Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: wiGVwjK1EWYUO5XyFFmUWshCGexnQ4Vsf1maVzur+4g=
Subject key identifier: AA:36:8D:B8:73:EF:09:F8:47:12:A3:93:C3:8B:2E:DE:AC:45:C8:B0
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 019655DCB23B78CCF91BD19325644BB312AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 01:00:48 +0000
Manifest this update: Mon 21 Apr 2025 01:00:48 +0000
Manifest next update: Tue 22 Apr 2025 01:00:48 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: ix/ZFyBdGsgU5s/iLZ2XGhuEwkF5rvMmiDDCLwg1YPg=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:b2:3b:78:cc:f9:1b:d1:93:25:64:4b:b3:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Apr 21 01:00:48 2025 GMT
Not After : Apr 22 01:00:48 2025 GMT
Subject: CN=aa368db873ef09f84712a393c38b2edeac45c8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:84:52:ac:8f:a5:be:33:f9:77:9b:dd:35:
9c:e9:7b:fb:9d:ba:50:3a:b9:03:be:08:38:d8:7e:
c4:36:b4:ca:0e:a4:98:66:65:9c:50:4e:0b:fc:29:
e9:ef:ae:51:2f:ec:3e:fd:b4:4a:ad:ef:82:76:56:
78:09:05:6c:75:24:2d:dd:d0:6a:90:da:c0:06:95:
b5:8a:da:39:0f:1b:5e:76:95:25:d4:d4:25:f2:46:
e7:40:1c:42:5c:39:ad:c5:e9:af:1e:80:90:d5:fc:
1d:15:15:ec:5e:d4:cb:35:90:29:cb:3c:f7:22:05:
53:68:4b:13:0a:75:60:ec:69:07:b8:57:69:c2:d0:
34:a7:15:79:a7:27:72:d0:8e:e3:ee:13:61:e6:f8:
95:dc:cc:94:e3:fb:34:fc:e4:fa:f2:56:b6:6b:f8:
c7:83:4e:1d:6f:d0:3e:eb:a0:c0:9b:88:7f:50:96:
4f:24:f6:1e:25:bc:4d:92:98:02:37:15:27:da:da:
23:cb:ea:3c:bd:74:de:27:35:57:f5:c0:97:eb:3f:
7b:a2:05:f5:3f:48:f8:82:59:9a:d8:77:82:1c:25:
d5:7e:78:c5:67:82:25:20:af:b5:0c:5a:e2:4b:94:
bd:b5:b1:2d:12:f5:0a:f2:46:61:49:0c:c3:a0:ba:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:8D:B8:73:EF:09:F8:47:12:A3:93:C3:8B:2E:DE:AC:45:C8:B0
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:f8:65:90:7e:04:b8:bc:5c:95:6f:18:4a:84:f1:2c:ed:
ee:0f:d7:19:4d:0c:cc:2e:ec:28:b8:25:24:2b:e1:e9:8b:6e:
08:e5:73:2b:4f:8d:21:40:9f:9e:d8:c1:69:67:86:97:3d:dd:
1e:ec:29:79:68:b7:c4:cb:e1:9b:b2:ab:f5:2a:01:de:53:19:
60:5d:e5:c8:cc:e3:a8:ce:db:92:ec:50:69:fa:34:8a:27:3e:
08:00:48:68:43:fd:2f:6d:aa:8f:9c:f4:93:9d:4d:22:1d:25:
aa:69:f5:59:5d:4f:95:27:d0:d8:e2:f0:c0:dd:ad:7c:3a:db:
c2:05:e7:05:01:18:23:72:29:c6:f6:28:43:36:bb:1c:b2:ae:
6c:e9:74:0a:a9:a0:35:01:4e:97:5d:ca:ac:a2:ab:83:4c:55:
e0:0c:83:8d:ac:66:32:a2:37:ff:2e:3b:2e:e2:62:00:01:96:
a3:5e:8a:76:93:5f:04:81:b3:fc:b6:6e:98:88:03:a9:98:00:
3c:74:af:47:f5:d0:11:0a:c1:06:2f:d5:ea:a3:be:71:d4:d4:
4c:48:27:56:c7:b3:a1:ca:96:76:fd:d8:1a:4c:ec:9d:21:a1:
54:a0:ef:dc:91:a0:6b:0a:1c:2a:2d:4e:38:1b:60:a1:50:b0:
1f:d0:52:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3LI7eMz5G9GTJWRLsxKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGUyMjViZmI0NTIxOGI5OTc3MTk4MDRlYTI4N2YxNzUx
Y2YyMGUwHhcNMjUwNDIxMDEwMDQ4WhcNMjUwNDIyMDEwMDQ4WjAzMTEwLwYDVQQD
EyhhYTM2OGRiODczZWYwOWY4NDcxMmEzOTNjMzhiMmVkZWFjNDVjOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cCEUqyPpb4z+Xeb3TWc6Xv7nbpQ
OrkDvgg42H7ENrTKDqSYZmWcUE4L/Cnp765RL+w+/bRKre+CdlZ4CQVsdSQt3dBq
kNrABpW1ito5DxtedpUl1NQl8kbnQBxCXDmtxemvHoCQ1fwdFRXsXtTLNZApyzz3
IgVTaEsTCnVg7GkHuFdpwtA0pxV5pydy0I7j7hNh5viV3MyU4/s0/OT68la2a/jH
g04db9A+66DAm4h/UJZPJPYeJbxNkpgCNxUn2tojy+o8vXTeJzVX9cCX6z97ogX1
P0j4glma2HeCHCXVfnjFZ4IlIK+1DFriS5S9tbEtEvUK8kZhSQzDoLrQvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo2jbhz7wn4RxKjk8OLLt6sRciwMB8GA1UdIwQY
MBaAFPUOIlv7RSGLmXcZgE6ih/F1HPIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUt
NDQ2MmExMjZkMDdkLzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUtNDQ2MmExMjZkMDdk
LzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOT4ZZB+
BLi8XJVvGEqE8Szt7g/XGU0MzC7sKLglJCvh6YtuCOVzK0+NIUCfntjBaWeGlz3d
HuwpeWi3xMvhm7Kr9SoB3lMZYF3lyMzjqM7bkuxQafo0iic+CABIaEP9L22qj5z0
k51NIh0lqmn1WV1PlSfQ2OLwwN2tfDrbwgXnBQEYI3IpxvYoQza7HLKubOl0Cqmg
NQFOl13KrKKrg0xV4AyDjaxmMqI3/y47LuJiAAGWo16KdpNfBIGz/LZumIgDqZgA
PHSvR/XQEQrBBi/V6qO+cdTUTEgnVsezocqWdv3YGkzsnSGhVKDv3JGgawocKi1O
OBtgoVCwH9BS9w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:47:10 2025 by rpki-client