Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: W36AZny63TryZufslK43xWxJNmGweThhHHiYTTrSKCM=
Subject key identifier: E5:AD:72:71:0E:89:46:96:85:73:10:E7:B5:98:B9:9E:A5:E1:7D:B8
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 0196BCA4B1FDA625D54DC32F2F889EB04FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 07FE
Signing time: Sun 11 May 2025 00:00:32 +0000
Manifest this update: Sun 11 May 2025 00:00:32 +0000
Manifest next update: Mon 12 May 2025 00:00:32 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: tS4Ryh86pC52i4VGcXo0sRxpfQ7CD+cOxGVQ92aSKbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:b1:fd:a6:25:d5:4d:c3:2f:2f:88:9e:b0:4f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: May 11 00:00:32 2025 GMT
Not After : May 12 00:00:32 2025 GMT
Subject: CN=e5ad72710e894696857310e7b598b99ea5e17db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:7d:07:44:11:4e:08:72:50:05:f4:89:8f:
e4:4e:d0:83:d1:e3:f7:15:a0:b6:cf:90:11:ac:99:
14:30:c6:0c:54:5b:f3:39:0c:64:de:37:36:48:f5:
05:5b:de:b9:9d:b8:05:82:09:5d:5e:f6:8d:a9:b8:
e3:bc:76:f8:2c:41:ca:87:03:e3:39:18:84:66:b6:
c4:67:5d:fe:b6:3b:49:80:da:bb:a4:97:f3:73:f0:
e0:09:5b:d3:69:84:c5:75:c2:f3:7f:1e:e8:78:5b:
4b:80:30:67:d1:36:f4:89:97:8b:18:2d:9a:a1:75:
3f:e1:b0:17:be:21:f3:b8:3a:63:de:be:08:83:a5:
da:dd:d5:71:e6:44:32:bf:69:4c:f0:d6:26:76:69:
a0:75:84:e1:98:30:0e:0c:60:9d:d1:3d:62:cf:01:
fc:48:e5:7f:7b:56:b5:25:db:78:90:44:ab:3a:ab:
b7:39:b9:36:b5:11:51:b8:15:ee:9a:a4:a3:1e:e9:
bf:6e:e8:e9:6c:92:5d:24:f8:7b:32:e7:4d:26:4b:
d9:22:38:14:91:09:9f:93:e8:36:bc:04:46:a4:56:
fe:a2:58:82:0c:17:83:be:0b:11:11:b0:5d:a6:f5:
30:fe:bf:0b:09:f4:7b:33:db:b4:6c:34:7b:54:55:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:72:71:0E:89:46:96:85:73:10:E7:B5:98:B9:9E:A5:E1:7D:B8
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8f:35:1a:75:42:4f:d9:ff:12:9a:c3:39:52:4f:29:33:d8:
ed:27:2c:77:71:f0:47:37:08:68:d5:d8:75:79:90:a6:07:30:
21:3c:2c:e3:71:9a:ba:7f:a6:ef:e2:92:a4:59:f8:1a:e5:77:
df:d2:9f:89:ff:c6:a3:0b:9c:5a:08:3c:7a:fb:32:bf:84:e7:
64:6a:f8:29:e6:a6:85:04:fd:11:5c:00:2a:ee:f8:44:94:6c:
1e:d5:ae:f0:60:91:32:f4:de:90:ed:52:6e:da:3d:15:2f:2a:
be:35:68:69:13:4d:14:43:52:4f:8c:af:cd:6e:1d:6d:2d:84:
f4:6b:fa:aa:79:4e:29:0d:64:67:88:86:82:16:9a:21:8a:46:
8a:e2:44:6b:91:46:8b:95:f2:29:a5:29:a4:d0:a6:cf:e5:ce:
77:6c:ca:a1:4f:13:00:7e:c2:26:9f:c2:42:c7:47:ab:ba:83:
95:1c:ac:37:a4:f5:da:88:ed:4d:c0:ae:8f:ad:4f:e6:dd:bd:
7d:fe:f8:d8:8a:b7:f5:4b:d6:85:1b:9e:cc:76:44:e8:da:52:
aa:d0:b6:dc:68:aa:8a:db:28:b2:dd:07:d9:e9:55:fb:ae:76:
80:dd:f9:1c:21:e8:1e:09:2c:0d:a1:0d:19:bd:e8:da:6a:39:
00:9e:f7:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pLH9piXVTcMvL4iesE/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5
NDJhYmQwHhcNMjUwNTExMDAwMDMyWhcNMjUwNTEyMDAwMDMyWjAzMTEwLwYDVQQD
EyhlNWFkNzI3MTBlODk0Njk2ODU3MzEwZTdiNTk4Yjk5ZWE1ZTE3ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuV9B0QRTghyUAX0iY/kTtCD0eP3
FaC2z5ARrJkUMMYMVFvzOQxk3jc2SPUFW965nbgFggldXvaNqbjjvHb4LEHKhwPj
ORiEZrbEZ13+tjtJgNq7pJfzc/DgCVvTaYTFdcLzfx7oeFtLgDBn0Tb0iZeLGC2a
oXU/4bAXviHzuDpj3r4Ig6Xa3dVx5kQyv2lM8NYmdmmgdYThmDAODGCd0T1izwH8
SOV/e1a1Jdt4kESrOqu3Obk2tRFRuBXumqSjHum/bujpbJJdJPh7MudNJkvZIjgU
kQmfk+g2vARGpFb+oliCDBeDvgsREbBdpvUw/r8LCfR7M9u0bDR7VFXj+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWtcnEOiUaWhXMQ57WYuZ6l4X24MB8GA1UdIwQY
MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt
Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1
LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVI81GnVC
T9n/EprDOVJPKTPY7Scsd3HwRzcIaNXYdXmQpgcwITws43Gaun+m7+KSpFn4GuV3
39Kfif/GowucWgg8evsyv4TnZGr4KeamhQT9EVwAKu74RJRsHtWu8GCRMvTekO1S
bto9FS8qvjVoaRNNFENST4yvzW4dbS2E9Gv6qnlOKQ1kZ4iGghaaIYpGiuJEa5FG
i5XyKaUppNCmz+XOd2zKoU8TAH7CJp/CQsdHq7qDlRysN6T12ojtTcCuj61P5t29
ff742Iq39UvWhRuezHZE6NpSqtC23Giqitsost0H2elV+652gN35HCHoHgksDaEN
Gb3o2mo5AJ73IQ==
-----END CERTIFICATE-----
Generated at Sun May 11 08:49:53 2025 by rpki-client