Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier: Wq3AAI2mNWL5pldAoUwQn2eyO4NZAtb4ybMdo/8MNsQ=
Subject key identifier: 8E:70:7D:DE:47:F6:E7:0E:96:A7:73:41:67:E7:65:0A:03:46:AB:81
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 0196B4EB11E7955C44354657EA919D39EB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number: 0152
Signing time: Fri 09 May 2025 12:00:26 +0000
Manifest this update: Fri 09 May 2025 12:00:26 +0000
Manifest next update: Sat 10 May 2025 12:00:26 +0000
Files and hashes: 1: 862AzXPpO4q0TZw2prtOswI6C3U.roa (hash: UvMXTudocwR1LdtSYifhkjBcDLnzk1IebtQXMqpmBY0=)
2: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: 5eJKj3z+qHvcJnZCeRcvcFLi2+vhRvQ/f+UF1XM+Cr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:11:e7:95:5c:44:35:46:57:ea:91:9d:39:eb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: May 9 12:00:26 2025 GMT
Not After : May 10 12:00:26 2025 GMT
Subject: CN=8e707dde47f6e70e96a7734167e7650a0346ab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:5e:f5:69:80:b9:7c:ee:44:75:22:2d:fd:
19:eb:dc:38:89:54:03:78:45:8d:f8:96:f5:bd:7c:
02:9d:89:82:2c:f0:dc:07:76:51:ee:c1:4e:9c:36:
9a:91:32:b7:62:82:50:e3:f3:da:ae:58:c4:5a:86:
99:76:5a:42:a3:91:0c:0e:d7:68:07:d7:ca:1a:b9:
f1:d8:d0:7c:15:08:8f:00:16:5a:58:59:07:09:41:
c9:f9:eb:d9:69:6b:17:50:33:56:bd:e4:23:df:9f:
89:a1:fc:d7:ac:99:b5:fd:d7:f8:d3:41:a1:95:05:
99:89:3a:fe:81:78:19:6a:77:5e:70:89:9d:c0:cc:
05:40:8d:ad:4b:df:ba:a4:10:66:90:d2:40:4c:0d:
f7:22:53:6b:3b:43:21:e5:d0:a8:91:95:b1:fc:61:
32:3a:a2:db:d2:f3:b6:fc:a7:c8:dc:c5:55:d2:34:
fb:00:95:e9:b1:b9:3b:ee:96:ea:0e:62:08:d9:ad:
86:a0:e1:f4:b8:73:20:9e:8f:96:fa:9c:3e:1b:4c:
0b:44:b5:35:83:5a:d7:c1:c4:09:e9:46:1c:a4:42:
d9:b1:2a:05:bd:ae:e8:31:15:f5:32:2b:9f:b0:14:
93:29:d4:b0:77:2e:04:b3:1f:cb:65:88:86:27:ed:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:7D:DE:47:F6:E7:0E:96:A7:73:41:67:E7:65:0A:03:46:AB:81
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:03:2c:2f:29:41:9d:12:93:f3:19:17:4b:92:8b:c3:fd:
24:ea:02:5b:6f:af:32:91:b0:98:1b:6c:88:e4:bf:ec:b7:d1:
33:08:cb:e7:2a:5c:90:16:ae:a7:d5:9e:d2:22:36:05:a1:e2:
4c:cb:54:77:2a:36:b3:e0:3a:be:50:93:18:9c:e3:09:1d:0b:
56:2a:10:33:8d:59:08:be:06:c8:04:d8:8d:97:de:bf:72:32:
67:c6:e6:d8:72:02:d2:1f:01:e0:67:ef:f9:a6:60:3f:f5:ed:
81:f3:67:5b:2e:98:0f:29:4a:24:ea:d5:05:7e:79:4e:6e:c8:
89:3d:70:13:d5:6a:bd:d3:33:67:c2:f6:bd:99:1f:5f:da:0b:
13:f8:86:8a:ce:35:8a:95:30:b5:c4:3d:ca:a2:91:bb:9f:cd:
2d:01:02:79:21:12:18:e4:56:3f:a7:61:d9:df:97:1e:fd:7e:
0b:b9:7a:02:61:81:dd:6e:6d:d3:1d:85:e0:c7:d1:56:50:4f:
09:d4:a5:df:fa:15:02:1a:dc:ed:c4:01:4d:b5:f2:84:aa:be:
40:bd:26:42:65:fb:37:73:c1:1d:2a:33:3a:10:2a:ba:ad:b4:
9e:07:e5:48:72:19:6d:0d:7f:ca:6b:91:92:75:bd:e9:9d:6a:
71:48:77:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa06xHnlVxENUZX6pGdOeuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWZiMjRjZTY3YzIxMTI5N2IwNjVjNjdmMWI4MjA5Yjk5
NDRiMGYwHhcNMjUwNTA5MTIwMDI2WhcNMjUwNTEwMTIwMDI2WjAzMTEwLwYDVQQD
Eyg4ZTcwN2RkZTQ3ZjZlNzBlOTZhNzczNDE2N2U3NjUwYTAzNDZhYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKNe9WmAuXzuRHUiLf0Z69w4iVQD
eEWN+Jb1vXwCnYmCLPDcB3ZR7sFOnDaakTK3YoJQ4/ParljEWoaZdlpCo5EMDtdo
B9fKGrnx2NB8FQiPABZaWFkHCUHJ+evZaWsXUDNWveQj35+JofzXrJm1/df400Gh
lQWZiTr+gXgZandecImdwMwFQI2tS9+6pBBmkNJATA33IlNrO0Mh5dCokZWx/GEy
OqLb0vO2/KfI3MVV0jT7AJXpsbk77pbqDmII2a2GoOH0uHMgno+W+pw+G0wLRLU1
g1rXwcQJ6UYcpELZsSoFva7oMRX1MiufsBSTKdSwdy4Esx/LZYiGJ+2eCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5wfd5H9ucOlqdzQWfnZQoDRquBMB8GA1UdIwQY
MBaAFPafskzmfCESl7Blxn8bggm5lEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMt
OWU1MTM4ZTEyMGM5LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMtOWU1MTM4ZTEyMGM5
LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidIDLC8p
QZ0Sk/MZF0uSi8P9JOoCW2+vMpGwmBtsiOS/7LfRMwjL5ypckBaup9We0iI2BaHi
TMtUdyo2s+A6vlCTGJzjCR0LVioQM41ZCL4GyATYjZfev3IyZ8bm2HIC0h8B4Gfv
+aZgP/XtgfNnWy6YDylKJOrVBX55Tm7IiT1wE9VqvdMzZ8L2vZkfX9oLE/iGis41
ipUwtcQ9yqKRu5/NLQECeSESGORWP6dh2d+XHv1+C7l6AmGB3W5t0x2F4MfRVlBP
CdSl3/oVAhrc7cQBTbXyhKq+QL0mQmX7N3PBHSozOhAquq20ngflSHIZbQ1/ymuR
knW96Z1qcUh3yA==
-----END CERTIFICATE-----
Generated at Fri May 9 20:35:56 2025 by rpki-client