Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: lwEfsVypCYqruOd9r2tnpV5O5FB6GMfbLuO3idZa33k=
Subject key identifier: 9E:AC:0D:B6:AB:5E:A4:4B:15:2E:C4:1A:4E:E0:66:6D:8D:A6:8D:F9
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 0196C53AAF0039CFCACA8AA329CCBE86F416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 0608
Signing time: Mon 12 May 2025 16:01:19 +0000
Manifest this update: Mon 12 May 2025 16:01:19 +0000
Manifest next update: Tue 13 May 2025 16:01:19 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: yq8iiQAhKRyhc5j/+0te/Rb58+Eg1sJdT2I9JU/JF6Q=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:af:00:39:cf:ca:ca:8a:a3:29:cc:be:86:f4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: May 12 16:01:19 2025 GMT
Not After : May 13 16:01:19 2025 GMT
Subject: CN=9eac0db6ab5ea44b152ec41a4ee0666d8da68df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b3:35:e0:1e:24:6e:78:dc:32:0b:84:8f:e5:
a0:1c:6b:ea:18:bd:0d:d3:25:b8:f4:31:b3:b1:22:
31:88:5f:33:5f:78:68:3c:43:54:33:f7:0c:1f:0e:
7d:c9:6b:6e:ee:7d:b3:04:70:84:a8:e3:59:51:54:
89:f3:8c:24:40:1a:2f:7a:78:92:2f:89:b2:f9:d5:
aa:2f:dc:2d:c7:ca:e0:77:22:c4:bf:8c:f1:51:49:
38:74:db:ca:24:73:1f:30:0a:c6:b3:64:9a:a4:9b:
f6:71:86:3e:73:a5:48:95:7f:40:1b:ae:a6:71:f0:
50:1a:6a:07:2c:cc:f7:d7:cd:7f:2f:72:79:4e:b0:
e3:04:f3:b6:10:97:46:91:b4:1f:6f:45:38:f9:79:
7f:b9:b0:32:e0:48:69:d3:3a:86:61:ba:e6:83:3c:
5c:91:52:97:eb:6d:ff:55:c2:99:96:aa:25:67:d8:
99:1a:86:f4:ba:37:4b:5d:34:b9:53:a4:c5:03:15:
ff:d8:bb:e4:2a:30:e7:fa:25:a4:2a:03:dd:74:be:
f2:6a:90:03:ff:ed:61:c8:ed:70:16:9a:1c:7c:56:
00:ad:24:0c:68:13:37:3b:22:53:f4:af:da:5d:5a:
9e:ff:ef:10:9a:3a:d4:c7:40:0c:7f:a0:ae:7c:ec:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AC:0D:B6:AB:5E:A4:4B:15:2E:C4:1A:4E:E0:66:6D:8D:A6:8D:F9
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fc:ba:62:be:82:cb:1f:5d:2d:f8:56:71:43:4c:ed:ee:d1:
bf:97:5d:2d:b1:a1:65:56:05:a6:b3:c9:29:31:12:7f:fc:78:
6d:66:ff:37:8a:f8:c0:cd:14:db:61:7e:ea:c1:7e:89:d9:46:
21:77:3f:cb:ad:70:6d:84:96:d8:cc:b5:36:2b:a0:4c:b7:39:
80:bb:4e:c9:e5:6c:95:1a:27:c6:40:2e:6e:01:e3:1e:e4:32:
89:7e:4c:39:f8:9c:bc:5c:ac:dd:ae:7f:aa:85:17:2d:c7:ef:
06:94:65:8b:6e:4f:d0:7f:84:4c:f7:40:0b:75:80:8d:83:b8:
43:ec:0d:14:64:97:11:20:32:6a:5f:2e:ed:41:dd:52:b7:95:
8d:77:6c:f8:a4:9a:cd:6a:71:61:99:ff:3e:50:53:9f:2c:f7:
c9:86:71:2e:41:f0:b1:75:00:1e:25:2d:7e:7e:c0:b1:57:19:
e9:96:1b:77:4f:b2:22:07:14:2a:db:c9:a3:f6:64:7a:01:1f:
e2:9c:d0:cc:85:d1:64:dc:a2:b9:2c:7f:11:75:b0:90:b5:89:
92:18:43:4f:77:09:90:9e:3d:4c:e1:37:69:a9:78:53:6b:17:
1b:ee:2e:17:cb:71:e0:4d:3f:fa:42:1b:9e:8f:9b:51:fe:b2:
3a:20:58:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOq8AOc/KyoqjKcy+hvQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTE4MGE3YzUxNjY3ZWMzODc1ZTc2NWYyNDVmOTA5Mzg2
MTI1NzEwHhcNMjUwNTEyMTYwMTE5WhcNMjUwNTEzMTYwMTE5WjAzMTEwLwYDVQQD
Eyg5ZWFjMGRiNmFiNWVhNDRiMTUyZWM0MWE0ZWUwNjY2ZDhkYTY4ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57M14B4kbnjcMguEj+WgHGvqGL0N
0yW49DGzsSIxiF8zX3hoPENUM/cMHw59yWtu7n2zBHCEqONZUVSJ84wkQBoveniS
L4my+dWqL9wtx8rgdyLEv4zxUUk4dNvKJHMfMArGs2SapJv2cYY+c6VIlX9AG66m
cfBQGmoHLMz3181/L3J5TrDjBPO2EJdGkbQfb0U4+Xl/ubAy4Ehp0zqGYbrmgzxc
kVKX623/VcKZlqolZ9iZGob0ujdLXTS5U6TFAxX/2LvkKjDn+iWkKgPddL7yapAD
/+1hyO1wFpocfFYArSQMaBM3OyJT9K/aXVqe/+8QmjrUx0AMf6CufOyGBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6sDbarXqRLFS7EGk7gZm2Npo35MB8GA1UdIwQY
MBaAFPQRgKfFFmfsOHXnZfJF+Qk4YSVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUt
OGYzMmQwMzE5NGIwLzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUtOGYzMmQwMzE5NGIw
LzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfy6Yr6C
yx9dLfhWcUNM7e7Rv5ddLbGhZVYFprPJKTESf/x4bWb/N4r4wM0U22F+6sF+idlG
IXc/y61wbYSW2My1NiugTLc5gLtOyeVslRonxkAubgHjHuQyiX5MOficvFys3a5/
qoUXLcfvBpRli25P0H+ETPdAC3WAjYO4Q+wNFGSXESAyal8u7UHdUreVjXds+KSa
zWpxYZn/PlBTnyz3yYZxLkHwsXUAHiUtfn7AsVcZ6ZYbd0+yIgcUKtvJo/ZkegEf
4pzQzIXRZNyiuSx/EXWwkLWJkhhDT3cJkJ49TOE3aal4U2sXG+4uF8tx4E0/+kIb
no+bUf6yOiBYdg==
-----END CERTIFICATE-----
Generated at Mon May 12 17:54:24 2025 by rpki-client