Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: hyeQyMEeKXcsO8XclepsHc/4LOamX15KDcerEogcqjo=
Subject key identifier: B2:B7:5F:B9:8E:A0:50:5E:88:C3:CA:6A:D2:1C:7D:42:D9:47:FE:AC
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 0196A6548C1473822C45CDAFC613EA87764D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 10AC
Signing time: Tue 06 May 2025 16:01:20 +0000
Manifest this update: Tue 06 May 2025 16:01:20 +0000
Manifest next update: Wed 07 May 2025 16:01:20 +0000
Files and hashes: 1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: zD69uNFSeeI3fgr7HaC3TKTMa9ADZOEor4yaZZSN7ss=)
3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:8c:14:73:82:2c:45:cd:af:c6:13:ea:87:76:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: May 6 16:01:20 2025 GMT
Not After : May 7 16:01:20 2025 GMT
Subject: CN=b2b75fb98ea0505e88c3ca6ad21c7d42d947feac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:08:35:87:e2:ba:36:10:41:8b:c5:90:df:
8a:cd:84:74:11:65:6b:d9:50:62:57:b0:48:3b:ca:
c4:4a:13:a7:bc:ec:1d:8f:83:10:d6:0e:c3:c9:dd:
e8:06:ec:d4:3e:57:9f:0a:e9:e8:91:41:05:3a:fa:
30:08:64:61:7b:d4:f8:66:62:df:8b:e5:01:dd:80:
44:69:4b:6b:d3:f7:16:17:e1:02:ee:77:ed:8f:db:
e6:20:1b:58:1e:31:a8:7d:1b:f4:44:70:13:d3:21:
ff:19:cf:20:6d:55:7e:6f:4d:a7:ce:2e:08:00:81:
ee:ea:12:7d:e0:97:c6:fe:84:29:c0:78:dd:59:05:
16:39:6a:38:13:ca:66:c8:2f:4b:f9:c7:16:57:b9:
b6:f5:33:33:13:a4:4e:91:58:02:2a:3a:4a:f0:1c:
37:2e:f7:c2:eb:2d:00:87:e9:02:45:dd:d0:ab:bd:
5f:4d:74:53:65:48:46:5c:69:77:2d:5d:0e:0d:38:
18:7c:19:6c:78:7c:76:af:8c:c4:16:aa:b2:02:ec:
2d:d3:01:51:3d:0f:13:9e:9f:8f:de:46:73:e7:75:
c8:83:6f:58:b8:ca:c7:10:dd:4a:a1:b3:2f:c8:cd:
2a:4e:90:db:25:eb:88:67:17:a3:40:0b:5c:62:83:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B7:5F:B9:8E:A0:50:5E:88:C3:CA:6A:D2:1C:7D:42:D9:47:FE:AC
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8a:23:35:de:d2:a3:a3:28:af:e1:b2:e1:61:0d:af:48:26:
c6:36:a6:36:c2:a6:10:47:79:a5:b5:5e:43:f3:7d:55:4e:a0:
ee:ef:e7:6e:12:e4:b4:b6:d1:95:37:08:69:87:2c:9d:fe:08:
dc:4b:9b:0a:03:9a:a0:9b:dd:79:2f:7f:55:c6:e2:c1:98:d6:
db:0b:a1:0e:53:db:a6:a7:33:9c:60:67:ff:31:43:98:0a:87:
72:58:16:16:ba:d8:f3:ba:6e:63:bb:9f:f3:c5:4c:96:a6:18:
0b:02:67:07:e9:6d:7e:a1:dd:68:b9:45:61:1f:73:24:ab:6e:
6a:07:3d:18:14:c8:40:1c:dd:8c:c3:4a:34:91:1b:95:51:02:
4d:68:64:f1:2d:7e:9d:4e:9f:dd:9b:ad:11:2e:46:33:5f:4a:
82:c6:0c:98:1f:c4:a9:ff:af:f3:90:1f:1a:12:09:f2:fe:a9:
98:20:da:1c:bb:7b:33:c7:7e:fb:ff:03:a5:db:e8:1f:60:19:
84:62:64:4b:83:a0:5f:65:d0:60:c1:c0:77:7d:44:e7:64:89:
30:41:c7:08:43:7c:fe:53:bc:0f:e4:a1:9f:48:41:61:ab:5e:
2c:96:71:8e:c5:1b:c7:61:34:1f:9c:aa:9a:bf:fe:30:b2:77:
b3:2f:22:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamVIwUc4IsRc2vxhPqh3ZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc4NmIyNGI0YjMwMjc1YmNjOGQ1MjQ0ZTM0ZWUwMDQ4
MWQ3OTAwHhcNMjUwNTA2MTYwMTIwWhcNMjUwNTA3MTYwMTIwWjAzMTEwLwYDVQQD
EyhiMmI3NWZiOThlYTA1MDVlODhjM2NhNmFkMjFjN2Q0MmQ5NDdmZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKQINYfiujYQQYvFkN+KzYR0EWVr
2VBiV7BIO8rEShOnvOwdj4MQ1g7Dyd3oBuzUPlefCunokUEFOvowCGRhe9T4ZmLf
i+UB3YBEaUtr0/cWF+EC7nftj9vmIBtYHjGofRv0RHAT0yH/Gc8gbVV+b02nzi4I
AIHu6hJ94JfG/oQpwHjdWQUWOWo4E8pmyC9L+ccWV7m29TMzE6ROkVgCKjpK8Bw3
LvfC6y0Ah+kCRd3Qq71fTXRTZUhGXGl3LV0ODTgYfBlseHx2r4zEFqqyAuwt0wFR
PQ8Tnp+P3kZz53XIg29YuMrHEN1KobMvyM0qTpDbJeuIZxejQAtcYoPVcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK3X7mOoFBeiMPKatIcfULZR/6sMB8GA1UdIwQY
MBaAFL/XhrJLSzAnW8yNUkTjTuAEgdeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5Yjct
MWExZjkzNjQ1NGVjLzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5YjctMWExZjkzNjQ1NGVj
LzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYojNd7S
o6Mor+Gy4WENr0gmxjamNsKmEEd5pbVeQ/N9VU6g7u/nbhLktLbRlTcIaYcsnf4I
3EubCgOaoJvdeS9/VcbiwZjW2wuhDlPbpqcznGBn/zFDmAqHclgWFrrY87puY7uf
88VMlqYYCwJnB+ltfqHdaLlFYR9zJKtuagc9GBTIQBzdjMNKNJEblVECTWhk8S1+
nU6f3ZutES5GM19KgsYMmB/Eqf+v85AfGhIJ8v6pmCDaHLt7M8d++/8DpdvoH2AZ
hGJkS4OgX2XQYMHAd31E52SJMEHHCEN8/lO8D+Shn0hBYateLJZxjsUbx2E0H5yq
mr/+MLJ3sy8ihg==
-----END CERTIFICATE-----
Generated at Tue May 6 18:10:04 2025 by rpki-client