Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: ABa3w9Vbc9PM3r+BLtiTUBTcRqdIFXMYe3Gy4iOOahU=
Subject key identifier: D9:7C:D3:1D:1A:B3:D0:E7:0F:F3:81:DF:32:41:C1:D7:40:76:4B:9C
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 0196C4CBD28A70129D0B36B460BC6E9A729D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 14:00:14 +0000
Manifest this update: Mon 12 May 2025 14:00:14 +0000
Manifest next update: Tue 13 May 2025 14:00:14 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: WnxuGYlwgZWUI7bi4BOcacTX12VmzVgSoTV4yQCQBAI=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:d2:8a:70:12:9d:0b:36:b4:60:bc:6e:9a:72:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: May 12 14:00:14 2025 GMT
Not After : May 13 14:00:14 2025 GMT
Subject: CN=d97cd31d1ab3d0e70ff381df3241c1d740764b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:51:f2:5e:03:f5:28:24:27:47:65:aa:af:
47:1f:12:5a:55:50:2d:64:74:3f:ee:59:ac:9e:ad:
5d:11:1b:1d:e7:f3:2f:98:d9:fc:ae:23:6b:77:97:
89:15:55:d2:28:a2:2f:fc:b9:c1:d0:d7:9f:bf:f1:
0e:1c:05:2f:f3:57:08:19:89:e9:0c:82:d2:b8:be:
ff:ad:ff:f6:cf:9b:f3:9a:fa:b8:4a:37:95:63:2a:
b7:4c:35:7f:c1:8f:5e:9a:71:9b:8e:fe:72:8b:07:
d2:b9:4d:33:04:93:c3:18:2b:16:d3:1e:e2:26:13:
89:e4:61:92:30:01:33:b8:08:a1:5a:46:f3:a9:1f:
dd:0e:0a:6e:0a:5b:c1:0c:8a:81:23:39:7b:29:91:
5c:22:6a:86:39:0f:9b:4e:dd:be:76:21:71:e7:41:
9d:00:94:a9:79:00:fb:b2:d1:5e:6b:44:d8:60:49:
43:a8:84:c7:0a:fa:0c:87:46:51:b1:bf:f6:47:1a:
ef:61:37:3c:35:84:26:a4:cc:a4:b2:f7:35:73:5e:
87:24:7c:d4:ce:2f:bd:4f:e3:1e:65:6e:c0:ec:cf:
6b:f3:f4:be:1b:21:4f:4c:3a:23:c5:59:33:35:35:
e0:62:7d:05:0f:67:40:f6:62:6d:c4:86:53:3f:e7:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:D3:1D:1A:B3:D0:E7:0F:F3:81:DF:32:41:C1:D7:40:76:4B:9C
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e6:3a:a4:a5:9a:da:e0:65:ab:28:d9:8d:f5:0c:01:31:00:
74:42:ac:fa:35:0c:ed:28:fa:da:e8:56:02:89:b2:c5:6b:96:
2d:a9:a4:af:25:2d:8e:71:ef:ba:bf:f2:46:c9:ed:13:af:dd:
a4:3a:3e:0c:c1:e7:ac:25:ad:d3:5f:05:5e:81:9e:f6:06:be:
0e:93:5b:1e:f3:97:30:da:08:17:e8:65:bd:85:4b:b2:60:fe:
8d:a1:a4:d6:f3:5c:b1:17:ff:0c:e8:26:76:ec:79:5c:04:56:
83:0e:ea:e8:12:25:d9:a4:8a:e2:69:86:e2:e3:52:a9:83:63:
ae:75:14:5e:ac:ae:04:ec:16:08:e5:78:04:07:f4:cf:9b:46:
93:7b:0b:e3:20:83:0e:11:83:27:1d:87:7d:c8:2f:86:5c:4e:
a7:12:71:65:f9:02:11:0e:1f:b6:ea:d7:94:32:4d:44:59:9c:
57:72:ca:3f:8a:a2:78:12:5d:27:65:f0:8c:06:32:26:68:b3:
9b:a3:e5:af:fb:bb:ea:a9:9d:68:9c:c9:13:b1:a9:87:d4:de:
cb:f7:b4:ed:84:7c:10:3f:56:a7:66:6d:9e:cd:79:a5:05:e9:
93:86:b8:12:9c:2f:ca:e0:d7:c6:ea:fd:4a:08:6c:89:8d:d7:
13:36:2a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEy9KKcBKdCza0YLxumnKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDA4ZGY4YmM3YTM4M2U5NzZkYmIwM2QyYTBlYjlmZTBk
Nzg2ZTcwHhcNMjUwNTEyMTQwMDE0WhcNMjUwNTEzMTQwMDE0WjAzMTEwLwYDVQQD
EyhkOTdjZDMxZDFhYjNkMGU3MGZmMzgxZGYzMjQxYzFkNzQwNzY0YjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy1R8l4D9SgkJ0dlqq9HHxJaVVAt
ZHQ/7lmsnq1dERsd5/MvmNn8riNrd5eJFVXSKKIv/LnB0Nefv/EOHAUv81cIGYnp
DILSuL7/rf/2z5vzmvq4SjeVYyq3TDV/wY9emnGbjv5yiwfSuU0zBJPDGCsW0x7i
JhOJ5GGSMAEzuAihWkbzqR/dDgpuClvBDIqBIzl7KZFcImqGOQ+bTt2+diFx50Gd
AJSpeQD7stFea0TYYElDqITHCvoMh0ZRsb/2RxrvYTc8NYQmpMyksvc1c16HJHzU
zi+9T+MeZW7A7M9r8/S+GyFPTDojxVkzNTXgYn0FD2dA9mJtxIZTP+dG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl80x0as9DnD/OB3zJBwddAdkucMB8GA1UdIwQY
MBaAFAfQjfi8ejg+l227A9Kg65/g14bnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYt
NTE0ODVmZTIyMmRiLzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYtNTE0ODVmZTIyMmRi
LzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuY6pKWa
2uBlqyjZjfUMATEAdEKs+jUM7Sj62uhWAomyxWuWLamkryUtjnHvur/yRsntE6/d
pDo+DMHnrCWt018FXoGe9ga+DpNbHvOXMNoIF+hlvYVLsmD+jaGk1vNcsRf/DOgm
dux5XARWgw7q6BIl2aSK4mmG4uNSqYNjrnUUXqyuBOwWCOV4BAf0z5tGk3sL4yCD
DhGDJx2HfcgvhlxOpxJxZfkCEQ4fturXlDJNRFmcV3LKP4qieBJdJ2XwjAYyJmiz
m6Plr/u76qmdaJzJE7Gph9Tey/e07YR8ED9Wp2Ztns15pQXpk4a4EpwvyuDXxur9
SghsiY3XEzYqgA==
-----END CERTIFICATE-----
Generated at Mon May 12 19:49:57 2025 by rpki-client