Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: GXvXGgM44kqfFHAfezExA+3n2WODUh9Fn3pL2eGmR4c=
Subject key identifier: FB:69:5A:14:51:ED:47:03:00:F0:E6:A6:62:6C:0D:49:F2:D0:F3:D9
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 01958F988AEF9480817DEF42459ACD96191A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0939
Signing time: Thu 13 Mar 2025 13:01:33 +0000
Manifest this update: Thu 13 Mar 2025 13:01:33 +0000
Manifest next update: Fri 14 Mar 2025 13:01:33 +0000
Files and hashes: 1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: 49lfPbVvwp4il3QoIgxNC+EdDDtp6P+a71gPtlhNm8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:8a:ef:94:80:81:7d:ef:42:45:9a:cd:96:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Mar 13 13:01:33 2025 GMT
Not After : Mar 14 13:01:33 2025 GMT
Subject: CN=fb695a1451ed470300f0e6a6626c0d49f2d0f3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:2b:dd:27:30:1a:4b:29:8f:a7:c7:4d:de:
4e:cd:1c:8a:be:77:b8:1f:e9:f0:57:04:9a:56:4c:
d9:6e:cc:28:6f:4a:2e:01:03:9f:7e:d5:48:52:20:
e5:75:c2:24:85:f9:17:46:cf:0e:ca:8f:2e:22:5e:
c2:68:86:ea:ae:ca:a4:5e:c4:f5:b6:6d:e5:13:50:
d8:1d:42:33:d4:28:b3:b0:91:f5:f9:10:23:49:be:
58:80:65:89:9b:3c:17:ae:df:db:18:29:a0:66:f5:
f1:bc:36:fb:b9:7c:79:b1:aa:1f:9d:40:d4:14:8a:
04:27:b1:2f:3a:ce:84:de:d1:31:35:e5:37:2a:60:
32:b0:47:4a:5d:45:b3:6c:92:bc:81:8f:53:1b:fe:
66:b0:41:e8:b0:ec:ab:fe:37:0a:5b:80:f9:3e:68:
6c:34:99:11:d0:48:7f:3e:8f:77:bd:33:e2:86:df:
50:bf:48:e2:c7:ab:69:f2:cd:dd:a9:e1:70:d3:26:
c0:95:c7:10:12:39:0e:60:6a:45:0e:1e:51:26:ab:
91:e8:bb:94:82:9e:8f:8a:03:ab:66:fa:7f:3a:97:
9a:62:ef:6b:3d:c0:94:88:2f:40:36:15:90:83:f7:
d9:18:37:52:8f:9a:69:a3:37:8e:45:a0:09:d9:60:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:5A:14:51:ED:47:03:00:F0:E6:A6:62:6C:0D:49:F2:D0:F3:D9
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:17:23:68:88:99:21:04:9f:81:71:33:b1:d1:b2:60:1f:21:
e8:0d:12:14:10:6c:17:34:9d:43:80:9c:77:9a:7b:51:69:9b:
9f:f7:75:fb:de:93:9d:da:6c:7a:a3:9c:87:a5:97:be:ba:7f:
e2:5b:be:76:ce:97:69:64:76:95:0f:f3:9e:b6:aa:cc:84:16:
eb:64:2e:b4:cc:a2:a1:a7:c0:90:6b:58:e8:75:de:9f:f9:aa:
05:71:a8:a6:d0:35:40:af:cd:55:e3:ac:d5:0d:3a:f9:5d:1b:
b7:2c:e7:f1:b6:c5:d2:4c:d6:a9:db:2b:7e:ac:1b:75:ef:1e:
fd:39:5b:70:d9:70:a2:f5:30:3e:37:98:87:95:44:09:39:c8:
9f:8c:3e:a9:fb:ba:74:04:13:a4:ec:13:1a:74:7d:db:6f:e5:
a1:ee:72:70:d7:2e:4a:97:68:2c:af:bb:59:99:12:07:02:b7:
63:b6:ca:74:e4:96:c6:5c:5f:e4:18:d9:29:64:0d:43:68:04:
8a:9f:12:3c:fe:47:80:ee:e5:e5:1d:b5:5c:a6:c7:f0:d5:06:
c7:1e:1e:f8:d0:a6:3d:54:92:b7:1d:14:51:b5:e5:bf:f4:5e:
37:a8:3a:0e:1e:6b:e5:c0:df:b9:3d:ac:b9:4d:b4:40:90:db:
14:71:5f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPmIrvlICBfe9CRZrNlhkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjUwMzEzMTMwMTMzWhcNMjUwMzE0MTMwMTMzWjAzMTEwLwYDVQQD
EyhmYjY5NWExNDUxZWQ0NzAzMDBmMGU2YTY2MjZjMGQ0OWYyZDBmM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKYr3ScwGkspj6fHTd5OzRyKvne4
H+nwVwSaVkzZbswob0ouAQOfftVIUiDldcIkhfkXRs8Oyo8uIl7CaIbqrsqkXsT1
tm3lE1DYHUIz1CizsJH1+RAjSb5YgGWJmzwXrt/bGCmgZvXxvDb7uXx5saofnUDU
FIoEJ7EvOs6E3tExNeU3KmAysEdKXUWzbJK8gY9TG/5msEHosOyr/jcKW4D5Pmhs
NJkR0Eh/Po93vTPiht9Qv0jix6tp8s3dqeFw0ybAlccQEjkOYGpFDh5RJquR6LuU
gp6PigOrZvp/OpeaYu9rPcCUiC9ANhWQg/fZGDdSj5ppozeORaAJ2WCvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtpWhRR7UcDAPDmpmJsDUny0PPZMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBcjaIiZ
IQSfgXEzsdGyYB8h6A0SFBBsFzSdQ4Ccd5p7UWmbn/d1+96TndpseqOch6WXvrp/
4lu+ds6XaWR2lQ/znraqzIQW62QutMyioafAkGtY6HXen/mqBXGoptA1QK/NVeOs
1Q06+V0btyzn8bbF0kzWqdsrfqwbde8e/TlbcNlwovUwPjeYh5VECTnIn4w+qfu6
dAQTpOwTGnR922/loe5ycNcuSpdoLK+7WZkSBwK3Y7bKdOSWxlxf5BjZKWQNQ2gE
ip8SPP5HgO7l5R21XKbH8NUGxx4e+NCmPVSStx0UUbXlv/ReN6g6Dh5r5cDfuT2s
uU20QJDbFHFfSA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:33 2025 by rpki-client