Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: b2OQ79RYP5kzvPC9oxDw7IIVUiZnXkeyqMn/vwPCzBs=
Subject key identifier: 4B:BF:9F:08:4F:3E:DD:B6:BB:82:95:BE:BD:84:0E:9B:4C:D5:25:3B
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 019650B6277FEFBE29B70B9A6BEDF0A6E3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 11A9
Signing time: Sun 20 Apr 2025 01:00:36 +0000
Manifest this update: Sun 20 Apr 2025 01:00:36 +0000
Manifest next update: Mon 21 Apr 2025 01:00:36 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: BHq+TgVBQ0onVIzFItVVdIOkAA//I1Wabnf3RXIZSOE=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:27:7f:ef:be:29:b7:0b:9a:6b:ed:f0:a6:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Apr 20 01:00:36 2025 GMT
Not After : Apr 21 01:00:36 2025 GMT
Subject: CN=4bbf9f084f3eddb6bb8295bebd840e9b4cd5253b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:de:45:ca:03:d1:7c:c5:63:00:9f:e4:7d:
43:40:11:16:37:7c:18:a5:ee:0c:17:b5:da:0c:92:
6c:65:7f:4e:89:a8:6a:34:81:bb:14:26:ca:f8:1b:
ab:c4:85:06:74:a1:f1:69:4a:46:78:e4:23:fe:fc:
0d:91:68:65:e4:5d:85:60:b0:7e:68:81:77:76:05:
12:5c:fc:c3:b0:22:2f:dd:b6:b7:04:c2:6d:5f:78:
fd:c0:18:a4:cf:7d:54:8c:e6:b8:55:e3:6b:9c:b1:
23:99:e9:40:5a:d7:9f:ee:ca:c1:1d:21:6c:c2:36:
4d:53:c3:23:4d:66:57:c3:3f:10:d0:18:87:4b:5c:
78:77:5d:33:8c:8e:14:82:0b:4b:5f:1a:d7:d2:2e:
c0:3e:8c:57:d8:af:4b:c6:a2:1e:0e:2c:93:cc:1d:
d1:15:83:b7:ce:18:f6:df:c0:f5:22:42:67:2e:9a:
05:57:8b:d2:2c:61:a8:0a:c9:85:9e:d8:cd:09:28:
ae:0a:d5:eb:8b:0b:b9:52:d2:9f:6e:47:99:15:29:
24:80:e1:4c:89:fd:ae:b3:3f:c9:9b:e0:b8:7b:25:
7e:69:c1:4a:5f:7d:67:37:2a:3f:94:80:55:ba:aa:
b8:24:d9:3c:85:b5:4f:35:15:08:1e:e4:fa:9e:7b:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:9F:08:4F:3E:DD:B6:BB:82:95:BE:BD:84:0E:9B:4C:D5:25:3B
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:90:d2:10:ad:80:4f:c9:10:ea:82:e4:ae:e7:fe:28:0e:
64:93:95:2c:d8:fa:38:8c:e7:f5:f9:c3:db:12:22:ae:10:54:
9e:eb:06:ea:34:39:0b:db:e0:cb:fd:be:af:a2:01:84:c3:75:
0d:42:2d:27:2e:fe:9f:e6:10:27:bd:cb:1b:de:bc:f1:80:e1:
a5:8a:e9:91:e3:51:69:5e:bb:04:14:23:e6:74:a5:65:50:55:
83:4c:7e:d2:5f:37:c9:4d:5e:44:58:e3:7f:d5:0b:fd:4a:06:
b3:4e:7a:c0:44:59:7f:e4:5b:b6:92:38:cb:b8:13:e7:b1:7f:
5a:9c:12:d0:b0:8e:2a:97:7c:16:33:ff:3e:fe:4d:9b:5b:ca:
78:f2:99:30:16:5a:3c:aa:15:9f:5c:7c:80:3c:62:15:99:cb:
0b:e8:66:a7:31:3f:d0:b3:1e:60:55:e2:4d:22:c4:2b:41:9c:
8c:5e:2a:1b:2c:00:e0:11:b9:3b:28:af:59:e8:76:dc:0d:9e:
c6:85:c2:43:28:92:cd:23:fd:d4:5a:fc:21:4f:d1:4a:a5:af:
e8:cd:36:fa:87:65:5d:4d:ee:40:44:9d:ce:c1:87:f6:a3:67:
91:6b:a3:74:35:5a:01:91:47:2a:10:6c:d3:7a:8a:d5:ad:3c:
54:02:30:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtid/774ptwuaa+3wpuOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1
NWVjMjUwHhcNMjUwNDIwMDEwMDM2WhcNMjUwNDIxMDEwMDM2WjAzMTEwLwYDVQQD
Eyg0YmJmOWYwODRmM2VkZGI2YmI4Mjk1YmViZDg0MGU5YjRjZDUyNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraLeRcoD0XzFYwCf5H1DQBEWN3wY
pe4MF7XaDJJsZX9OiahqNIG7FCbK+BurxIUGdKHxaUpGeOQj/vwNkWhl5F2FYLB+
aIF3dgUSXPzDsCIv3ba3BMJtX3j9wBikz31UjOa4VeNrnLEjmelAWtef7srBHSFs
wjZNU8MjTWZXwz8Q0BiHS1x4d10zjI4UggtLXxrX0i7APoxX2K9LxqIeDiyTzB3R
FYO3zhj238D1IkJnLpoFV4vSLGGoCsmFntjNCSiuCtXriwu5UtKfbkeZFSkkgOFM
if2usz/Jm+C4eyV+acFKX31nNyo/lIBVuqq4JNk8hbVPNRUIHuT6nnuMGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu/nwhPPt22u4KVvr2EDptM1SU7MB8GA1UdIwQY
MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt
YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5
LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuKQ0hCt
gE/JEOqC5K7n/igOZJOVLNj6OIzn9fnD2xIirhBUnusG6jQ5C9vgy/2+r6IBhMN1
DUItJy7+n+YQJ73LG9688YDhpYrpkeNRaV67BBQj5nSlZVBVg0x+0l83yU1eRFjj
f9UL/UoGs056wERZf+RbtpI4y7gT57F/WpwS0LCOKpd8FjP/Pv5Nm1vKePKZMBZa
PKoVn1x8gDxiFZnLC+hmpzE/0LMeYFXiTSLEK0GcjF4qGywA4BG5OyivWeh23A2e
xoXCQyiSzSP91Fr8IU/RSqWv6M02+odlXU3uQESdzsGH9qNnkWujdDVaAZFHKhBs
03qK1a08VAIwJg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:08:17 2025 by rpki-client