Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: vuUNsf8d0wHVJnkDWfEBDs/GNt1fzsGskPry4I2M93w=
Subject key identifier: 59:70:E4:2A:1B:6E:74:5E:C8:EF:CB:1D:4C:0F:B7:72:23:6F:41:AC
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 01965DCD72FC48362C2167F670A1B49A098C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 09EF
Signing time: Tue 22 Apr 2025 14:01:07 +0000
Manifest this update: Tue 22 Apr 2025 14:01:07 +0000
Manifest next update: Wed 23 Apr 2025 14:01:07 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: YwXcKE0uZOcTDllnmTNavG0N4O6+TPnMyP47+3oRuss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:72:fc:48:36:2c:21:67:f6:70:a1:b4:9a:09:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Apr 22 14:01:07 2025 GMT
Not After : Apr 23 14:01:07 2025 GMT
Subject: CN=5970e42a1b6e745ec8efcb1d4c0fb772236f41ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:42:c1:03:74:d2:84:53:d6:04:45:e4:62:
9b:c0:5c:52:4b:d7:51:13:03:96:7e:fd:5d:d2:b8:
6d:3c:d1:f0:58:8f:53:6d:98:ca:0d:f7:5a:e7:6c:
07:c8:c8:87:94:25:15:9d:d9:77:0a:f2:88:2a:ed:
5e:a1:24:6f:fd:ae:fc:4d:49:4c:20:54:f7:08:4b:
0f:93:60:12:c2:6d:0e:a6:4f:fc:1d:a8:8d:03:80:
96:e7:e5:3a:92:cd:a1:d5:f6:c0:45:25:5a:7b:21:
53:d0:f3:b4:c6:72:1a:a1:a2:8e:14:a6:c2:82:71:
b3:b1:fb:b4:13:28:f5:34:63:12:5b:5c:a6:ea:55:
8f:68:c4:18:8b:a1:bf:e1:e9:e9:aa:95:16:aa:31:
04:6e:50:9d:ee:91:8f:44:f5:1b:0e:ec:ae:86:26:
94:cd:1a:64:43:99:da:e0:1b:d8:6d:ad:5f:e7:78:
05:40:e4:25:76:12:6b:7a:77:e3:fc:08:64:70:79:
34:87:d7:f1:43:9f:20:e3:19:d9:92:21:a7:f7:b7:
25:58:32:5a:15:eb:53:a1:57:a0:35:2c:48:20:8a:
b1:fd:64:56:9c:a2:50:71:6e:9f:7a:d5:be:db:5a:
0a:52:8f:80:6f:0b:e0:4e:56:b2:49:74:7d:d6:cc:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:E4:2A:1B:6E:74:5E:C8:EF:CB:1D:4C:0F:B7:72:23:6F:41:AC
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:1d:15:56:6f:ed:17:c7:ad:eb:b6:21:b2:23:20:91:14:
a6:fc:ef:af:6c:0b:90:83:67:b2:f7:cf:a7:8e:04:c8:7f:c1:
ef:75:da:29:7c:ce:a9:77:36:81:e7:7b:42:31:5c:ee:d3:6d:
b9:26:07:5c:e0:fb:30:a9:30:ef:b9:5a:d2:11:8d:53:c6:10:
9d:ca:22:79:59:43:e3:e2:41:f6:8f:df:82:74:4c:50:58:a7:
d4:82:73:fc:db:87:ee:63:bb:c6:37:28:fe:b3:61:1f:d8:3c:
e2:d3:a0:eb:3f:95:4e:10:ab:f4:12:b2:59:96:db:1c:fd:80:
26:45:ba:c6:27:56:cd:85:00:af:5a:5b:4a:81:21:f8:eb:46:
2c:40:bb:8a:c1:6d:40:5a:43:e4:4f:35:20:d3:28:54:35:86:
09:db:17:57:f1:93:27:ba:f9:80:9f:b6:86:c5:4a:55:99:9e:
22:30:dd:87:a5:0d:43:a6:92:dd:c2:0d:71:7b:00:65:ae:7c:
3d:c5:51:73:a0:f7:f0:4f:15:a6:5d:5d:32:65:38:11:4a:b7:
ff:b1:d0:2f:9d:e6:0c:47:57:fd:c5:b7:2f:e6:fa:fd:2e:26:
4b:20:d5:65:1e:58:ea:34:4a:94:d5:54:cb:1c:19:2b:32:0c:
c0:d1:52:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdzXL8SDYsIWf2cKG0mgmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy
ZGNmODgwHhcNMjUwNDIyMTQwMTA3WhcNMjUwNDIzMTQwMTA3WjAzMTEwLwYDVQQD
Eyg1OTcwZTQyYTFiNmU3NDVlYzhlZmNiMWQ0YzBmYjc3MjIzNmY0MWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rZCwQN00oRT1gRF5GKbwFxSS9dR
EwOWfv1d0rhtPNHwWI9TbZjKDfda52wHyMiHlCUVndl3CvKIKu1eoSRv/a78TUlM
IFT3CEsPk2ASwm0Opk/8HaiNA4CW5+U6ks2h1fbARSVaeyFT0PO0xnIaoaKOFKbC
gnGzsfu0Eyj1NGMSW1ym6lWPaMQYi6G/4enpqpUWqjEEblCd7pGPRPUbDuyuhiaU
zRpkQ5na4BvYba1f53gFQOQldhJrenfj/AhkcHk0h9fxQ58g4xnZkiGn97clWDJa
FetToVegNSxIIIqx/WRWnKJQcW6fetW+21oKUo+AbwvgTlaySXR91syg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlw5CobbnReyO/LHUwPt3Ijb0GsMB8GA1UdIwQY
MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt
OTY1MzFkMTYzMzFiLzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi
LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGodFVZv
7RfHreu2IbIjIJEUpvzvr2wLkINnsvfPp44EyH/B73XaKXzOqXc2ged7QjFc7tNt
uSYHXOD7MKkw77la0hGNU8YQncoieVlD4+JB9o/fgnRMUFin1IJz/NuH7mO7xjco
/rNhH9g84tOg6z+VThCr9BKyWZbbHP2AJkW6xidWzYUAr1pbSoEh+OtGLEC7isFt
QFpD5E81INMoVDWGCdsXV/GTJ7r5gJ+2hsVKVZmeIjDdh6UNQ6aS3cINcXsAZa58
PcVRc6D38E8Vpl1dMmU4EUq3/7HQL53mDEdX/cW3L+b6/S4mSyDVZR5Y6jRKlNVU
yxwZKzIMwNFSeA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:49:22 2025 by rpki-client