Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File: _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier: I/UD4aUgloq9iJSpzA5v5efoZxDRJ4J6NAC7wfgbzPc=
Subject key identifier: BE:2A:9A:15:70:8E:5E:24:9C:AD:23:C4:59:1D:9F:77:AA:56:FD:33
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 0196BCA4A927B0D1B512E0F025B2F883FC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number: 0501
Signing time: Sun 11 May 2025 00:00:29 +0000
Manifest this update: Sun 11 May 2025 00:00:29 +0000
Manifest next update: Mon 12 May 2025 00:00:29 +0000
Files and hashes: 1: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (hash: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=)
2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: yEIUxb+El5ILuqEf1iASIaaREl2Orb9KiHq1efC3LGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:a9:27:b0:d1:b5:12:e0:f0:25:b2:f8:83:fc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: May 11 00:00:29 2025 GMT
Not After : May 12 00:00:29 2025 GMT
Subject: CN=be2a9a15708e5e249cad23c4591d9f77aa56fd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:3d:8d:36:81:52:d8:3f:27:05:d3:4f:66:
0f:7c:03:98:6b:46:4e:21:0f:d8:d1:5a:a9:a9:b4:
63:ba:3c:ba:19:7b:3b:fe:66:dd:7f:10:b7:ed:19:
99:0f:fe:d6:1a:49:34:13:fb:74:12:17:56:55:37:
ca:c5:e1:b7:4f:b2:e8:f1:77:e7:09:6c:95:be:a8:
25:6f:a0:7d:c2:fc:cf:49:01:24:8b:59:91:04:0b:
bb:87:d9:87:69:3e:b9:7a:5b:d5:80:7b:1e:5c:a4:
cb:c3:f5:bf:0b:72:68:bd:4f:f2:a1:0f:3f:83:92:
03:91:f2:2f:5d:42:aa:a7:30:08:4e:c7:9c:2e:57:
3e:2a:5c:fb:2a:e0:d5:77:8c:42:0e:66:f8:89:02:
5d:b4:23:49:b6:54:46:ca:5d:59:52:a5:35:bd:6d:
0e:a1:55:33:08:dc:71:a1:7f:d3:69:20:c2:90:a3:
a3:7e:25:6c:74:b0:11:79:02:49:8a:a0:7b:51:90:
05:e3:55:0c:7b:72:d5:80:d9:ce:5f:62:be:42:a5:
2a:0c:8d:cc:4b:3d:2d:d5:cc:f0:a6:af:dc:37:9a:
51:9d:06:60:57:a1:d6:be:a1:f5:cf:55:8c:8f:dc:
49:11:c0:d7:16:4f:40:0f:6a:31:e5:f1:2d:a9:c5:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:9A:15:70:8E:5E:24:9C:AD:23:C4:59:1D:9F:77:AA:56:FD:33
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:60:15:e7:d7:52:7a:cc:1e:2f:ec:c4:53:7c:d2:63:79:7c:
f8:4e:7d:2c:12:cf:0a:26:f0:3e:f5:da:98:2e:f8:0e:9f:9e:
86:b7:3c:fa:25:ce:c5:83:29:82:05:2a:17:75:02:6c:76:8c:
65:51:74:2e:15:95:3b:fd:1b:41:eb:98:a5:f9:2b:5f:ba:de:
d2:f4:e9:8e:ea:77:62:cd:3e:03:dd:39:5d:8f:e5:2b:35:4e:
58:d8:6b:26:0e:9a:6e:c5:af:a7:91:7b:34:dd:5a:c8:2d:26:
dc:b7:94:45:2c:61:61:50:49:bc:b6:32:4f:e7:48:8a:e9:3e:
02:0b:b0:3b:b0:c5:4d:c5:7a:49:8f:42:16:f6:4f:4c:63:9e:
88:42:e6:6e:32:e3:78:91:6e:ef:73:05:0b:7d:3e:43:ee:57:
64:79:b6:07:8d:06:6d:c1:11:cf:cf:22:93:09:5f:e7:23:3f:
3b:14:50:c5:86:b1:74:35:a4:33:89:d1:88:b6:0c:0c:43:63:
45:48:97:ea:f4:0a:f2:49:18:95:7e:e8:1c:cd:9b:fc:d5:5f:
d6:b8:33:0e:c1:9f:4f:d9:9f:87:3b:d8:f0:de:70:2b:90:06:
a4:90:c8:2b:ca:91:93:54:fa:47:7a:fc:24:6e:ea:c0:25:60:
29:2a:1e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pKknsNG1EuDwJbL4g/xyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGU4MTdiZWFlNGMwYTJkNTdmN2ZjM2YwOGM2MjdkNTY1
NDBlN2UwHhcNMjUwNTExMDAwMDI5WhcNMjUwNTEyMDAwMDI5WjAzMTEwLwYDVQQD
EyhiZTJhOWExNTcwOGU1ZTI0OWNhZDIzYzQ1OTFkOWY3N2FhNTZmZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ec9jTaBUtg/JwXTT2YPfAOYa0ZO
IQ/Y0VqpqbRjujy6GXs7/mbdfxC37RmZD/7WGkk0E/t0EhdWVTfKxeG3T7Lo8Xfn
CWyVvqglb6B9wvzPSQEki1mRBAu7h9mHaT65elvVgHseXKTLw/W/C3JovU/yoQ8/
g5IDkfIvXUKqpzAITsecLlc+Klz7KuDVd4xCDmb4iQJdtCNJtlRGyl1ZUqU1vW0O
oVUzCNxxoX/TaSDCkKOjfiVsdLAReQJJiqB7UZAF41UMe3LVgNnOX2K+QqUqDI3M
Sz0t1czwpq/cN5pRnQZgV6HWvqH1z1WMj9xJEcDXFk9AD2ox5fEtqcUf5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4qmhVwjl4knK0jxFkdn3eqVv0zMB8GA1UdIwQY
MBaAFP/egXvq5MCi1X9/w/CMYn1WVA5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjkt
NmNjYTY2ZmQzYzk5LzEvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjktNmNjYTY2ZmQzYzk5
LzEvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGAV59dS
esweL+zEU3zSY3l8+E59LBLPCibwPvXamC74Dp+ehrc8+iXOxYMpggUqF3UCbHaM
ZVF0LhWVO/0bQeuYpfkrX7re0vTpjup3Ys0+A905XY/lKzVOWNhrJg6absWvp5F7
NN1ayC0m3LeURSxhYVBJvLYyT+dIiuk+AguwO7DFTcV6SY9CFvZPTGOeiELmbjLj
eJFu73MFC30+Q+5XZHm2B40GbcERz88ikwlf5yM/OxRQxYaxdDWkM4nRiLYMDENj
RUiX6vQK8kkYlX7oHM2b/NVf1rgzDsGfT9mfhzvY8N5wK5AGpJDIK8qRk1T6R3r8
JG7qwCVgKSoe2A==
-----END CERTIFICATE-----
Generated at Sun May 11 05:14:20 2025 by rpki-client