Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: Ry91n3eb6E4YP/B4lU7VlO0aCR41iHvxEi1l58eeXUI=
Subject key identifier: B7:A1:56:FD:71:FA:60:6A:1A:DD:0C:C5:79:2E:4A:C1:2A:0B:D0:8B
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 0196AFC4994CC77B2977E4821E9CFDA1DF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 1330
Signing time: Thu 08 May 2025 12:00:19 +0000
Manifest this update: Thu 08 May 2025 12:00:19 +0000
Manifest next update: Fri 09 May 2025 12:00:19 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: OeV0z14svdxlSmW0hNJFN4ereKrLCGaSooTreAtxdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:99:4c:c7:7b:29:77:e4:82:1e:9c:fd:a1:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: May 8 12:00:19 2025 GMT
Not After : May 9 12:00:19 2025 GMT
Subject: CN=b7a156fd71fa606a1add0cc5792e4ac12a0bd08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:70:e5:84:d7:4d:7f:8c:b8:b8:08:9b:84:
34:55:78:36:b3:fc:f6:6d:aa:14:a4:2f:9a:a3:ae:
3e:de:f2:ee:bb:84:f9:c4:52:3a:44:ba:78:8e:3e:
3e:ec:9d:94:1b:d1:46:81:16:6a:45:0c:6d:3b:cf:
4e:96:2c:33:87:d3:53:c9:e1:5b:ba:37:c4:b7:cb:
01:4f:55:39:af:d4:66:eb:61:07:b7:18:63:0e:1f:
b1:f1:f7:bd:26:1c:b4:ba:9d:93:fa:1c:33:d5:d4:
c8:40:ec:44:b8:f3:64:a6:f9:9b:42:d3:f2:44:40:
91:44:81:df:e2:e0:f4:5f:91:56:0f:1b:58:7f:76:
73:f0:61:32:7b:35:63:30:f3:34:86:60:a4:02:52:
8c:8d:41:87:0a:97:83:12:7e:fc:81:0c:4b:de:9c:
5e:57:32:9c:e1:f9:dc:08:d9:0e:8c:b3:37:60:9b:
e7:94:64:1b:ee:39:13:4c:02:d8:0e:a0:68:db:e0:
50:6f:ef:a2:5f:76:f2:15:65:7d:c0:bb:a9:07:72:
39:d7:8e:58:86:ed:86:c7:d9:79:95:c1:0d:f3:f0:
6a:59:1e:31:8e:9f:c4:e2:b2:ce:1c:0c:a0:ac:47:
de:52:27:06:5b:e8:9c:f2:0b:49:c4:6f:90:ee:7f:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:56:FD:71:FA:60:6A:1A:DD:0C:C5:79:2E:4A:C1:2A:0B:D0:8B
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:d2:a3:34:6b:59:fa:68:b6:77:a6:64:e5:41:a4:07:3a:
0e:83:85:30:7e:41:19:6c:16:70:27:45:b0:02:17:09:9b:5e:
ab:fe:32:b7:26:f5:94:ab:61:2e:8c:5b:0a:8f:5c:9e:35:df:
99:09:2f:84:b9:d5:f8:1e:29:23:ac:03:8b:32:65:25:93:4d:
ba:bc:9f:5f:3a:9f:74:70:e7:14:c2:b8:e3:ae:51:d2:c7:d0:
49:a9:e5:87:b3:cd:9e:6d:42:07:4a:ea:31:3a:42:e2:08:ff:
56:57:34:e7:aa:69:7f:bf:1f:42:93:ac:e0:6f:54:f9:95:9a:
04:68:41:7a:bc:cb:86:90:04:60:d2:49:68:2e:06:bb:33:f1:
49:5a:aa:04:79:53:9f:08:e0:a5:8e:90:f8:6b:b4:77:78:75:
c9:12:52:d8:21:87:44:a5:ee:85:99:40:d7:99:91:6a:e5:51:
02:4f:58:75:0b:f5:f5:b8:fb:2a:f6:65:7e:6f:32:54:91:f8:
2e:af:26:0e:81:46:96:9b:76:ba:e6:de:53:03:ad:c4:9e:05:
2e:6f:5a:d9:97:c9:25:0c:9b:d4:9b:9c:c2:54:ca:97:3c:14:
a8:a2:a2:97:d0:d6:0d:3a:4c:68:63:c1:ac:47:bf:bd:2f:b7:
e4:40:45:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavxJlMx3spd+SCHpz9od8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDkxNDYyYzRkYzFkZjZhOGEzYTk3YTFhZWU1N2EwY2Mx
NGVmYmEwHhcNMjUwNTA4MTIwMDE5WhcNMjUwNTA5MTIwMDE5WjAzMTEwLwYDVQQD
EyhiN2ExNTZmZDcxZmE2MDZhMWFkZDBjYzU3OTJlNGFjMTJhMGJkMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJxw5YTXTX+MuLgIm4Q0VXg2s/z2
baoUpC+ao64+3vLuu4T5xFI6RLp4jj4+7J2UG9FGgRZqRQxtO89Oliwzh9NTyeFb
ujfEt8sBT1U5r9Rm62EHtxhjDh+x8fe9Jhy0up2T+hwz1dTIQOxEuPNkpvmbQtPy
RECRRIHf4uD0X5FWDxtYf3Zz8GEyezVjMPM0hmCkAlKMjUGHCpeDEn78gQxL3pxe
VzKc4fncCNkOjLM3YJvnlGQb7jkTTALYDqBo2+BQb++iX3byFWV9wLupB3I5145Y
hu2Gx9l5lcEN8/BqWR4xjp/E4rLOHAygrEfeUicGW+ic8gtJxG+Q7n8/pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLehVv1x+mBqGt0MxXkuSsEqC9CLMB8GA1UdIwQY
MBaAFMfZFGLE3B32qKOpehruV6DMFO+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzIt
MzQ5N2Y3ZTJkZTYyLzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzItMzQ5N2Y3ZTJkZTYy
LzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA7SozRr
WfpotnemZOVBpAc6DoOFMH5BGWwWcCdFsAIXCZteq/4ytyb1lKthLoxbCo9cnjXf
mQkvhLnV+B4pI6wDizJlJZNNuryfXzqfdHDnFMK4465R0sfQSanlh7PNnm1CB0rq
MTpC4gj/Vlc056ppf78fQpOs4G9U+ZWaBGhBerzLhpAEYNJJaC4GuzPxSVqqBHlT
nwjgpY6Q+Gu0d3h1yRJS2CGHRKXuhZlA15mRauVRAk9YdQv19bj7KvZlfm8yVJH4
Lq8mDoFGlpt2uubeUwOtxJ4FLm9a2ZfJJQyb1JucwlTKlzwUqKKil9DWDTpMaGPB
rEe/vS+35EBFlA==
-----END CERTIFICATE-----
Generated at Thu May 8 17:30:18 2025 by rpki-client