Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: z7RT0A/6aOWACrebk2ZzvaT79EIKevwXh+hQ8u5AtG8=
Subject key identifier: 9F:8B:96:1C:8D:92:1D:51:1F:0F:88:64:D1:AF:2F:E7:8D:5D:2F:3A
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 01958B4DC6409DA69F36E73E847172EFED6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 0FE9
Signing time: Wed 12 Mar 2025 17:01:24 +0000
Manifest this update: Wed 12 Mar 2025 17:01:24 +0000
Manifest next update: Thu 13 Mar 2025 17:01:24 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: ZVVM/hMI9sEpHDmVMknxliG/zesUbM1XqdA87geWXTc=)
2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:c6:40:9d:a6:9f:36:e7:3e:84:71:72:ef:ed:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Mar 12 17:01:24 2025 GMT
Not After : Mar 13 17:01:24 2025 GMT
Subject: CN=9f8b961c8d921d511f0f8864d1af2fe78d5d2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:c1:bb:76:54:40:50:db:37:ee:2f:38:8e:
2d:7e:39:f3:e6:c8:96:f4:86:01:d7:fa:d3:36:38:
0d:be:5f:00:d9:61:cb:08:2e:a4:f1:db:b7:f5:12:
c5:11:9b:be:2b:20:50:13:07:c5:03:9a:97:bb:85:
4b:1e:4d:9e:42:87:e1:99:66:a7:05:7f:fa:ef:4b:
3c:47:74:f8:9b:06:dd:43:d6:f1:88:31:94:9a:b3:
98:63:e3:f3:c8:87:b2:08:f4:34:a2:92:61:16:c9:
3a:6a:4d:95:26:15:33:e5:eb:49:0f:e5:04:e4:aa:
5a:da:d9:04:4d:53:82:b8:dd:c7:11:23:60:a6:23:
6c:0a:80:a3:42:6f:fc:b5:b0:a0:48:d5:07:bd:a6:
f0:a7:f1:83:da:d0:e1:9a:bf:de:f8:94:e3:27:d8:
68:24:dd:da:d2:a2:07:01:af:89:13:98:98:d2:4d:
ea:b6:70:8f:59:1a:92:55:e4:93:df:55:2e:4f:7e:
f3:ed:ef:49:e7:5f:2f:65:cc:dd:93:fa:58:9d:87:
a6:03:7a:76:76:54:9e:0f:98:5f:14:e3:47:fc:9b:
fe:02:c6:1c:7d:c8:c7:58:1e:f1:fd:60:08:be:ca:
f9:41:16:13:75:65:9b:ef:31:84:c4:1d:cc:9c:21:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:96:1C:8D:92:1D:51:1F:0F:88:64:D1:AF:2F:E7:8D:5D:2F:3A
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:96:14:48:b0:35:19:be:2b:3a:76:67:98:cc:e1:98:1a:da:
cb:78:d4:c9:18:d4:f8:d2:34:9a:3f:95:a2:4f:0f:79:88:ab:
ee:86:9f:07:bd:8e:ab:c0:9a:23:d9:ba:92:20:46:5f:88:81:
c8:db:fe:4a:e1:18:d2:94:e6:98:7c:c7:aa:71:b8:4a:dd:d9:
6c:e4:ad:c1:3a:36:de:3d:20:b8:be:a9:f1:2f:47:ba:bf:de:
57:08:bb:55:cd:84:56:a1:4c:c9:5e:cf:5f:50:94:30:be:a0:
7a:53:20:52:24:ab:9b:c7:45:32:6d:4c:b9:85:42:d3:a4:e5:
82:0c:2c:8d:d4:60:91:60:36:a9:8b:49:00:92:fc:5f:24:4f:
f3:bc:a9:66:03:16:01:6c:d7:27:f3:cb:41:26:f0:a1:d2:b3:
c7:b3:2c:35:17:eb:e0:6b:f2:5d:2d:94:cb:15:6b:3e:26:72:
38:fd:97:c6:93:5d:bb:74:d9:08:ad:28:66:3d:2f:c8:b8:06:
52:60:27:f6:10:28:c8:bd:b7:10:3c:10:5b:6a:41:53:31:81:
d5:87:9c:8e:7d:3f:68:62:f7:2b:e3:68:56:de:f2:da:90:47:
93:c5:ef:88:1c:52:e7:ed:5e:04:7a:30:ce:a6:7d:0c:31:21:
95:7b:17:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTcZAnaafNuc+hHFy7+1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj
NTNiMDUwHhcNMjUwMzEyMTcwMTI0WhcNMjUwMzEzMTcwMTI0WjAzMTEwLwYDVQQD
Eyg5ZjhiOTYxYzhkOTIxZDUxMWYwZjg4NjRkMWFmMmZlNzhkNWQyZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0jBu3ZUQFDbN+4vOI4tfjnz5siW
9IYB1/rTNjgNvl8A2WHLCC6k8du39RLFEZu+KyBQEwfFA5qXu4VLHk2eQofhmWan
BX/670s8R3T4mwbdQ9bxiDGUmrOYY+PzyIeyCPQ0opJhFsk6ak2VJhUz5etJD+UE
5Kpa2tkETVOCuN3HESNgpiNsCoCjQm/8tbCgSNUHvabwp/GD2tDhmr/e+JTjJ9ho
JN3a0qIHAa+JE5iY0k3qtnCPWRqSVeST31UuT37z7e9J518vZczdk/pYnYemA3p2
dlSeD5hfFONH/Jv+AsYcfcjHWB7x/WAIvsr5QRYTdWWb7zGExB3MnCEDLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+LlhyNkh1RHw+IZNGvL+eNXS86MB8GA1UdIwQY
MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt
NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy
LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5YUSLA1
Gb4rOnZnmMzhmBray3jUyRjU+NI0mj+Vok8PeYir7oafB72Oq8CaI9m6kiBGX4iB
yNv+SuEY0pTmmHzHqnG4St3ZbOStwTo23j0guL6p8S9Hur/eVwi7Vc2EVqFMyV7P
X1CUML6gelMgUiSrm8dFMm1MuYVC06TlggwsjdRgkWA2qYtJAJL8XyRP87ypZgMW
AWzXJ/PLQSbwodKzx7MsNRfr4GvyXS2UyxVrPiZyOP2XxpNdu3TZCK0oZj0vyLgG
UmAn9hAoyL23EDwQW2pBUzGB1Yecjn0/aGL3K+NoVt7y2pBHk8XviBxS5+1eBHow
zqZ9DDEhlXsXKw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:14 2025 by rpki-client