Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier: KtTo+t5mPab489peLu02vW4DEHSw7UUqLczLCtyMsd0=
Subject key identifier: 5A:53:CC:7B:56:55:5E:26:32:D9:E1:D5:C2:B1:7E:24:06:F3:35:A0
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial: 0196B6A303390B2604104186331239D637E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number: D6
Signing time: Fri 09 May 2025 20:00:58 +0000
Manifest this update: Fri 09 May 2025 20:00:58 +0000
Manifest next update: Sat 10 May 2025 20:00:58 +0000
Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: aZCdxfpWM1JQijG5lHGqd/P/kkqReToMLYaiYJoN7yI=)
2: n8NfpgAijMpzCpX65rpklB3Tlmg.roa (hash: tLj+vrFwuOUlrlwjfJTF2xymSSPYF1wq3UkCF0leCFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a3:03:39:0b:26:04:10:41:86:33:12:39:d6:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Validity
Not Before: May 9 20:00:58 2025 GMT
Not After : May 10 20:00:58 2025 GMT
Subject: CN=5a53cc7b56555e2632d9e1d5c2b17e2406f335a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:94:fa:fb:0d:3a:06:31:c0:cd:b8:66:1b:
2c:c5:64:c4:de:b3:a3:45:ad:21:bf:d4:37:29:a2:
8f:df:23:e6:7a:e4:a2:93:6c:ae:d1:98:aa:8a:c4:
ac:dc:b1:58:fb:61:34:63:26:0a:b6:5c:15:75:d6:
18:14:49:ba:3d:cf:d8:ed:c9:c0:7b:11:66:99:73:
f1:97:da:bc:dc:db:3e:ee:95:79:74:27:41:7c:ba:
8b:3d:30:b7:99:5c:8b:52:8b:95:cc:4c:6c:a6:bd:
4c:4f:9a:e6:67:3e:90:b7:a8:f0:13:98:86:d3:9d:
44:e2:6f:9d:50:56:f0:5a:f4:7f:e4:0e:02:d6:dd:
2a:36:be:84:e1:ac:0d:2b:24:64:b1:82:05:be:17:
4d:4a:17:18:35:0c:1d:df:f9:58:c0:54:a8:11:3a:
0d:f3:16:78:99:83:96:86:88:ec:70:be:d9:9f:63:
1a:5f:3a:98:51:15:df:27:33:ab:fb:fb:46:c0:8a:
51:28:77:e6:87:f4:a3:20:be:37:71:63:15:bf:b8:
11:a1:ca:2e:0e:9a:a1:d8:d8:b1:69:f5:b3:8c:70:
18:fe:11:cb:46:48:be:6c:72:1c:32:4c:a9:96:fe:
b9:b8:a3:35:98:c5:85:81:27:3d:e9:43:33:e9:98:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:CC:7B:56:55:5E:26:32:D9:E1:D5:C2:B1:7E:24:06:F3:35:A0
X509v3 Authority Key Identifier:
keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:28:44:00:5f:f8:ad:6e:08:a6:9a:6b:13:2e:9f:52:70:a3:
ab:41:80:a2:9d:84:4e:f7:88:e1:5a:68:cd:33:e0:6a:68:21:
67:f8:50:d3:0f:19:b9:bb:f9:ff:f2:e3:ac:c8:84:44:39:54:
03:0e:1d:48:b3:c8:0f:eb:85:b7:b9:e0:8a:3c:0d:2b:7c:ab:
d7:3a:13:68:29:87:22:fd:f2:9d:27:ef:ae:df:3c:c3:31:db:
79:e5:19:d9:87:8c:12:83:6a:81:26:ae:be:c2:73:67:e9:ba:
fa:f9:b0:09:c1:82:a9:c3:ee:4d:16:e1:dc:31:ac:20:17:b1:
f4:95:48:f8:f7:f6:1a:ed:52:ef:0a:8c:72:4e:7d:64:69:5b:
30:47:ae:3f:8f:0c:77:4b:95:e6:e3:1c:c7:a4:ff:a0:33:cc:
65:8d:68:ed:25:40:9b:bf:af:2d:17:42:81:d9:2b:37:34:f5:
d1:69:c8:4c:df:68:6d:b9:3c:51:78:1e:eb:dc:1d:d7:17:8f:
81:8d:0f:f3:67:76:ee:3e:d3:df:80:fa:92:15:44:19:99:16:
fe:b0:74:30:b5:49:b3:e0:56:14:ba:e6:58:16:71:31:84:20:
00:83:cf:ea:ca:29:24:c7:42:55:f4:e1:33:6e:d8:0c:e9:32:
1e:71:1d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2owM5CyYEEEGGMxI51jfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODQwYWRmODRmYjBiNzU4ZWJhOGE1YTEzNWE5ODAzOTNl
OGJmNzMwHhcNMjUwNTA5MjAwMDU4WhcNMjUwNTEwMjAwMDU4WjAzMTEwLwYDVQQD
Eyg1YTUzY2M3YjU2NTU1ZTI2MzJkOWUxZDVjMmIxN2UyNDA2ZjMzNWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr+U+vsNOgYxwM24ZhssxWTE3rOj
Ra0hv9Q3KaKP3yPmeuSik2yu0ZiqisSs3LFY+2E0YyYKtlwVddYYFEm6Pc/Y7cnA
exFmmXPxl9q83Ns+7pV5dCdBfLqLPTC3mVyLUouVzExspr1MT5rmZz6Qt6jwE5iG
051E4m+dUFbwWvR/5A4C1t0qNr6E4awNKyRksYIFvhdNShcYNQwd3/lYwFSoEToN
8xZ4mYOWhojscL7Zn2MaXzqYURXfJzOr+/tGwIpRKHfmh/SjIL43cWMVv7gRocou
Dpqh2NixafWzjHAY/hHLRki+bHIcMkyplv65uKM1mMWFgSc96UMz6ZgXqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpTzHtWVV4mMtnh1cKxfiQG8zWgMB8GA1UdIwQY
MBaAFPWECt+E+wt1jrqKWhNamAOT6L9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGIt
NGM1OTYwZGRlYjM3LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGItNGM1OTYwZGRlYjM3
LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyhEAF/4
rW4IppprEy6fUnCjq0GAop2ETveI4VpozTPgamghZ/hQ0w8Zubv5//LjrMiERDlU
Aw4dSLPID+uFt7ngijwNK3yr1zoTaCmHIv3ynSfvrt88wzHbeeUZ2YeMEoNqgSau
vsJzZ+m6+vmwCcGCqcPuTRbh3DGsIBex9JVI+Pf2Gu1S7wqMck59ZGlbMEeuP48M
d0uV5uMcx6T/oDPMZY1o7SVAm7+vLRdCgdkrNzT10WnITN9obbk8UXge69wd1xeP
gY0P82d27j7T34D6khVEGZkW/rB0MLVJs+BWFLrmWBZxMYQgAIPP6sopJMdCVfTh
M27YDOkyHnEdQg==
-----END CERTIFICATE-----
Generated at Sat May 10 04:39:57 2025 by rpki-client