Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: mnbUeyKKKV9sE0bLRVy8mzZNn7z/wmRICVV/r1j9HVA=
Subject key identifier: D8:A4:27:9B:A2:60:09:90:CD:3D:7E:F0:A9:F9:8A:6C:05:AB:32:69
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 01961EEE085122931E6FA3A043E3E373C52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 0E5A
Signing time: Thu 10 Apr 2025 09:00:38 +0000
Manifest this update: Thu 10 Apr 2025 09:00:38 +0000
Manifest next update: Fri 11 Apr 2025 09:00:38 +0000
Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: 9bA/RojwLiJ4D5Mp7BUmr3B2pFQlZYS/3Xo8If0tG/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:ee:08:51:22:93:1e:6f:a3:a0:43:e3:e3:73:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Apr 10 09:00:38 2025 GMT
Not After : Apr 11 09:00:38 2025 GMT
Subject: CN=d8a4279ba2600990cd3d7ef0a9f98a6c05ab3269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:30:00:38:5b:97:05:23:1c:1a:f2:47:8a:
f1:eb:7e:dc:02:25:aa:69:00:f4:c8:65:9f:73:c3:
24:7e:ed:82:f7:e3:ac:aa:ea:73:fd:55:69:b2:10:
43:12:df:10:7c:94:65:10:c4:91:6c:06:8e:31:58:
91:2e:0f:7f:31:13:8d:3e:6d:42:1d:23:d4:b4:01:
6a:36:3c:6b:f4:13:df:16:ca:30:62:03:01:0f:3f:
22:09:ac:77:2e:4b:63:6f:01:9f:ea:c7:7f:34:07:
30:74:77:a4:52:55:f9:1f:c1:a0:d6:e7:f1:f5:97:
0b:b0:b9:c1:6f:21:40:b5:db:e9:03:7b:04:43:68:
c6:3d:f6:59:70:ab:03:a0:c4:8e:c8:2d:aa:36:c1:
f7:03:8e:a9:2d:8b:e8:84:ae:65:fd:0d:45:9d:48:
c2:36:64:c3:dd:1c:ea:0e:a3:07:c3:33:24:69:4d:
3d:bb:bb:dd:78:39:39:a0:10:9a:ee:f7:4e:61:ce:
41:35:01:b9:f8:10:f9:4f:f8:e0:03:de:36:f1:63:
67:fc:87:af:86:f4:e7:cc:6f:ef:c5:84:d7:37:a2:
ae:2c:7c:56:58:80:31:e4:30:fd:bb:09:55:db:0e:
6f:85:06:d3:17:f6:0c:63:cf:6f:2e:ef:db:69:6b:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:27:9B:A2:60:09:90:CD:3D:7E:F0:A9:F9:8A:6C:05:AB:32:69
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:17:11:e8:e4:8c:2b:d0:aa:ab:f6:37:ce:31:72:2b:0a:
70:f4:f1:99:ba:8a:a8:8e:48:d5:f4:87:0d:2e:22:66:39:b0:
78:77:a5:74:28:de:2b:bd:38:fc:63:00:89:ef:aa:fd:c7:2e:
57:99:ce:e0:a4:b7:47:89:74:7f:5a:f8:06:71:d4:99:d0:3f:
e2:82:c5:9a:a5:d9:4c:d2:79:0e:28:27:5b:97:58:b3:10:a7:
d4:4e:7a:3a:11:54:27:2a:b4:21:d2:88:4c:fe:d9:08:da:e9:
b3:9c:54:79:ac:4c:e6:67:b7:bd:09:b1:41:1a:2c:54:64:3f:
05:30:b6:e7:26:03:f6:35:6c:67:29:b6:48:68:7f:34:30:16:
5a:45:e8:56:bd:01:f9:2c:6e:e2:82:c6:2e:f8:e1:87:c1:b4:
66:35:ba:11:7f:11:c0:1c:6b:c0:55:58:83:aa:c4:df:e3:3f:
23:db:f1:bf:01:ba:d8:74:6c:6c:90:53:4e:d5:d8:f8:25:df:
c0:d2:94:dd:95:d7:bb:15:0a:c6:2f:30:2a:d5:53:f7:30:8a:
60:9b:c2:b4:92:2c:ba:5c:60:b9:9b:47:76:47:56:09:95:89:
c8:43:57:5b:3d:6d:26:85:1a:bc:d2:5a:f2:0b:cb:84:fa:64:
28:35:09:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYe7ghRIpMeb6OgQ+Pjc8UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj
ZWEwNTkwHhcNMjUwNDEwMDkwMDM4WhcNMjUwNDExMDkwMDM4WjAzMTEwLwYDVQQD
EyhkOGE0Mjc5YmEyNjAwOTkwY2QzZDdlZjBhOWY5OGE2YzA1YWIzMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EcwADhblwUjHBryR4rx637cAiWq
aQD0yGWfc8Mkfu2C9+Osqupz/VVpshBDEt8QfJRlEMSRbAaOMViRLg9/MRONPm1C
HSPUtAFqNjxr9BPfFsowYgMBDz8iCax3LktjbwGf6sd/NAcwdHekUlX5H8Gg1ufx
9ZcLsLnBbyFAtdvpA3sEQ2jGPfZZcKsDoMSOyC2qNsH3A46pLYvohK5l/Q1FnUjC
NmTD3RzqDqMHwzMkaU09u7vdeDk5oBCa7vdOYc5BNQG5+BD5T/jgA9428WNn/Iev
hvTnzG/vxYTXN6KuLHxWWIAx5DD9uwlV2w5vhQbTF/YMY89vLu/baWt0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNikJ5uiYAmQzT1+8Kn5imwFqzJpMB8GA1UdIwQY
MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt
N2U1MDkxM2FjMDFkLzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk
LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzAXEejk
jCvQqqv2N84xcisKcPTxmbqKqI5I1fSHDS4iZjmweHeldCjeK704/GMAie+q/ccu
V5nO4KS3R4l0f1r4BnHUmdA/4oLFmqXZTNJ5DignW5dYsxCn1E56OhFUJyq0IdKI
TP7ZCNrps5xUeaxM5me3vQmxQRosVGQ/BTC25yYD9jVsZym2SGh/NDAWWkXoVr0B
+Sxu4oLGLvjhh8G0ZjW6EX8RwBxrwFVYg6rE3+M/I9vxvwG62HRsbJBTTtXY+CXf
wNKU3ZXXuxUKxi8wKtVT9zCKYJvCtJIsulxguZtHdkdWCZWJyENXWz1tJoUavNJa
8gvLhPpkKDUJnw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:03:57 2025 by rpki-client