Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: 3kBrm1XV13r5g5Py/r3FrUdEo9wKMm5KYqiqBoPy21k=
Subject key identifier: 4B:F7:A6:70:2B:2D:E4:23:25:0B:48:4E:D4:1C:C3:B1:3C:D7:FE:68
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 01958EBD5E0432851AA38390842DBB2DA640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 0CFF
Signing time: Thu 13 Mar 2025 09:02:09 +0000
Manifest this update: Thu 13 Mar 2025 09:02:09 +0000
Manifest next update: Fri 14 Mar 2025 09:02:09 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: fhjdJjS9g6nhSLpNnacGxNhAT4qoeVbPUpLQd2U6MKc=)
2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:5e:04:32:85:1a:a3:83:90:84:2d:bb:2d:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Mar 13 09:02:09 2025 GMT
Not After : Mar 14 09:02:09 2025 GMT
Subject: CN=4bf7a6702b2de423250b484ed41cc3b13cd7fe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:af:45:61:d3:20:d4:33:97:ed:4f:2b:a7:
4d:57:39:79:53:65:ba:fa:88:c1:00:4a:b9:eb:54:
5c:b5:d1:46:1a:e5:76:48:7f:83:4e:e0:5f:71:95:
a9:c2:c8:85:ac:ff:5a:61:67:cf:33:8c:f1:d2:47:
b1:6a:f8:f6:be:a7:9b:47:e6:1c:04:8f:51:36:81:
a3:60:35:f1:d2:90:91:09:31:6b:10:1c:e4:f1:08:
09:05:ad:ca:56:29:fb:e6:57:54:d8:8f:9c:99:e1:
a3:75:96:5c:22:c0:46:ea:d0:6a:33:80:6f:49:a2:
27:bd:7d:18:c2:70:db:60:61:3e:7a:0f:db:40:41:
31:14:79:a7:2a:0e:49:8a:a3:6f:d6:2a:d0:96:cb:
b0:60:04:43:b4:f6:4b:91:ad:c7:3d:be:40:2c:98:
fb:3a:a7:6f:45:3e:f8:47:32:ee:81:f7:71:d5:3d:
6b:7b:b5:95:be:d7:20:00:89:ec:8a:eb:d6:c9:ba:
00:38:d4:78:bf:c2:f5:b4:a5:26:9c:5a:10:b1:00:
6b:46:05:ef:1d:8d:c5:e5:2b:63:90:f7:3c:a5:23:
af:12:d2:2a:09:26:14:52:29:3b:86:74:ae:c6:27:
55:71:70:dc:3d:56:da:46:de:3f:48:1e:62:01:b8:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:A6:70:2B:2D:E4:23:25:0B:48:4E:D4:1C:C3:B1:3C:D7:FE:68
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:47:68:c1:42:88:99:cf:29:21:90:cc:e9:44:21:58:18:36:
9b:0e:c8:de:46:91:ae:d5:3b:ce:da:73:2e:b7:8b:aa:c7:6e:
8d:74:1e:62:c5:a8:50:a2:c0:10:03:50:b7:70:97:35:e7:9e:
c8:09:61:74:23:82:7a:78:46:24:3a:bb:14:f7:f6:d8:21:c0:
af:74:89:45:3c:d0:ba:e4:4d:77:be:15:b1:d2:97:af:08:98:
a1:91:c1:62:15:6f:29:ef:4f:ff:41:d0:99:22:26:52:cc:e5:
82:71:e3:b3:75:a5:f2:c0:32:d3:58:ef:fc:46:1d:09:fa:91:
6e:1c:a0:9f:c4:23:29:3f:d0:ae:82:44:e6:a1:2b:92:f6:7b:
7e:05:38:6c:1c:08:ab:9d:04:a0:78:e1:9b:17:eb:35:31:15:
f9:48:63:34:42:59:41:19:c8:be:c7:f0:29:ce:d5:4d:68:38:
b7:62:56:4a:f9:76:05:47:4a:0b:ce:92:2f:54:a6:11:df:65:
01:85:1d:08:59:95:2b:ea:9c:e7:52:71:c3:b6:97:db:1c:7c:
fa:ce:4e:e9:f0:9f:90:08:a6:ef:b5:03:54:9e:46:4d:1e:43:
8d:5a:7c:64:c8:1b:de:75:6a:d4:09:a6:a8:72:78:48:9c:24:
e5:b7:ee:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWOvV4EMoUao4OQhC27LaZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw
YjU0N2IwHhcNMjUwMzEzMDkwMjA5WhcNMjUwMzE0MDkwMjA5WjAzMTEwLwYDVQQD
Eyg0YmY3YTY3MDJiMmRlNDIzMjUwYjQ4NGVkNDFjYzNiMTNjZDdmZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC+vRWHTINQzl+1PK6dNVzl5U2W6
+ojBAEq561RctdFGGuV2SH+DTuBfcZWpwsiFrP9aYWfPM4zx0kexavj2vqebR+Yc
BI9RNoGjYDXx0pCRCTFrEBzk8QgJBa3KVin75ldU2I+cmeGjdZZcIsBG6tBqM4Bv
SaInvX0YwnDbYGE+eg/bQEExFHmnKg5JiqNv1irQlsuwYARDtPZLka3HPb5ALJj7
OqdvRT74RzLugfdx1T1re7WVvtcgAInsiuvWyboAONR4v8L1tKUmnFoQsQBrRgXv
HY3F5StjkPc8pSOvEtIqCSYUUik7hnSuxidVcXDcPVbaRt4/SB5iAbiePwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv3pnArLeQjJQtITtQcw7E81/5oMB8GA1UdIwQY
MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt
ODE2NzRkOTUzZDU2LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2
LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEdowUKI
mc8pIZDM6UQhWBg2mw7I3kaRrtU7ztpzLreLqsdujXQeYsWoUKLAEANQt3CXNeee
yAlhdCOCenhGJDq7FPf22CHAr3SJRTzQuuRNd74VsdKXrwiYoZHBYhVvKe9P/0HQ
mSImUszlgnHjs3Wl8sAy01jv/EYdCfqRbhygn8QjKT/QroJE5qErkvZ7fgU4bBwI
q50EoHjhmxfrNTEV+UhjNEJZQRnIvsfwKc7VTWg4t2JWSvl2BUdKC86SL1SmEd9l
AYUdCFmVK+qc51Jxw7aX2xx8+s5O6fCfkAim77UDVJ5GTR5DjVp8ZMgb3nVq1Amm
qHJ4SJwk5bfuJg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:57 2025 by rpki-client