Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: 34QD5lqoQ8h0VfOBIUvIYB22b/FWn1viSLXRQ+7H9Yo=
Subject key identifier: 9D:3E:E7:F1:41:48:1E:10:FE:FA:B4:E2:A6:11:84:9B:64:A7:E0:5D
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 01969F75C1EC9FA6050A4BC80BA8BCD8DA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 1249
Signing time: Mon 05 May 2025 08:00:16 +0000
Manifest this update: Mon 05 May 2025 08:00:16 +0000
Manifest next update: Tue 06 May 2025 08:00:16 +0000
Files and hashes: 1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: kkG+IezJU+gexLjSmf+IsTxA6z/N6bIVlI9ykXfx7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:c1:ec:9f:a6:05:0a:4b:c8:0b:a8:bc:d8:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: May 5 08:00:16 2025 GMT
Not After : May 6 08:00:16 2025 GMT
Subject: CN=9d3ee7f141481e10fefab4e2a611849b64a7e05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:8b:94:01:3f:a4:ed:29:43:06:b7:40:a2:
a2:04:64:12:b0:f8:74:05:7a:20:ef:6b:c3:7a:7e:
b9:b8:5b:ec:bb:d0:c1:34:c0:75:57:ff:75:45:0e:
e9:6d:ef:72:b0:55:0b:f7:8f:fc:65:c2:14:48:13:
0b:79:30:70:e5:bd:2f:86:2a:5d:7f:82:39:3c:1d:
0c:8d:1d:80:95:e1:fc:73:dd:ed:83:60:66:92:6d:
c2:37:22:19:e6:ad:53:46:61:da:ff:50:70:53:01:
b9:39:5d:ee:2b:d5:16:b4:af:b7:9e:d5:fe:97:cb:
95:eb:06:ef:79:a3:49:bf:b9:d7:ce:24:f7:aa:d4:
8c:5f:db:c4:98:11:2d:4f:75:18:4b:08:35:f8:69:
74:c7:8c:5d:6f:58:4b:89:bc:92:13:0f:82:5e:4f:
f6:82:e5:5f:33:bf:34:18:72:30:0e:f4:50:9b:89:
93:d2:4e:c6:f1:28:96:49:42:ad:9e:8a:99:38:7d:
9b:94:19:62:31:2b:e1:5e:f6:60:b3:bb:11:ab:77:
ed:9b:6c:81:ac:a9:85:c1:e2:07:c9:57:8b:05:0a:
02:f5:05:f9:38:da:cc:21:1a:84:f6:d7:31:f5:0e:
7f:63:07:24:17:a9:06:41:cf:d4:c5:96:30:62:c4:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:E7:F1:41:48:1E:10:FE:FA:B4:E2:A6:11:84:9B:64:A7:E0:5D
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a9:d0:be:0b:0b:6d:34:c3:6b:82:43:03:00:64:1c:16:2b:
29:e5:f2:3d:d1:d0:c7:f9:69:55:c1:06:b7:8d:3b:68:8c:32:
10:fc:32:70:92:59:c2:6d:d1:27:27:5a:2d:ca:d6:ac:12:2f:
ae:90:55:9e:e6:18:5b:d3:8c:67:27:7a:b2:11:04:db:39:43:
74:bc:b3:3b:c4:79:56:30:17:35:e6:06:f3:6c:da:e1:75:89:
af:33:65:3f:ab:b8:3c:d5:64:9c:27:bf:92:fb:d4:e0:a4:4c:
38:2e:15:5f:8e:97:01:b4:44:31:67:b9:7a:61:c8:8f:f7:2a:
1d:a3:63:b8:ef:e7:0e:e2:df:ae:88:a1:6a:8a:67:67:44:89:
e5:0f:d1:ed:01:59:51:b5:a8:d3:e1:e7:89:52:3d:f5:e1:8c:
d0:44:0a:b2:27:9c:fd:59:a5:b0:47:73:f8:91:7e:bd:11:36:
1d:35:c4:46:64:b6:78:97:7f:65:07:4a:04:b8:74:87:d8:ab:
1f:01:f0:87:9d:e3:cf:3a:52:b4:70:30:e1:cb:a8:34:91:e9:
7d:1f:0a:a8:f8:36:1d:08:62:91:42:cd:57:14:eb:7a:8c:f7:
31:07:ca:28:84:bb:1c:25:6a:69:26:19:9e:35:fd:31:9c:ef:
54:d8:25:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafdcHsn6YFCkvIC6i82NojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NmZhZTQzZjczZGEzNWZlMWEyZTQyOTY2MmFlMGI5MTc1
MWUzZmIwHhcNMjUwNTA1MDgwMDE2WhcNMjUwNTA2MDgwMDE2WjAzMTEwLwYDVQQD
Eyg5ZDNlZTdmMTQxNDgxZTEwZmVmYWI0ZTJhNjExODQ5YjY0YTdlMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg6LlAE/pO0pQwa3QKKiBGQSsPh0
BXog72vDen65uFvsu9DBNMB1V/91RQ7pbe9ysFUL94/8ZcIUSBMLeTBw5b0vhipd
f4I5PB0MjR2AleH8c93tg2Bmkm3CNyIZ5q1TRmHa/1BwUwG5OV3uK9UWtK+3ntX+
l8uV6wbveaNJv7nXziT3qtSMX9vEmBEtT3UYSwg1+Gl0x4xdb1hLibySEw+CXk/2
guVfM780GHIwDvRQm4mT0k7G8SiWSUKtnoqZOH2blBliMSvhXvZgs7sRq3ftm2yB
rKmFweIHyVeLBQoC9QX5ONrMIRqE9tcx9Q5/YwckF6kGQc/UxZYwYsTgGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0+5/FBSB4Q/vq04qYRhJtkp+BdMB8GA1UdIwQY
MBaAFHdvrkP3PaNf4aLkKWYq4LkXUeP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQt
NGUwY2M1ODE2M2IwLzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQtNGUwY2M1ODE2M2Iw
LzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6nQvgsL
bTTDa4JDAwBkHBYrKeXyPdHQx/lpVcEGt407aIwyEPwycJJZwm3RJydaLcrWrBIv
rpBVnuYYW9OMZyd6shEE2zlDdLyzO8R5VjAXNeYG82za4XWJrzNlP6u4PNVknCe/
kvvU4KRMOC4VX46XAbREMWe5emHIj/cqHaNjuO/nDuLfroihaopnZ0SJ5Q/R7QFZ
UbWo0+HniVI99eGM0EQKsiec/VmlsEdz+JF+vRE2HTXERmS2eJd/ZQdKBLh0h9ir
HwHwh53jzzpStHAw4cuoNJHpfR8KqPg2HQhikULNVxTreoz3MQfKKIS7HCVqaSYZ
njX9MZzvVNgleQ==
-----END CERTIFICATE-----
Generated at Mon May 5 16:29:23 2025 by rpki-client