Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: 7TRDQ2oKxq4e2GejAJpACM6sE6B18hUfzBBZ6z5m+8I=
Subject key identifier: 98:64:F3:D1:29:5F:C8:01:AC:97:E6:AD:7D:A3:7C:EE:B6:15:E3:C9
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 01958C612CA42444E2A8AD25806F3AAA7B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1492
Signing time: Wed 12 Mar 2025 22:02:13 +0000
Manifest this update: Wed 12 Mar 2025 22:02:13 +0000
Manifest next update: Thu 13 Mar 2025 22:02:13 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: 2Hbo9PORKIoLYWUa8P4pD+/DIKx0ZOzG5eS6lntQFRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:2c:a4:24:44:e2:a8:ad:25:80:6f:3a:aa:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Mar 12 22:02:13 2025 GMT
Not After : Mar 13 22:02:13 2025 GMT
Subject: CN=9864f3d1295fc801ac97e6ad7da37ceeb615e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:3c:21:32:1f:76:20:67:23:e9:5b:68:66:
86:d7:01:b8:60:4d:72:f3:a9:46:a7:43:bb:13:0b:
29:a2:fc:cc:2b:4e:5e:50:eb:4e:f0:a5:9c:68:03:
ee:87:7a:0c:1b:62:1a:d1:d2:1a:54:11:ed:3f:74:
7b:92:2d:19:f8:23:7c:14:d1:c3:34:d8:34:88:ee:
19:76:c4:00:ab:44:7c:6c:85:2e:d5:2d:c8:5f:db:
98:dc:90:84:89:a4:82:d6:18:6b:ec:f5:3b:d0:6d:
fd:4c:2f:fc:3d:2b:1b:2e:68:eb:5e:98:ff:88:05:
e3:47:78:62:58:65:86:21:42:fd:83:62:e0:f3:b8:
39:63:cd:63:b9:d0:aa:78:e2:82:46:1c:19:5b:40:
d1:dd:84:c8:31:0f:36:47:a2:b4:aa:c7:d6:05:11:
23:b7:1b:77:13:fd:79:a9:d0:02:e4:3f:46:a7:9e:
a0:3a:46:88:40:76:a7:d0:44:7f:98:42:1d:e1:36:
81:b2:8c:4a:88:2d:e1:de:9e:96:3a:30:0f:f6:3c:
d9:82:7e:28:b9:c6:d8:9c:dd:83:8c:10:0c:63:5b:
0c:70:d6:5d:e4:cb:07:56:65:51:67:4e:c9:72:3b:
c0:36:6b:40:47:21:bc:99:4e:d4:04:0f:ac:37:ad:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:64:F3:D1:29:5F:C8:01:AC:97:E6:AD:7D:A3:7C:EE:B6:15:E3:C9
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:4d:61:bb:13:89:7e:58:e5:ec:0f:93:85:55:67:ab:94:
96:ee:42:81:b5:0b:f1:d0:35:ca:72:9c:33:96:27:e0:09:66:
a0:79:19:e4:92:46:d3:37:30:3b:1a:8b:ca:25:06:88:55:5a:
c5:16:e0:bc:ad:db:5f:e2:5b:90:99:2a:e4:c2:00:dd:d8:72:
b5:30:6c:62:3d:c1:23:6f:76:64:db:ef:a4:79:56:68:34:6c:
81:0b:54:11:48:33:c0:da:0b:a9:d0:16:2c:7d:3e:e4:34:32:
f7:b8:b3:c9:0c:69:dc:11:af:3d:7c:6c:22:bd:86:db:1a:0a:
21:4e:ca:0e:ea:05:43:31:08:8c:be:96:6c:66:1d:13:bb:00:
36:1e:44:5d:ec:8f:d1:a2:f3:39:f0:59:df:50:ba:22:1d:d3:
1a:73:b4:d4:35:a5:91:17:ae:0f:04:1c:bc:62:7c:f1:95:75:
68:4a:21:c6:f2:b6:30:64:f2:f5:c2:0b:5b:08:55:a3:84:2b:
a1:89:38:8d:28:8b:d5:2e:2c:de:5a:5f:a2:b8:85:ae:6c:ce:
ed:6e:0a:78:3f:11:e2:e8:1c:5d:3e:56:fc:57:7d:d8:ec:82:
f5:10:2c:75:13:eb:40:ca:5c:83:65:9c:74:96:4a:50:4f:ee:
4d:2a:0a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYSykJETiqK0lgG86qnuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky
ZmY5NmMwHhcNMjUwMzEyMjIwMjEzWhcNMjUwMzEzMjIwMjEzWjAzMTEwLwYDVQQD
Eyg5ODY0ZjNkMTI5NWZjODAxYWM5N2U2YWQ3ZGEzN2NlZWI2MTVlM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArss8ITIfdiBnI+lbaGaG1wG4YE1y
86lGp0O7EwspovzMK05eUOtO8KWcaAPuh3oMG2Ia0dIaVBHtP3R7ki0Z+CN8FNHD
NNg0iO4ZdsQAq0R8bIUu1S3IX9uY3JCEiaSC1hhr7PU70G39TC/8PSsbLmjrXpj/
iAXjR3hiWGWGIUL9g2Lg87g5Y81judCqeOKCRhwZW0DR3YTIMQ82R6K0qsfWBREj
txt3E/15qdAC5D9Gp56gOkaIQHan0ER/mEId4TaBsoxKiC3h3p6WOjAP9jzZgn4o
ucbYnN2DjBAMY1sMcNZd5MsHVmVRZ07JcjvANmtARyG8mU7UBA+sN62bqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhk89EpX8gBrJfmrX2jfO62FePJMB8GA1UdIwQY
MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt
ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk
LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvtNYbsT
iX5Y5ewPk4VVZ6uUlu5CgbUL8dA1ynKcM5Yn4AlmoHkZ5JJG0zcwOxqLyiUGiFVa
xRbgvK3bX+JbkJkq5MIA3dhytTBsYj3BI292ZNvvpHlWaDRsgQtUEUgzwNoLqdAW
LH0+5DQy97izyQxp3BGvPXxsIr2G2xoKIU7KDuoFQzEIjL6WbGYdE7sANh5EXeyP
0aLzOfBZ31C6Ih3TGnO01DWlkReuDwQcvGJ88ZV1aEohxvK2MGTy9cILWwhVo4Qr
oYk4jSiL1S4s3lpforiFrmzO7W4KeD8R4ugcXT5W/Fd92OyC9RAsdRPrQMpcg2Wc
dJZKUE/uTSoKEw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:21 2025 by rpki-client