Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier: L3q10OfGIB5NPyawZFgeNNA0SlDojiUFqaSpIXvCPig=
Subject key identifier: 06:62:36:3B:7F:76:A5:BB:7E:74:B8:87:5E:B7:9B:92:4E:3A:C8:BE
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial: 01964B588D047F36670D5FC4011CD5BDBBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 00:00:16 +0000
Manifest this update: Sat 19 Apr 2025 00:00:16 +0000
Manifest next update: Sun 20 Apr 2025 00:00:16 +0000
Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: 8hODHMK80Ed/xz5RbrlDkP2mqaYt2GBGkfwDESUbv0g=)
2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:8d:04:7f:36:67:0d:5f:c4:01:1c:d5:bd:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Validity
Not Before: Apr 19 00:00:16 2025 GMT
Not After : Apr 20 00:00:16 2025 GMT
Subject: CN=0662363b7f76a5bb7e74b8875eb79b924e3ac8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a3:4d:06:b0:66:a1:73:89:5c:71:c4:30:96:
b6:35:36:a0:71:f8:63:e8:fe:d2:bd:c8:91:cf:0e:
1e:dc:03:58:a7:a6:b8:00:2f:c4:1d:bf:a4:15:11:
92:8d:b9:e4:8e:f1:78:cc:6e:dc:3b:76:ef:54:a7:
19:b0:2f:e3:be:7c:ed:3d:ae:cf:31:78:ac:c2:c5:
69:b7:40:24:01:1d:a3:1b:d2:57:fe:e6:50:f8:a6:
2f:ba:06:5b:c7:8a:c4:f4:a1:e5:f1:17:d9:78:37:
52:ab:98:7b:4d:78:9c:f9:ef:c5:b5:46:99:26:28:
0b:29:d1:b9:f3:ff:09:3f:aa:ef:65:5d:58:5b:7c:
5a:44:d2:30:87:e0:7b:f7:57:46:32:1b:da:8b:dc:
b5:b3:94:28:12:20:3b:44:8b:45:f0:c9:7a:08:e3:
57:04:0b:1e:a9:07:13:a4:6a:87:6a:89:42:7d:15:
e4:a7:de:ff:ba:ba:c7:3e:04:ff:08:2f:e3:a6:25:
18:bd:de:dc:46:12:54:37:78:49:fc:13:93:af:51:
12:7f:2a:76:7f:ea:bd:3e:d2:2d:dc:2b:37:4d:97:
0d:72:ae:16:a5:b3:86:2d:af:3f:45:2d:8b:f5:2c:
d1:70:17:88:9f:4d:d0:94:fa:91:dc:8d:80:f9:2a:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:62:36:3B:7F:76:A5:BB:7E:74:B8:87:5E:B7:9B:92:4E:3A:C8:BE
X509v3 Authority Key Identifier:
keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d1:4c:c3:10:09:b6:e5:d3:86:51:18:1e:66:ba:8f:e9:09:
13:31:ad:17:47:29:3e:c9:08:d2:89:73:5c:5e:9c:a7:01:f8:
df:fe:04:6e:75:9f:b9:0f:1a:8c:5e:62:92:53:7a:02:61:a6:
c0:d0:a2:ab:4f:e9:60:cb:6d:47:50:a9:dc:f3:0b:14:30:7b:
3e:2e:d8:f6:f0:71:13:c2:91:56:7c:6e:d0:d2:26:7c:c4:ad:
bd:29:d4:10:43:4e:bf:90:06:65:75:b8:bc:b3:f4:30:9d:6b:
ff:b6:89:2a:5e:44:53:f7:6d:89:9a:c6:b4:71:bb:e1:8d:f6:
2e:db:ae:dd:89:0b:84:cb:86:80:86:55:47:aa:41:5a:89:9e:
0e:e4:51:78:c9:4e:bf:ed:35:6d:a3:62:bf:ee:d7:0c:81:2d:
35:9c:1e:e9:88:13:76:20:db:d6:2c:ac:09:c0:45:c1:38:19:
25:0b:84:c2:c2:56:2e:92:f7:56:53:88:d3:17:cd:39:83:35:
0a:42:52:d8:09:78:b8:67:a4:2a:b4:13:51:f3:7f:87:23:ed:
92:7e:f0:0a:c9:61:7a:99:d1:31:65:27:75:bc:96:59:8b:04:
f4:8e:76:b1:de:44:ce:02:57:63:cb:ad:94:cf:f8:3e:76:dc:
f5:d9:f8:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLWI0EfzZnDV/EARzVvbvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDQxMjk1M2FjMDZhN2M1MmNiMjY3OTZmODgwNmIxYmI4
NTk2MTcwHhcNMjUwNDE5MDAwMDE2WhcNMjUwNDIwMDAwMDE2WjAzMTEwLwYDVQQD
EygwNjYyMzYzYjdmNzZhNWJiN2U3NGI4ODc1ZWI3OWI5MjRlM2FjOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aNNBrBmoXOJXHHEMJa2NTagcfhj
6P7SvciRzw4e3ANYp6a4AC/EHb+kFRGSjbnkjvF4zG7cO3bvVKcZsC/jvnztPa7P
MXiswsVpt0AkAR2jG9JX/uZQ+KYvugZbx4rE9KHl8RfZeDdSq5h7TXic+e/FtUaZ
JigLKdG58/8JP6rvZV1YW3xaRNIwh+B791dGMhvai9y1s5QoEiA7RItF8Ml6CONX
BAseqQcTpGqHaolCfRXkp97/urrHPgT/CC/jpiUYvd7cRhJUN3hJ/BOTr1ESfyp2
f+q9PtIt3Cs3TZcNcq4WpbOGLa8/RS2L9SzRcBeIn03QlPqR3I2A+SpMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZiNjt/dqW7fnS4h163m5JOOsi+MB8GA1UdIwQY
MBaAFPXUEpU6wGp8UssmeW+IBrG7hZYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEt
NzlkNTJkYzY2OTI2LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEtNzlkNTJkYzY2OTI2
LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtFMwxAJ
tuXThlEYHma6j+kJEzGtF0cpPskI0olzXF6cpwH43/4EbnWfuQ8ajF5iklN6AmGm
wNCiq0/pYMttR1Cp3PMLFDB7Pi7Y9vBxE8KRVnxu0NImfMStvSnUEENOv5AGZXW4
vLP0MJ1r/7aJKl5EU/dtiZrGtHG74Y32Ltuu3YkLhMuGgIZVR6pBWomeDuRReMlO
v+01baNiv+7XDIEtNZwe6YgTdiDb1iysCcBFwTgZJQuEwsJWLpL3VlOI0xfNOYM1
CkJS2Al4uGekKrQTUfN/hyPtkn7wCslhepnRMWUndbyWWYsE9I52sd5EzgJXY8ut
lM/4Pnbc9dn4Vw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:46:14 2025 by rpki-client