Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: MIEer0E4pZQAP5D+RuSjvDSAscJXMKsfaT58MBIw+FY=
Subject key identifier: A8:4A:85:EC:70:06:65:BB:27:D4:58:2A:78:9F:21:9D:50:5C:4E:31
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 0196507EFA43E4B87FEA97FC3AACF3987523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 0354
Signing time: Sun 20 Apr 2025 00:00:20 +0000
Manifest this update: Sun 20 Apr 2025 00:00:20 +0000
Manifest next update: Mon 21 Apr 2025 00:00:20 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: OpVcpJFtPKgC80+y0+D13fLPjeG9lt8hwCnRdFEyEZE=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:fa:43:e4:b8:7f:ea:97:fc:3a:ac:f3:98:75:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Apr 20 00:00:20 2025 GMT
Not After : Apr 21 00:00:20 2025 GMT
Subject: CN=a84a85ec700665bb27d4582a789f219d505c4e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:11:38:bd:d9:4f:7b:05:c7:4e:81:10:19:
1b:e1:8e:ed:75:ec:a1:31:f9:51:57:57:ac:10:48:
9a:31:40:a8:7a:3c:d6:40:45:bd:1c:e7:80:1e:d4:
35:d2:40:78:f2:ab:70:11:e2:98:78:f3:d1:52:c9:
e3:af:82:bf:90:56:59:9f:93:92:a4:02:62:30:48:
62:05:de:4a:48:ef:65:db:75:fc:a0:7c:07:18:99:
17:b4:c4:5b:26:58:0c:06:8f:70:93:85:b9:1f:cb:
ef:dc:92:eb:5b:d5:a1:c6:32:5b:cb:8b:dc:90:01:
73:9d:74:98:e6:c6:2f:c8:c2:97:95:49:a3:d7:44:
e3:6d:49:2f:2f:0c:4c:ef:63:c9:41:d4:89:21:71:
80:68:b9:89:3d:23:58:b7:bf:41:e2:c1:86:b6:e1:
99:f5:a5:54:a8:a8:b0:38:bb:34:a1:c1:07:40:f6:
6d:a6:48:16:f1:e8:bb:62:02:4b:e4:1a:59:9a:08:
35:94:5c:6e:12:04:8a:65:75:cd:49:b7:95:df:6b:
d4:1a:3c:23:f1:d3:61:21:18:12:7c:95:24:4e:a7:
56:ca:cc:25:54:e0:b4:2e:cd:89:85:c2:e0:8d:7d:
3b:4f:f4:56:d1:23:50:4b:f4:0c:76:09:56:6f:2a:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4A:85:EC:70:06:65:BB:27:D4:58:2A:78:9F:21:9D:50:5C:4E:31
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8d:39:eb:b4:c4:4d:0a:80:bd:31:1f:56:79:bb:b0:72:10:
69:dd:c3:78:3e:78:a5:71:fc:ae:76:ea:59:97:28:f3:c4:bb:
26:23:e9:c1:82:36:b2:0b:13:e1:13:4c:94:2f:71:19:30:56:
8b:08:1c:36:fd:64:d5:8a:e3:7f:33:e1:eb:14:19:b0:86:e1:
0a:70:aa:5b:b2:94:bb:29:7d:55:41:b8:17:a5:99:a6:0a:f9:
59:3a:3d:d3:72:3d:ea:a6:54:57:52:4c:3f:da:52:cd:3a:20:
87:8e:0e:02:1e:5f:d3:6b:91:53:cc:91:ed:07:38:7d:8e:e8:
6d:c1:33:78:c0:3d:3c:20:a7:35:e6:73:55:7c:48:d3:ed:14:
5b:8c:66:01:a9:3a:91:da:f1:e8:23:e4:6f:2c:01:94:c7:cc:
44:57:e2:31:1c:00:70:33:c4:f7:fe:9d:6e:a2:16:8b:4a:f3:
63:15:ee:d2:4f:94:9a:5f:3a:c6:8a:90:c4:9b:e7:4d:ca:6d:
fd:30:7c:4d:bd:b1:6a:d1:51:06:ae:cf:72:c4:a2:13:29:8e:
df:16:d3:4b:f1:68:3d:2e:a1:ca:a2:c6:f2:8e:26:ec:88:9b:
c5:fc:41:c6:88:58:df:d8:50:66:9e:9f:ad:50:47:a1:e4:ec:
80:75:3e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfvpD5Lh/6pf8OqzzmHUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw
NjU3NzEwHhcNMjUwNDIwMDAwMDIwWhcNMjUwNDIxMDAwMDIwWjAzMTEwLwYDVQQD
EyhhODRhODVlYzcwMDY2NWJiMjdkNDU4MmE3ODlmMjE5ZDUwNWM0ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4QROL3ZT3sFx06BEBkb4Y7tdeyh
MflRV1esEEiaMUCoejzWQEW9HOeAHtQ10kB48qtwEeKYePPRUsnjr4K/kFZZn5OS
pAJiMEhiBd5KSO9l23X8oHwHGJkXtMRbJlgMBo9wk4W5H8vv3JLrW9WhxjJby4vc
kAFznXSY5sYvyMKXlUmj10TjbUkvLwxM72PJQdSJIXGAaLmJPSNYt79B4sGGtuGZ
9aVUqKiwOLs0ocEHQPZtpkgW8ei7YgJL5BpZmgg1lFxuEgSKZXXNSbeV32vUGjwj
8dNhIRgSfJUkTqdWyswlVOC0Ls2JhcLgjX07T/RW0SNQS/QMdglWbyq7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhKhexwBmW7J9RYKnifIZ1QXE4xMB8GA1UdIwQY
MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt
OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy
LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm40567TE
TQqAvTEfVnm7sHIQad3DeD54pXH8rnbqWZco88S7JiPpwYI2sgsT4RNMlC9xGTBW
iwgcNv1k1YrjfzPh6xQZsIbhCnCqW7KUuyl9VUG4F6WZpgr5WTo903I96qZUV1JM
P9pSzTogh44OAh5f02uRU8yR7Qc4fY7obcEzeMA9PCCnNeZzVXxI0+0UW4xmAak6
kdrx6CPkbywBlMfMRFfiMRwAcDPE9/6dbqIWi0rzYxXu0k+Uml86xoqQxJvnTcpt
/TB8Tb2xatFRBq7PcsSiEymO3xbTS/FoPS6hyqLG8o4m7IibxfxBxohY39hQZp6f
rVBHoeTsgHU+Wg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:16 2025 by rpki-client