Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: SPbAVxRL40NwYD9tfsFV04hBVSlFHCon+GMFxzUWBo8=
Subject key identifier: B2:16:1C:BD:02:9F:C6:9D:59:2E:77:61:10:73:2F:7E:81:A3:AA:BD
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 0196CBE182AD3FA677477F2304D87D4907B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 23:01:15 +0000
Manifest this update: Tue 13 May 2025 23:01:15 +0000
Manifest next update: Wed 14 May 2025 23:01:15 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: cBAOrCuiPtK8UPSBqEnzcw7BXaOqX2lW+6WTnPcaUrw=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:82:ad:3f:a6:77:47:7f:23:04:d8:7d:49:07:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: May 13 23:01:15 2025 GMT
Not After : May 14 23:01:15 2025 GMT
Subject: CN=b2161cbd029fc69d592e776110732f7e81a3aabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:c9:1b:7d:c6:6b:46:68:a8:fd:bf:4d:7b:
04:11:7f:5e:51:6b:d7:a0:aa:d9:cd:32:31:58:65:
c8:8d:78:2b:b8:dc:42:43:76:b8:86:db:4e:21:98:
6b:8c:c5:e1:bc:af:1c:ae:57:88:33:56:a6:49:8c:
70:f0:ee:3c:9a:82:38:c6:96:b1:08:00:3a:81:38:
44:72:6d:05:a5:d4:92:c2:04:25:f8:8b:e3:8a:5c:
7f:f4:17:33:9e:0b:72:2b:e6:15:0c:1f:b6:42:0f:
75:e1:1b:e9:de:e9:c6:83:22:2f:49:11:6c:cd:b2:
35:28:cb:8e:54:13:75:8f:85:d8:4a:92:fa:34:7a:
85:79:65:53:f8:e3:84:ba:16:7b:33:74:33:77:3b:
37:17:c1:27:7a:d3:9d:8a:de:58:df:55:bc:63:d5:
e4:3c:4f:fe:ca:89:b4:16:05:99:f5:81:39:83:f3:
30:f2:6e:2a:57:b1:ae:7c:e0:06:40:1d:4a:38:b8:
5c:30:ea:41:75:cc:10:00:08:cb:80:34:00:3c:d6:
e0:66:a0:a5:cf:b8:b5:f5:7f:1f:17:ef:5e:f2:c5:
17:aa:77:fa:bf:9f:6b:fa:de:fd:b6:a0:d8:ef:a8:
9a:b8:b7:69:02:b3:70:79:77:a5:40:c0:50:5b:f7:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:1C:BD:02:9F:C6:9D:59:2E:77:61:10:73:2F:7E:81:A3:AA:BD
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4b:ae:69:16:c7:56:f5:1d:99:99:8a:97:d0:75:19:79:f2:
f7:bb:98:13:aa:21:9d:e7:0d:b2:13:85:8f:c3:23:d3:8e:77:
58:5a:5d:aa:97:47:0c:71:a0:06:df:6d:35:71:d2:68:06:13:
03:ef:b2:90:c8:56:f5:60:a6:2d:9f:1e:52:1a:42:e8:0f:1b:
42:23:14:7a:c0:d6:bb:cb:2f:b1:23:c2:5d:90:c0:27:a2:73:
0f:b1:c4:05:9d:29:27:ec:2d:3d:ce:d8:15:dd:6f:eb:fc:52:
1d:8f:3e:7b:77:e2:b2:0c:d9:c1:a6:21:5e:f7:40:80:d0:fa:
8c:29:f2:3c:78:69:a4:f6:bb:21:8d:6e:35:4f:20:f3:07:3c:
32:32:f5:f9:aa:61:7f:96:b9:4b:54:18:17:ef:68:bf:a3:c0:
f6:1a:37:db:74:65:97:07:ac:07:cf:54:2e:59:f3:ef:3a:f7:
21:35:fc:df:8e:19:cc:68:a0:45:1e:62:50:9b:b9:11:cc:24:
f4:9f:5d:e7:b0:d9:ee:06:c3:3f:76:52:bf:4e:26:36:10:46:
a9:96:20:fd:7d:9f:94:47:3c:ed:55:30:34:f1:e1:1b:87:4d:
59:89:c5:78:ec:2a:e4:2d:d2:56:fe:a9:18:fb:ac:db:2b:d8:
13:1a:c7:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbL4YKtP6Z3R38jBNh9SQe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi
OGU3OTAwHhcNMjUwNTEzMjMwMTE1WhcNMjUwNTE0MjMwMTE1WjAzMTEwLwYDVQQD
EyhiMjE2MWNiZDAyOWZjNjlkNTkyZTc3NjExMDczMmY3ZTgxYTNhYWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PDJG33Ga0ZoqP2/TXsEEX9eUWvX
oKrZzTIxWGXIjXgruNxCQ3a4httOIZhrjMXhvK8crleIM1amSYxw8O48moI4xpax
CAA6gThEcm0FpdSSwgQl+Ivjilx/9BczngtyK+YVDB+2Qg914Rvp3unGgyIvSRFs
zbI1KMuOVBN1j4XYSpL6NHqFeWVT+OOEuhZ7M3Qzdzs3F8EnetOdit5Y31W8Y9Xk
PE/+yom0FgWZ9YE5g/Mw8m4qV7GufOAGQB1KOLhcMOpBdcwQAAjLgDQAPNbgZqCl
z7i19X8fF+9e8sUXqnf6v59r+t79tqDY76iauLdpArNweXelQMBQW/d49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIWHL0Cn8adWS53YRBzL36Bo6q9MB8GA1UdIwQY
MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt
NzE5NDAxYmJjYTJlLzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl
LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEuuaRbH
VvUdmZmKl9B1GXny97uYE6ohnecNshOFj8Mj0453WFpdqpdHDHGgBt9tNXHSaAYT
A++ykMhW9WCmLZ8eUhpC6A8bQiMUesDWu8svsSPCXZDAJ6JzD7HEBZ0pJ+wtPc7Y
Fd1v6/xSHY8+e3fisgzZwaYhXvdAgND6jCnyPHhppPa7IY1uNU8g8wc8MjL1+aph
f5a5S1QYF+9ov6PA9ho323RllwesB89ULlnz7zr3ITX8344ZzGigRR5iUJu5Ecwk
9J9d57DZ7gbDP3ZSv04mNhBGqZYg/X2flEc87VUwNPHhG4dNWYnFeOwq5C3SVv6p
GPus2yvYExrHgg==
-----END CERTIFICATE-----
Generated at Wed May 14 01:12:05 2025 by rpki-client