Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: Gqxvfsd7LpNp4euY2qXXTOJkyLWL/toM9sSeOpTmiEw=
Subject key identifier: 97:4C:2F:CE:6E:B1:3D:58:61:BF:04:D6:6C:32:93:C1:97:48:BE:BD
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 0196B446A9FF66550514C2AB01F22043335A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 0D2E
Signing time: Fri 09 May 2025 09:00:51 +0000
Manifest this update: Fri 09 May 2025 09:00:51 +0000
Manifest next update: Sat 10 May 2025 09:00:51 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: ParqY+gq4AMCTKQzuLY/XucxX5lQJhuYvfwBwMfbBrg=)
2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:a9:ff:66:55:05:14:c2:ab:01:f2:20:43:33:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: May 9 09:00:51 2025 GMT
Not After : May 10 09:00:51 2025 GMT
Subject: CN=974c2fce6eb13d5861bf04d66c3293c19748bebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:84:8c:56:65:cd:14:ce:ad:b1:65:d7:1f:
7e:86:6d:2f:f2:de:cd:f6:c6:37:6e:f1:a9:8a:ae:
1a:7c:c1:4f:86:3f:54:83:b0:2e:f1:a5:8e:6f:2a:
6e:4f:4d:7c:89:3c:53:65:23:ce:19:8c:e8:6f:7a:
08:f5:a9:f5:8b:6c:8d:68:ed:14:4b:ac:65:53:4f:
ce:c6:2f:e9:9c:64:0f:df:7d:ba:21:99:10:65:76:
7e:a8:99:be:dc:67:87:18:01:f1:ed:01:88:d0:76:
c5:ff:af:38:3e:3d:16:15:17:06:10:72:bf:a8:db:
58:42:2b:16:a0:4b:75:2c:ff:56:d2:40:b3:93:d0:
0b:3d:06:b7:09:58:8c:ef:7c:b2:7a:b0:50:b5:7e:
b4:db:d2:83:b9:23:df:8c:25:5b:ba:0a:a5:46:e5:
dc:9f:46:97:5b:a4:6f:0b:5c:a6:d6:49:ca:22:01:
45:87:c2:cf:dc:8c:86:21:1a:d5:30:25:ea:09:27:
cd:30:77:b5:ab:7e:e0:bf:b8:2f:22:12:3e:0d:45:
06:b5:a3:8c:c0:44:62:5c:73:b0:4c:8e:81:d9:a8:
8a:e8:a5:61:00:b4:29:db:5b:e7:39:97:fb:36:e1:
8c:f0:9f:9a:dc:28:4f:de:fd:d9:1a:41:ef:23:bf:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:2F:CE:6E:B1:3D:58:61:BF:04:D6:6C:32:93:C1:97:48:BE:BD
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b5:fb:84:e3:de:5e:bc:84:ca:24:08:da:a4:81:a0:c6:fd:
f5:26:a7:bd:e0:5b:b1:af:62:c8:42:29:c4:eb:29:e5:19:57:
43:ef:3c:0b:ef:8a:5e:bd:ea:2f:66:41:99:dd:83:2a:a9:9f:
84:1a:20:f3:4c:f1:1c:58:b8:bd:cc:62:a3:c4:b7:f5:89:9e:
cf:05:31:69:cf:b1:78:1d:e8:a2:e8:be:84:03:b7:2c:ec:d2:
c2:3c:90:b3:85:3e:6f:26:d3:c1:3b:27:38:bc:30:2d:66:f4:
00:b9:ce:4a:7c:45:cb:cd:33:5a:d9:14:a2:a7:a6:25:61:16:
a8:da:ef:af:29:89:22:94:f7:e9:02:5f:f3:cf:11:35:dd:b6:
2e:f7:50:25:87:58:02:08:ed:f6:3e:3b:9c:25:01:15:48:8f:
e4:a9:5a:b1:68:2a:d0:0d:ea:1c:48:59:67:8d:fb:0f:8e:11:
c8:ef:b2:b4:da:7a:a5:56:37:37:b5:c1:40:4c:62:a0:c5:f0:
c1:3b:46:11:3f:bf:12:30:0e:65:ce:5f:43:12:06:f8:8c:5d:
79:c5:ad:e2:d8:cb:06:76:b1:cf:27:02:86:27:59:81:98:ab:
9c:ab:7a:75:62:82:63:4b:ed:27:e3:2c:55:79:3b:3a:cc:83:
6d:86:3e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0Rqn/ZlUFFMKrAfIgQzNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjUwNTA5MDkwMDUxWhcNMjUwNTEwMDkwMDUxWjAzMTEwLwYDVQQD
Eyg5NzRjMmZjZTZlYjEzZDU4NjFiZjA0ZDY2YzMyOTNjMTk3NDhiZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AOEjFZlzRTOrbFl1x9+hm0v8t7N
9sY3bvGpiq4afMFPhj9Ug7Au8aWObypuT018iTxTZSPOGYzob3oI9an1i2yNaO0U
S6xlU0/Oxi/pnGQP3326IZkQZXZ+qJm+3GeHGAHx7QGI0HbF/684Pj0WFRcGEHK/
qNtYQisWoEt1LP9W0kCzk9ALPQa3CViM73yyerBQtX6029KDuSPfjCVbugqlRuXc
n0aXW6RvC1ym1knKIgFFh8LP3IyGIRrVMCXqCSfNMHe1q37gv7gvIhI+DUUGtaOM
wERiXHOwTI6B2aiK6KVhALQp21vnOZf7NuGM8J+a3ChP3v3ZGkHvI7+q6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdML85usT1YYb8E1mwyk8GXSL69MB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrX7hOPe
XryEyiQI2qSBoMb99SanveBbsa9iyEIpxOsp5RlXQ+88C++KXr3qL2ZBmd2DKqmf
hBog80zxHFi4vcxio8S39YmezwUxac+xeB3ooui+hAO3LOzSwjyQs4U+bybTwTsn
OLwwLWb0ALnOSnxFy80zWtkUoqemJWEWqNrvrymJIpT36QJf888RNd22LvdQJYdY
Agjt9j47nCUBFUiP5KlasWgq0A3qHEhZZ437D44RyO+ytNp6pVY3N7XBQExioMXw
wTtGET+/EjAOZc5fQxIG+IxdecWt4tjLBnaxzycChidZgZirnKt6dWKCY0vtJ+Ms
VXk7OsyDbYY+Lg==
-----END CERTIFICATE-----
Generated at Fri May 9 11:17:54 2025 by rpki-client