Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: vk80IfG9VK9Nc3x3uWtIf2JvLZcsyXlQk51JfJDwkwA=
Subject key identifier: 9F:6F:DC:57:9F:17:6D:2B:82:0D:8D:45:48:6C:EB:D9:30:3A:02:80
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 0196BE255FB6E8B2DAC7E8D3CEA17E06B472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 0233
Signing time: Sun 11 May 2025 07:00:42 +0000
Manifest this update: Sun 11 May 2025 07:00:42 +0000
Manifest next update: Mon 12 May 2025 07:00:42 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: rEGu/T0neORNiCNAHb9yJc2qc0SfibYzczwEzAivWtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:5f:b6:e8:b2:da:c7:e8:d3:ce:a1:7e:06:b4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: May 11 07:00:42 2025 GMT
Not After : May 12 07:00:42 2025 GMT
Subject: CN=9f6fdc579f176d2b820d8d45486cebd9303a0280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:a1:81:1c:f8:69:b0:9f:21:c5:f3:89:d0:
45:da:bc:eb:2d:94:33:23:ce:f9:ae:bd:77:e7:7d:
16:e7:44:2c:8f:06:68:b7:ac:8f:bf:b5:47:fa:c1:
b4:48:6e:3a:51:03:15:94:7f:13:bd:1f:1e:51:92:
a7:f9:d3:82:35:ee:6b:81:b7:f1:a3:80:a6:57:ce:
ba:7f:b5:f3:3c:33:69:4d:d2:c1:7b:d7:85:27:16:
52:ca:1f:a5:b7:40:c3:4a:af:c7:01:96:ab:d9:7f:
de:fc:ce:58:42:e8:35:38:2d:93:d6:d1:99:02:8e:
c8:bd:8e:f6:0b:92:3a:e5:f0:21:3f:a7:3e:21:d0:
5e:62:2f:75:6a:5d:c4:57:95:30:2b:60:9e:2d:05:
fd:bc:52:4e:89:04:bf:32:dd:87:cd:ee:ea:d4:0d:
f7:fc:7f:81:cc:d6:fe:09:59:b5:17:15:4b:04:1c:
d0:1e:f1:6d:38:70:b6:52:2d:7d:c5:bd:dd:59:75:
98:52:23:f5:6b:f8:09:00:4f:ef:e1:8e:79:7f:c5:
d4:88:95:7c:f7:4f:10:b8:d4:6d:99:44:d1:d9:4f:
f5:44:be:2b:db:bf:10:5a:b3:53:63:32:ea:f5:e3:
4e:1d:21:e8:4b:d3:eb:90:c9:29:b8:f2:51:29:5f:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:DC:57:9F:17:6D:2B:82:0D:8D:45:48:6C:EB:D9:30:3A:02:80
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:14:27:fd:a2:2f:a0:fb:82:8f:e2:3f:e2:73:37:4e:65:88:
98:39:38:59:0d:68:80:e3:37:13:1e:e6:cf:ce:fd:87:13:d6:
88:f4:36:d4:ab:bd:d1:78:bb:3c:97:f6:50:16:59:de:7c:9b:
bf:3f:29:4e:5b:b6:81:17:1d:5e:4a:ff:58:75:1f:aa:4a:5c:
ce:d7:22:bc:c8:3a:6f:2f:83:77:43:0b:a1:35:ea:8e:11:cd:
a1:9a:7e:10:b0:7d:a7:ee:b8:01:4f:75:66:ad:38:ce:90:5f:
6c:2b:00:37:08:6c:11:84:bd:95:9a:a6:bf:85:d4:c3:7b:cc:
3e:59:d0:b7:99:5c:ab:45:88:ca:5b:45:77:f9:28:1c:07:14:
3f:d5:cf:bb:b6:a0:38:55:38:cc:24:a5:7f:e6:cf:fc:5e:43:
6a:07:c4:5a:92:02:94:36:11:d2:eb:c0:b7:5e:02:93:65:31:
fb:ac:6c:af:66:a7:2b:c6:1f:dd:48:b8:48:77:6a:76:5b:c1:
62:94:f8:56:68:31:c9:8f:e3:7a:d6:aa:d5:db:2d:5b:5b:ac:
bb:6d:e3:cd:db:6d:25:1b:32:c8:61:a4:b1:7c:1a:43:3b:33:
19:44:90:4a:06:25:a7:c6:f3:b1:6d:c7:e8:7f:46:59:ff:44:
38:6f:1a:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JV+26LLax+jTzqF+BrRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2N2Q2N2RhODg2MGI4MzIyYzRmMjA0ZDYxMWIwMDYxMzhm
MWIzOTEwHhcNMjUwNTExMDcwMDQyWhcNMjUwNTEyMDcwMDQyWjAzMTEwLwYDVQQD
Eyg5ZjZmZGM1NzlmMTc2ZDJiODIwZDhkNDU0ODZjZWJkOTMwM2EwMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqahgRz4abCfIcXzidBF2rzrLZQz
I875rr13530W50QsjwZot6yPv7VH+sG0SG46UQMVlH8TvR8eUZKn+dOCNe5rgbfx
o4CmV866f7XzPDNpTdLBe9eFJxZSyh+lt0DDSq/HAZar2X/e/M5YQug1OC2T1tGZ
Ao7IvY72C5I65fAhP6c+IdBeYi91al3EV5UwK2CeLQX9vFJOiQS/Mt2Hze7q1A33
/H+BzNb+CVm1FxVLBBzQHvFtOHC2Ui19xb3dWXWYUiP1a/gJAE/v4Y55f8XUiJV8
908QuNRtmUTR2U/1RL4r278QWrNTYzLq9eNOHSHoS9PrkMkpuPJRKV/jvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9v3FefF20rgg2NRUhs69kwOgKAMB8GA1UdIwQY
MBaAFPZ9Z9qIYLgyLE8gTWEbAGE48bORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQt
YmYyYjhiNDg0NjVmLzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQtYmYyYjhiNDg0NjVm
LzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRQn/aIv
oPuCj+I/4nM3TmWImDk4WQ1ogOM3Ex7mz879hxPWiPQ21Ku90Xi7PJf2UBZZ3nyb
vz8pTlu2gRcdXkr/WHUfqkpcztcivMg6by+Dd0MLoTXqjhHNoZp+ELB9p+64AU91
Zq04zpBfbCsANwhsEYS9lZqmv4XUw3vMPlnQt5lcq0WIyltFd/koHAcUP9XPu7ag
OFU4zCSlf+bP/F5DagfEWpIClDYR0uvAt14Ck2Ux+6xsr2anK8Yf3Ui4SHdqdlvB
YpT4VmgxyY/jetaq1dstW1usu23jzdttJRsyyGGksXwaQzszGUSQSgYlp8bzsW3H
6H9GWf9EOG8acw==
-----END CERTIFICATE-----
Generated at Sun May 11 12:33:29 2025 by rpki-client