Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
File: 9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json)
Hash identifier: HZvakmWIvFmy1Y7Bax/9TGYMNVTjKllIKRMmfzHDQxg=
Subject key identifier: 6B:0E:56:DA:02:7C:1E:8E:D6:87:72:EF:86:C3:25:BB:E3:D4:89:9E
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial: 0196AE44401F33450C58C65A012A6300C422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
Manifest number: 01D9
Signing time: Thu 08 May 2025 05:00:30 +0000
Manifest this update: Thu 08 May 2025 05:00:30 +0000
Manifest next update: Fri 09 May 2025 05:00:30 +0000
Files and hashes: 1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: onX+JEb5fJq8ATEmlDsT0sWn3XWQSjq0CgR/Hn3nHmc=)
2: N9ZAaiCE9aK-MVoBAkGyVQBVSz8.roa (hash: Lgl9Qg3vfXwyIJqunbOTrkAFiRdS7QjwGWUohli4wbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:40:1f:33:45:0c:58:c6:5a:01:2a:63:00:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Validity
Not Before: May 8 05:00:30 2025 GMT
Not After : May 9 05:00:30 2025 GMT
Subject: CN=6b0e56da027c1e8ed68772ef86c325bbe3d4899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:70:08:24:cc:58:d8:ea:5a:2d:ac:b8:cc:
d4:a0:af:9b:cb:3d:d1:13:40:2c:3f:5c:57:9a:c8:
ea:eb:f9:b8:98:45:e9:51:ce:ff:72:e8:27:c0:85:
9c:b9:77:53:66:ba:c7:24:db:00:f3:57:0b:07:25:
94:80:4a:c2:d0:91:05:3d:dd:63:4b:fd:36:ac:1d:
f1:f3:57:9a:70:a0:5c:7a:fd:79:e8:58:1f:3e:dc:
07:3b:17:05:7c:13:9d:11:c5:9f:e9:21:cc:0f:25:
eb:fb:a9:97:5f:3d:11:bd:ad:6e:e8:37:48:be:47:
6b:95:15:ee:0c:fc:b2:ec:85:08:db:32:44:02:26:
33:56:95:a1:37:dc:9b:1f:3f:9e:b8:cd:01:78:da:
ed:72:3e:de:fc:c3:26:d4:ca:ae:52:ec:70:5f:7e:
a9:6e:62:55:a5:5d:34:90:fb:4b:b2:1b:80:0a:d3:
fd:71:e0:c8:43:67:dd:ea:a1:c1:d6:ca:c0:b1:54:
1f:33:a4:a2:dc:63:32:5b:b9:b8:38:b9:32:32:cb:
14:8b:5a:cf:66:eb:35:b5:45:08:ee:8f:f5:45:d1:
63:ac:04:f1:06:09:c8:20:90:38:58:e1:f3:82:9e:
1c:bf:05:7b:aa:7d:58:ce:28:59:90:b1:da:14:c1:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:56:DA:02:7C:1E:8E:D6:87:72:EF:86:C3:25:BB:E3:D4:89:9E
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bf:8b:10:d5:e1:c0:f3:a9:68:cd:8f:db:c5:04:6a:b9:91:
62:90:d2:ef:1d:95:49:10:aa:35:04:e1:8e:53:92:89:18:5e:
60:25:87:95:7f:b0:57:27:ee:b9:a0:4a:30:a2:f5:3a:13:1d:
25:bd:7d:1f:7f:b0:1d:be:ef:99:d4:84:28:50:32:a3:07:e5:
69:3f:cf:57:bd:c7:9c:47:c3:7c:1d:41:82:00:1e:7a:15:f6:
70:97:c8:ed:d6:2c:93:8d:9b:d4:df:4c:2f:f0:2c:41:a6:3e:
ef:aa:1d:38:51:00:8d:25:bc:85:98:d5:ea:d6:1f:45:3f:07:
aa:53:7b:19:ee:59:45:19:6e:47:85:55:19:b9:6b:12:33:8e:
4f:2a:26:57:e8:39:0c:75:51:d7:6c:78:41:36:c7:be:78:ce:
30:9b:8f:9e:84:23:88:a9:09:cd:66:23:c8:e1:eb:ec:0d:e9:
a2:92:d4:3b:69:29:ed:e0:60:a0:30:d1:62:6c:4e:35:dd:76:
f9:d0:fe:19:53:02:24:58:9c:16:bd:ce:0d:9f:f6:e2:e1:77:
37:b4:59:b6:68:ed:b6:45:d0:d9:55:5f:cf:89:28:6a:19:06:
c6:d6:fd:99:94:51:cf:66:ac:33:4b:a3:f7:ad:81:3a:ca:ac:
3f:f1:23:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauREAfM0UMWMZaASpjAMQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjkxYzJjMDhmMDBkNjc2M2QyZTllNmEyYzQ0MjExMzBm
M2RkYmQwHhcNMjUwNTA4MDUwMDMwWhcNMjUwNTA5MDUwMDMwWjAzMTEwLwYDVQQD
Eyg2YjBlNTZkYTAyN2MxZThlZDY4NzcyZWY4NmMzMjViYmUzZDQ4OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A1wCCTMWNjqWi2suMzUoK+byz3R
E0AsP1xXmsjq6/m4mEXpUc7/cugnwIWcuXdTZrrHJNsA81cLByWUgErC0JEFPd1j
S/02rB3x81eacKBcev156FgfPtwHOxcFfBOdEcWf6SHMDyXr+6mXXz0Rva1u6DdI
vkdrlRXuDPyy7IUI2zJEAiYzVpWhN9ybHz+euM0BeNrtcj7e/MMm1MquUuxwX36p
bmJVpV00kPtLshuACtP9ceDIQ2fd6qHB1srAsVQfM6Si3GMyW7m4OLkyMssUi1rP
Zus1tUUI7o/1RdFjrATxBgnIIJA4WOHzgp4cvwV7qn1YzihZkLHaFMHoqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsOVtoCfB6O1ody74bDJbvj1ImeMB8GA1UdIwQY
MBaAFPa5HCwI8A1nY9Lp5qLEQhEw8929MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2Yt
OGM5MWY5NmJlNjI1LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2YtOGM5MWY5NmJlNjI1
LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7+LENXh
wPOpaM2P28UEarmRYpDS7x2VSRCqNQThjlOSiRheYCWHlX+wVyfuuaBKMKL1OhMd
Jb19H3+wHb7vmdSEKFAyowflaT/PV73HnEfDfB1BggAeehX2cJfI7dYsk42b1N9M
L/AsQaY+76odOFEAjSW8hZjV6tYfRT8HqlN7Ge5ZRRluR4VVGblrEjOOTyomV+g5
DHVR12x4QTbHvnjOMJuPnoQjiKkJzWYjyOHr7A3popLUO2kp7eBgoDDRYmxONd12
+dD+GVMCJFicFr3ODZ/24uF3N7RZtmjttkXQ2VVfz4koahkGxtb9mZRRz2asM0uj
962BOsqsP/EjgQ==
-----END CERTIFICATE-----
Generated at Thu May 8 11:36:22 2025 by rpki-client