Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: 4OZqZbNzhOSTawTkjcG+CxBfXT/eOrVZwSIeKduts48=
Subject key identifier: 65:70:31:DA:4E:E8:B8:FA:35:11:23:9C:3A:3B:F7:02:44:C9:1D:14
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 0196CBAA359DB701B49CB076210185D2F87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 1316
Signing time: Tue 13 May 2025 22:00:51 +0000
Manifest this update: Tue 13 May 2025 22:00:51 +0000
Manifest next update: Wed 14 May 2025 22:00:51 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: LzSJLn0ac6oc4ES1U3l6eK/D1Lt0o/dvpL1/xWmLUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:35:9d:b7:01:b4:9c:b0:76:21:01:85:d2:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: May 13 22:00:51 2025 GMT
Not After : May 14 22:00:51 2025 GMT
Subject: CN=657031da4ee8b8fa3511239c3a3bf70244c91d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:68:b6:9e:eb:67:9f:52:db:b3:dc:04:2b:
d1:83:6a:05:fc:75:a7:93:5c:ab:70:f0:b7:08:c3:
32:d7:0f:4b:78:79:66:cc:8d:e1:1b:25:9b:c8:ee:
12:45:b5:10:fe:c5:29:cd:75:1f:28:23:cc:16:10:
6d:da:38:f7:20:ae:25:e0:88:10:50:39:ca:4d:a4:
ee:0c:73:7f:2c:3b:4d:56:08:20:6e:77:7c:2d:be:
8f:35:78:05:fa:b7:d4:70:d4:9e:c1:7a:39:d0:5d:
3b:e1:b1:64:78:1b:e4:21:42:01:9c:fc:a7:48:41:
d2:cc:1e:e6:28:4e:b4:cb:b9:f9:d6:ac:c9:d4:36:
94:67:b8:15:9f:8a:59:12:12:7b:2c:d8:22:9e:a0:
f3:41:e3:48:7e:a0:96:d9:c1:44:f6:e7:ae:a1:85:
13:a2:f1:27:cc:fb:12:68:b7:4a:0d:73:df:c7:21:
98:51:ed:f6:25:7e:c8:77:08:20:f7:db:2f:3c:dc:
42:93:09:d3:40:39:5f:3c:7e:a5:c1:ae:9d:3c:28:
52:56:92:90:b3:ec:51:c5:bf:85:34:ad:f4:ec:b8:
14:ed:4f:46:45:65:fe:2b:c5:f2:7c:ea:75:54:f4:
f8:1c:60:48:0b:9c:88:01:be:b3:82:16:85:58:73:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:31:DA:4E:E8:B8:FA:35:11:23:9C:3A:3B:F7:02:44:C9:1D:14
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:84:b9:93:3f:6e:1c:6c:e9:35:67:3c:8a:2c:f0:73:47:20:
56:7c:6f:e7:d8:70:6a:cb:52:d1:a4:04:c7:98:9e:67:18:e6:
55:bb:0e:4d:0a:4b:74:e1:61:7b:a8:72:b6:56:3c:83:cf:05:
8d:29:0b:d8:7e:b1:16:50:73:d3:38:86:12:13:9d:3d:2f:57:
c1:e8:bf:9c:ca:0c:31:17:b4:99:5c:c0:32:92:64:89:f9:dc:
b4:48:3d:3c:7a:19:6d:26:69:1a:2a:51:d2:1a:57:87:e8:e7:
1a:fb:93:85:5f:4b:6d:17:f9:e3:22:1d:ab:7c:93:64:e6:23:
69:3f:58:2f:65:68:a4:a5:9f:71:54:83:88:36:f5:df:f5:d6:
fc:a9:07:e3:f0:41:df:ee:70:96:22:20:f2:d2:06:47:9a:2f:
b8:b6:f5:93:2e:4c:72:65:57:49:db:fc:33:f9:e7:4c:23:6e:
fb:ce:92:be:6f:ef:64:6e:f3:b2:27:a5:43:cf:31:1b:53:d0:
89:2a:9a:73:4b:ea:ec:fa:b7:5d:80:68:4b:3e:82:4e:71:02:
a2:de:be:99:bd:38:3a:34:5d:40:70:5a:17:df:ca:75:0f:c9:
18:1a:5f:91:a1:7e:b5:6f:20:32:eb:c6:e2:b2:04:ab:c2:b9:
a3:c8:6a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLqjWdtwG0nLB2IQGF0vh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGZmYzhiZGI4NDQ5NzBiOGUyOGI5YjRiZTZmMmMwNmRm
ZDc5ODUwHhcNMjUwNTEzMjIwMDUxWhcNMjUwNTE0MjIwMDUxWjAzMTEwLwYDVQQD
Eyg2NTcwMzFkYTRlZThiOGZhMzUxMTIzOWMzYTNiZjcwMjQ0YzkxZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoBotp7rZ59S27PcBCvRg2oF/HWn
k1yrcPC3CMMy1w9LeHlmzI3hGyWbyO4SRbUQ/sUpzXUfKCPMFhBt2jj3IK4l4IgQ
UDnKTaTuDHN/LDtNVgggbnd8Lb6PNXgF+rfUcNSewXo50F074bFkeBvkIUIBnPyn
SEHSzB7mKE60y7n51qzJ1DaUZ7gVn4pZEhJ7LNginqDzQeNIfqCW2cFE9ueuoYUT
ovEnzPsSaLdKDXPfxyGYUe32JX7Idwgg99svPNxCkwnTQDlfPH6lwa6dPChSVpKQ
s+xRxb+FNK307LgU7U9GRWX+K8XyfOp1VPT4HGBIC5yIAb6zghaFWHOreQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVwMdpO6Lj6NREjnDo79wJEyR0UMB8GA1UdIwQY
MBaAFJvf/IvbhElwuOKLm0vm8sBt/XmFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMt
MDUzZjNkZmMxNTIxLzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMtMDUzZjNkZmMxNTIx
LzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYS5kz9u
HGzpNWc8iizwc0cgVnxv59hwastS0aQEx5ieZxjmVbsOTQpLdOFhe6hytlY8g88F
jSkL2H6xFlBz0ziGEhOdPS9Xwei/nMoMMRe0mVzAMpJkifnctEg9PHoZbSZpGipR
0hpXh+jnGvuThV9LbRf54yIdq3yTZOYjaT9YL2VopKWfcVSDiDb13/XW/KkH4/BB
3+5wliIg8tIGR5ovuLb1ky5McmVXSdv8M/nnTCNu+86Svm/vZG7zsielQ88xG1PQ
iSqac0vq7Pq3XYBoSz6CTnECot6+mb04OjRdQHBaF9/KdQ/JGBpfkaF+tW8gMuvG
4rIEq8K5o8hqGQ==
-----END CERTIFICATE-----
Generated at Wed May 14 02:37:48 2025 by rpki-client