Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier: DJORQqHzrkE5uQTT6EAzEIDpcgqL+QmN+au10oX+0uc=
Subject key identifier: 97:13:97:FD:02:93:99:19:C7:CA:46:D3:05:FB:3F:42:1F:A8:8A:8B
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 0196409ECB6C53F6CC2D92B8FF2CABDF7092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number: 020C
Signing time: Wed 16 Apr 2025 22:01:10 +0000
Manifest this update: Wed 16 Apr 2025 22:01:10 +0000
Manifest next update: Thu 17 Apr 2025 22:01:10 +0000
Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: 43sdlvcpazsM8o1z2RkD1DXHjpXI6yYQq0vzZjDCNBQ=)
2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:cb:6c:53:f6:cc:2d:92:b8:ff:2c:ab:df:70:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Apr 16 22:01:10 2025 GMT
Not After : Apr 17 22:01:10 2025 GMT
Subject: CN=971397fd02939919c7ca46d305fb3f421fa88a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:72:47:76:68:d2:0d:a2:7f:47:7a:38:92:
ee:67:24:be:e8:d6:cd:fc:03:22:97:1e:fb:88:21:
b4:8c:14:6a:1c:5f:ff:50:a2:3c:de:0e:e4:1b:93:
df:c5:87:de:e1:94:f3:9e:0d:a0:09:8c:65:68:c6:
8c:4f:42:de:b5:4d:b5:33:6c:22:da:92:7c:37:20:
23:55:4a:0a:49:f6:9e:41:9c:d9:5a:72:4f:f8:55:
41:55:ed:12:3b:9c:a3:d0:f0:45:4c:e8:ea:34:8a:
7d:a3:a7:73:10:ec:bc:be:ac:3f:89:84:06:8a:4e:
db:e6:e1:89:8a:80:16:ac:23:eb:84:0a:90:6e:3a:
a5:fd:8a:5a:91:dd:aa:c7:ae:e8:ad:19:c9:31:f1:
4a:f4:a2:ab:54:0e:71:9b:e5:23:4f:74:b9:88:4c:
29:3b:dc:9a:5c:2a:10:aa:d5:be:32:47:dd:d7:70:
de:dc:d2:ab:cc:b2:eb:d3:57:ee:f9:b0:6e:70:f0:
dd:85:a2:1b:fa:d2:5c:9d:fd:a4:c0:3d:9c:05:c3:
ed:2b:70:fa:dd:9c:97:93:a2:35:fa:34:37:6e:78:
49:76:e2:62:86:d4:3f:2e:cc:e7:03:73:f7:36:6a:
45:63:58:2b:d2:ee:87:d6:d4:c5:47:2c:9d:b9:a4:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:97:FD:02:93:99:19:C7:CA:46:D3:05:FB:3F:42:1F:A8:8A:8B
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8e:3a:8f:cf:85:8f:8c:11:64:51:ac:5f:9e:86:3a:2d:06:
5d:1d:ac:82:9d:0e:38:09:97:ec:92:8c:11:b9:30:30:f8:13:
6d:42:44:8f:19:a0:56:ce:f4:9c:cb:43:57:83:1d:89:a8:ad:
50:33:3d:74:1c:e4:ff:33:96:a9:5e:ab:65:73:b2:fc:0a:09:
66:88:2b:78:1c:9e:a2:af:ff:f3:e2:22:79:74:e4:4a:c9:ff:
95:31:6f:8f:5a:c1:5c:2a:6b:a6:aa:ff:5c:32:02:51:0e:bb:
8a:6b:f1:d7:7b:6e:c7:2e:fd:fa:43:87:24:73:27:35:53:be:
9f:3d:66:db:b0:ef:47:92:34:d7:17:4a:72:5e:b2:46:49:67:
d1:e3:8e:3d:30:6a:24:68:a9:cd:4d:bb:3a:cc:e2:4c:7d:bd:
4e:63:4d:aa:24:f7:91:c1:0a:d5:9f:14:8c:1f:ac:81:e2:24:
da:58:b1:9e:b8:e8:be:ec:92:dd:c4:1b:76:56:a0:3d:ef:3d:
4e:5f:5c:47:c7:1b:8d:94:15:6f:ea:38:b4:b0:7d:77:e7:92:
f3:93:32:f9:4a:43:dc:ca:b1:e2:7a:1c:20:ba:8a:91:a8:e2:
1f:c7:e1:6e:20:35:e3:de:e2:8f:82:17:78:e9:47:a3:c1:21:
4f:6b:15:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAnstsU/bMLZK4/yyr33CSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGUzYjc5N2Y0YmEzN2ViZjcxODlhNGMxNGYwNTIwZDdj
ZjMwZDcwHhcNMjUwNDE2MjIwMTEwWhcNMjUwNDE3MjIwMTEwWjAzMTEwLwYDVQQD
Eyg5NzEzOTdmZDAyOTM5OTE5YzdjYTQ2ZDMwNWZiM2Y0MjFmYTg4YThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqndyR3Zo0g2if0d6OJLuZyS+6NbN
/AMilx77iCG0jBRqHF//UKI83g7kG5PfxYfe4ZTzng2gCYxlaMaMT0LetU21M2wi
2pJ8NyAjVUoKSfaeQZzZWnJP+FVBVe0SO5yj0PBFTOjqNIp9o6dzEOy8vqw/iYQG
ik7b5uGJioAWrCPrhAqQbjql/Ypakd2qx67orRnJMfFK9KKrVA5xm+UjT3S5iEwp
O9yaXCoQqtW+Mkfd13De3NKrzLLr01fu+bBucPDdhaIb+tJcnf2kwD2cBcPtK3D6
3ZyXk6I1+jQ3bnhJduJihtQ/LsznA3P3NmpFY1gr0u6H1tTFRyyduaQTKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcTl/0Ck5kZx8pG0wX7P0IfqIqLMB8GA1UdIwQY
MBaAFPVOO3l/S6N+v3GJpMFPBSDXzzDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMt
MTVlNDFjNDBhZWM5LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMtMTVlNDFjNDBhZWM5
LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHY46j8+F
j4wRZFGsX56GOi0GXR2sgp0OOAmX7JKMEbkwMPgTbUJEjxmgVs70nMtDV4Mdiait
UDM9dBzk/zOWqV6rZXOy/AoJZogreByeoq//8+IieXTkSsn/lTFvj1rBXCprpqr/
XDICUQ67imvx13tuxy79+kOHJHMnNVO+nz1m27DvR5I01xdKcl6yRkln0eOOPTBq
JGipzU27OsziTH29TmNNqiT3kcEK1Z8UjB+sgeIk2lixnrjovuyS3cQbdlagPe89
Tl9cR8cbjZQVb+o4tLB9d+eS85My+UpD3Mqx4nocILqKkajiH8fhbiA1497ij4IX
eOlHo8EhT2sVhg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:48:14 2025 by rpki-client