSr0XKA5lxGstCRgs9hYtzQO/7M2sPZjPsUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:63:93:e0:25:f6:7d:0e:59:84:1d:82:eb:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95
Validity
Not Before: Apr 20 16:00:54 2025 GMT
Not After : Apr 21 16:00:54 2025 GMT
Subject: CN=db286de6ba257ecf4c6a96ab1ef66fd8e8839774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:85:9f:3d:8a:2f:2e:85:f9:d7:61:b9:7f:
5c:f8:75:8f:51:65:4d:17:8d:42:b5:87:4c:8c:6b:
d1:ad:14:97:0f:64:a5:cd:87:91:84:43:e2:81:50:
33:ba:5c:d0:94:8d:07:42:f5:59:06:b6:d4:a6:bc:
2b:96:42:02:1e:29:93:fe:97:51:ed:08:aa:45:2a:
6d:88:06:12:ef:13:19:c1:57:02:9c:61:58:8a:93:
a3:5e:93:61:78:4c:9f:5c:f7:e9:e3:12:d9:13:d0:
68:4b:f6:91:1f:3f:72:15:35:42:b8:d3:29:2b:0b:
58:34:7e:0b:13:1e:f1:2d:69:28:c8:78:b7:ef:63:
2d:27:01:03:7e:6b:e5:92:a3:4a:31:7a:5a:39:4b:
7c:ce:e4:6c:e6:c0:0f:1c:74:92:63:d6:0d:de:47:
60:f5:83:2d:44:3f:7d:91:78:d3:dc:7c:e4:90:84:
99:0b:80:ac:2e:e1:5a:7a:72:59:55:80:bb:1a:86:
b9:20:d6:55:5b:d2:35:63:38:84:68:86:94:0d:6d:
4d:58:4e:2a:e9:4a:92:7c:fb:ac:0b:a9:3c:61:7f:
be:59:06:09:12:c7:64:25:2c:c6:ab:ef:1f:51:3e:
63:76:6c:a3:25:69:7a:91:ef:20:e8:00:97:f5:ef:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:6D:E6:BA:25:7E:CF:4C:6A:96:AB:1E:F6:6F:D8:E8:83:97:74
X509v3 Authority Key Identifier:
keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:24:02:4b:88:f8:90:f6:55:54:e4:cf:58:20:d8:ff:82:01:
9f:78:53:64:84:08:a9:df:3e:b0:9b:27:c2:32:12:ab:15:8c:
1d:67:c6:32:22:01:cf:2d:63:76:3c:0b:82:b7:87:b3:4c:9c:
b6:fe:7d:d6:fe:44:bb:e2:65:be:83:82:98:3e:35:48:ce:c0:
b5:86:a6:36:70:e1:4a:b2:4a:b2:e2:b4:b8:18:c0:ee:74:17:
7c:2b:85:6d:a7:cd:4b:d8:0e:ee:5e:05:f0:9d:71:b8:0c:1a:
90:01:57:b3:71:99:bd:a9:4b:70:d4:f4:44:fe:fe:5a:e1:d5:
2f:20:ad:bf:39:27:fa:72:51:1b:01:22:75:e0:bd:0e:4b:36:
52:8a:5b:2f:25:cc:3b:2a:58:df:72:5d:9b:f2:8c:14:07:68:
41:24:17:c7:1d:f7:eb:cb:c1:a2:f5:d2:25:62:56:47:21:bc:
64:7f:d1:45:c9:62:35:7b:9c:3d:34:21:a3:0a:11:6e:ef:21:
88:a4:8f:50:c9:7e:fa:09:49:29:2a:3a:c6:7c:9d:9a:c2:b8:
a9:a3:bb:2b:68:18:df:e3:ae:07:e0:88:cf:4d:10:16:d3:15:
bd:8c:31:9f:dc:47:8b:96:02:52:e7:87:54:0f:75:39:aa:de:
6b:5b:41:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7mOT4CX2fQ5ZhB2C685tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDMxMzY3NjA4NTY0ZDg3ODNiYjI0MjQ4NmU5M2Q2NTA2
ZTdmOTUwHhcNMjUwNDIwMTYwMDU0WhcNMjUwNDIxMTYwMDU0WjAzMTEwLwYDVQQD
EyhkYjI4NmRlNmJhMjU3ZWNmNGM2YTk2YWIxZWY2NmZkOGU4ODM5Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKeFnz2KLy6F+ddhuX9c+HWPUWVN
F41CtYdMjGvRrRSXD2SlzYeRhEPigVAzulzQlI0HQvVZBrbUprwrlkICHimT/pdR
7QiqRSptiAYS7xMZwVcCnGFYipOjXpNheEyfXPfp4xLZE9BoS/aRHz9yFTVCuNMp
KwtYNH4LEx7xLWkoyHi372MtJwEDfmvlkqNKMXpaOUt8zuRs5sAPHHSSY9YN3kdg
9YMtRD99kXjT3HzkkISZC4CsLuFaenJZVYC7Goa5INZVW9I1YziEaIaUDW1NWE4q
6UqSfPusC6k8YX++WQYJEsdkJSzGq+8fUT5jdmyjJWl6ke8g6ACX9e8kCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsobea6JX7PTGqWqx72b9jog5d0MB8GA1UdIwQY
MBaAFHPTE2dghWTYeDuyQkhuk9ZQbn+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wMmU0MTktZGQ4My00MDBiLWIxMTQt
MDJjNTAwOGJjYzA5LzEvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wMmU0MTktZGQ4My00MDBiLWIxMTQtMDJjNTAwOGJjYzA5
LzEvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyQCS4j4
kPZVVOTPWCDY/4IBn3hTZIQIqd8+sJsnwjISqxWMHWfGMiIBzy1jdjwLgreHs0yc
tv591v5Eu+JlvoOCmD41SM7AtYamNnDhSrJKsuK0uBjA7nQXfCuFbafNS9gO7l4F
8J1xuAwakAFXs3GZvalLcNT0RP7+WuHVLyCtvzkn+nJRGwEideC9Dks2UopbLyXM
OypY33Jdm/KMFAdoQSQXxx3368vBovXSJWJWRyG8ZH/RRcliNXucPTQhowoRbu8h
iKSPUMl++glJKSo6xnydmsK4qaO7K2gY3+OuB+CIz00QFtMVvYwxn9xHi5YCUueH
VA91Oarea1tB8w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:38 2025 by rpki-client