Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: 3c9JMd1edG3R2qGm2ezQ2P8E6YeC/hj5fdavacnoZqw=
Subject key identifier: 61:01:0E:AA:E4:D2:90:DD:2E:33:3B:A2:47:EF:00:F5:23:3F:0E:D3
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 0196184713CBED7504DE4F81F8A2EB9DD9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 06A6
Signing time: Wed 09 Apr 2025 02:00:33 +0000
Manifest this update: Wed 09 Apr 2025 02:00:33 +0000
Manifest next update: Thu 10 Apr 2025 02:00:33 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: jfRe2nlf5Cc0kZwmJROdQMfLMdboVyE0JkSIeVyHzeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:47:13:cb:ed:75:04:de:4f:81:f8:a2:eb:9d:d9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Apr 9 02:00:33 2025 GMT
Not After : Apr 10 02:00:33 2025 GMT
Subject: CN=61010eaae4d290dd2e333ba247ef00f5233f0ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:d8:6a:ee:92:db:59:fb:aa:b7:10:02:e2:
33:ab:e7:cc:ae:5a:1c:c5:b6:22:48:06:06:6d:4a:
33:91:d8:3b:38:9d:db:4a:8e:76:8e:d9:31:13:e4:
a0:1a:95:53:a3:73:12:4c:91:5f:f6:7d:c7:f2:68:
8f:a4:81:74:01:ff:5e:4f:7c:1b:8a:de:42:98:b8:
96:bc:33:bf:25:5b:2b:7d:5a:40:bc:ab:94:5a:37:
ad:7d:90:73:e7:6b:09:21:4e:72:2b:21:ef:00:72:
17:a8:92:74:78:69:c1:fa:28:bf:00:18:27:00:c0:
bb:ba:60:e9:50:63:f7:b7:15:ac:20:cc:38:28:a9:
a6:b9:cf:4f:ea:8e:f5:99:2c:70:79:0a:70:af:fd:
f4:61:d9:6b:c6:08:cb:98:04:04:a1:a9:27:fe:1d:
df:62:b7:fd:6c:b6:4e:b7:65:55:5f:06:7f:62:99:
3e:fe:02:e6:85:a4:63:5c:61:6c:b3:fb:74:49:5b:
f8:a0:eb:37:75:a5:3b:5f:47:80:ff:99:f4:7f:68:
97:3f:55:b6:54:83:63:e7:ad:3a:e2:5d:1f:fe:b8:
02:f8:09:b4:4f:8d:31:22:d8:c4:d5:ca:b1:e2:7c:
33:e7:4c:ec:4d:85:37:dd:c2:f5:b0:f8:53:c8:99:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:0E:AA:E4:D2:90:DD:2E:33:3B:A2:47:EF:00:F5:23:3F:0E:D3
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:c6:b5:95:a2:03:5c:61:97:c9:59:13:d3:1f:6b:ab:eb:
f5:48:2c:c1:36:e6:88:f0:41:6e:1f:8d:67:55:5c:f8:0a:91:
6a:6f:81:f1:02:9b:24:7c:31:3e:1c:30:cd:38:71:98:ac:00:
48:3a:5f:b3:ab:c8:44:f0:8e:20:a5:76:42:ac:cf:fb:aa:22:
ab:fc:ff:e5:0c:b4:85:07:06:e4:d5:9d:06:4b:13:94:46:cc:
de:72:90:54:a3:94:10:5e:5e:14:31:21:37:5c:b3:c5:52:25:
d3:c8:00:f5:e6:ef:d2:37:ce:97:0b:a5:c6:ee:e1:41:41:da:
b1:9a:aa:f7:8a:e4:75:c7:42:68:80:62:b0:d2:2e:18:86:67:
ce:44:21:00:4f:ea:e9:2c:39:27:bd:f4:f8:c2:e5:15:19:13:
c5:cf:7c:aa:b3:aa:56:04:1a:9f:cd:8a:37:2d:63:9e:ce:29:
a4:1b:23:f6:79:da:93:a6:08:95:0c:40:38:ea:66:9d:e0:68:
c1:43:8e:c1:4b:63:30:35:d0:ac:cc:53:03:11:dd:33:a3:0f:
ad:a1:33:e7:06:ce:5e:6c:97:d7:3b:c3:95:32:2a:ec:5b:04:
12:fd:4f:01:d2:54:fb:79:59:fb:ef:82:1f:91:76:25:2d:23:
56:ff:bb:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYYRxPL7XUE3k+B+KLrndnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw
MDI4NjMwHhcNMjUwNDA5MDIwMDMzWhcNMjUwNDEwMDIwMDMzWjAzMTEwLwYDVQQD
Eyg2MTAxMGVhYWU0ZDI5MGRkMmUzMzNiYTI0N2VmMDBmNTIzM2YwZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzDYau6S21n7qrcQAuIzq+fMrloc
xbYiSAYGbUozkdg7OJ3bSo52jtkxE+SgGpVTo3MSTJFf9n3H8miPpIF0Af9eT3wb
it5CmLiWvDO/JVsrfVpAvKuUWjetfZBz52sJIU5yKyHvAHIXqJJ0eGnB+ii/ABgn
AMC7umDpUGP3txWsIMw4KKmmuc9P6o71mSxweQpwr/30YdlrxgjLmAQEoakn/h3f
Yrf9bLZOt2VVXwZ/Ypk+/gLmhaRjXGFss/t0SVv4oOs3daU7X0eA/5n0f2iXP1W2
VINj56064l0f/rgC+Am0T40xItjE1cqx4nwz50zsTYU33cL1sPhTyJnhaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEBDqrk0pDdLjM7okfvAPUjPw7TMB8GA1UdIwQY
MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct
MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4
LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2DGtZWi
A1xhl8lZE9Mfa6vr9UgswTbmiPBBbh+NZ1Vc+AqRam+B8QKbJHwxPhwwzThxmKwA
SDpfs6vIRPCOIKV2QqzP+6oiq/z/5Qy0hQcG5NWdBksTlEbM3nKQVKOUEF5eFDEh
N1yzxVIl08gA9ebv0jfOlwulxu7hQUHasZqq94rkdcdCaIBisNIuGIZnzkQhAE/q
6Sw5J730+MLlFRkTxc98qrOqVgQan82KNy1jns4ppBsj9nnak6YIlQxAOOpmneBo
wUOOwUtjMDXQrMxTAxHdM6MPraEz5wbOXmyX1zvDlTIq7FsEEv1PAdJU+3lZ+++C
H5F2JS0jVv+7PQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:12 2025 by rpki-client