
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: SNRSgZn3eYEddvZl9bl1I/56qTEev1zCIT9ZRbighxs=
Subject key identifier: DF:A1:C4:F3:06:52:02:D3:3B:8D:40:33:ED:08:4E:6C:A1:53:27:5C
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 01964F6D39924BBC82D7E16A735F763A5F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 19:01:20 +0000
Manifest this update: Sat 19 Apr 2025 19:01:20 +0000
Manifest next update: Sun 20 Apr 2025 19:01:20 +0000
Files and hashes: 1: RHNggBb1TucAzNCR_Nr4pg_wiTI.roa (hash: gVu159ZiRDG0Y/9P6fbJjRdg/qCz0CZogXW7oBMzxmM=)
2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: eGQ0wh0+kLxdV2J3HKA0jGy3/QpsjX5mH+XezPypA1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:39:92:4b:bc:82:d7:e1:6a:73:5f:76:3a:5f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Apr 19 19:01:20 2025 GMT
Not After : Apr 20 19:01:20 2025 GMT
Subject: CN=dfa1c4f3065202d33b8d4033ed084e6ca153275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:78:5b:d6:be:9b:70:b4:94:96:f1:37:76:
c6:65:bb:55:a1:6f:79:f5:83:11:ca:b4:7e:1a:0d:
3b:93:7d:86:be:81:2b:d5:83:5f:75:46:e3:7d:dd:
38:42:49:69:bb:d3:d4:57:1d:41:89:26:4e:34:cf:
82:f1:91:00:9d:70:d1:19:8d:53:4e:c0:8e:6f:ba:
5a:5b:df:d2:4d:12:d9:95:6e:fe:b1:9d:02:60:29:
7e:7c:85:35:08:46:b8:ce:31:01:e1:e4:73:ff:0c:
59:82:4d:f4:f5:4f:ca:a9:9c:ed:94:97:45:e5:12:
5f:8c:82:98:54:01:74:11:31:4c:4d:7c:cf:07:25:
1b:34:a2:c8:c4:08:55:1d:8d:14:c3:71:18:35:a9:
0e:03:82:f4:90:29:fa:8a:e8:63:cc:b4:36:be:03:
18:41:31:9b:81:6f:1c:7a:53:01:96:5b:1d:0c:e1:
c8:e9:7e:a1:33:7a:4b:bf:36:62:5e:01:83:0d:18:
60:53:ec:1f:26:d5:3a:c9:d5:2e:14:79:d3:4a:10:
89:4e:e9:ce:b5:33:ac:55:c8:27:62:b5:68:7c:0a:
cd:14:bb:dd:20:e9:c5:0c:f0:e3:18:e4:fb:19:12:
c8:06:e0:e2:83:be:42:30:cd:27:bd:2f:24:21:0d:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A1:C4:F3:06:52:02:D3:3B:8D:40:33:ED:08:4E:6C:A1:53:27:5C
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1c:13:87:37:24:9f:78:59:cb:a1:e6:74:bd:d6:6f:b2:95:
a3:43:8c:e3:6d:ad:f5:c4:a2:00:fb:d8:cd:28:99:2c:cd:ad:
57:d8:3b:4f:6e:49:f9:e9:55:7d:de:ae:a3:ff:97:a7:60:9a:
8a:c1:dc:bc:8e:4f:66:8a:86:c4:c7:63:bf:4b:67:b5:e3:df:
06:3f:a0:7c:a1:d1:3a:56:3b:7a:d8:6f:69:d2:b3:3d:17:21:
41:44:db:10:e7:ae:34:84:0d:eb:6e:0b:7f:2f:8c:67:15:e8:
d4:6a:32:68:ed:aa:bb:d6:5e:c2:09:a1:0c:ab:9a:01:0a:40:
b2:f1:23:e3:5a:59:0f:2a:9d:10:9e:cd:35:e1:1a:8e:25:79:
e2:94:1f:74:dc:25:bb:06:f4:9b:7c:a9:2f:96:54:9f:3f:f4:
40:00:fc:25:11:3d:cc:75:63:2b:02:b4:e0:98:3f:bf:bb:a5:
89:6e:4d:e6:22:d0:b9:7c:4b:1b:f3:41:34:e6:35:9b:a6:12:
6d:20:bd:81:25:58:19:28:c6:ea:68:fe:58:68:2a:3c:23:2e:
9a:49:ff:a3:e0:bc:df:53:7d:b0:77:90:04:b1:18:9e:be:de:
25:72:60:42:33:1a:77:4a:8a:70:5d:f4:b3:26:09:df:e0:31:
81:31:71:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbTmSS7yC1+Fqc192Ol8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi
ZjJlMDEwHhcNMjUwNDE5MTkwMTIwWhcNMjUwNDIwMTkwMTIwWjAzMTEwLwYDVQQD
EyhkZmExYzRmMzA2NTIwMmQzM2I4ZDQwMzNlZDA4NGU2Y2ExNTMyNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o14W9a+m3C0lJbxN3bGZbtVoW95
9YMRyrR+Gg07k32GvoEr1YNfdUbjfd04Qklpu9PUVx1BiSZONM+C8ZEAnXDRGY1T
TsCOb7paW9/STRLZlW7+sZ0CYCl+fIU1CEa4zjEB4eRz/wxZgk309U/KqZztlJdF
5RJfjIKYVAF0ETFMTXzPByUbNKLIxAhVHY0Uw3EYNakOA4L0kCn6iuhjzLQ2vgMY
QTGbgW8celMBllsdDOHI6X6hM3pLvzZiXgGDDRhgU+wfJtU6ydUuFHnTShCJTunO
tTOsVcgnYrVofArNFLvdIOnFDPDjGOT7GRLIBuDig75CMM0nvS8kIQ1XnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+hxPMGUgLTO41AM+0ITmyhUydcMB8GA1UdIwQY
MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt
NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2
LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxwThzck
n3hZy6HmdL3Wb7KVo0OM422t9cSiAPvYzSiZLM2tV9g7T25J+elVfd6uo/+Xp2Ca
isHcvI5PZoqGxMdjv0tntePfBj+gfKHROlY7ethvadKzPRchQUTbEOeuNIQN624L
fy+MZxXo1GoyaO2qu9ZewgmhDKuaAQpAsvEj41pZDyqdEJ7NNeEajiV54pQfdNwl
uwb0m3ypL5ZUnz/0QAD8JRE9zHVjKwK04Jg/v7uliW5N5iLQuXxLG/NBNOY1m6YS
bSC9gSVYGSjG6mj+WGgqPCMumkn/o+C831N9sHeQBLEYnr7eJXJgQjMad0qKcF30
syYJ3+AxgTFxAg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:08:27 2025 by rpki-client