Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: enKd8THjdRU9/hBCSKjGgpyLqdX36pQZlzL+0e5Y3ow=
Subject key identifier: 9E:ED:B5:4C:21:12:36:08:27:E9:C2:CB:3A:67:D9:33:89:A8:73:3B
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 0196C1CB390417D2C6CE57839FAE196117A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 0D9E
Signing time: Mon 12 May 2025 00:00:43 +0000
Manifest this update: Mon 12 May 2025 00:00:43 +0000
Manifest next update: Tue 13 May 2025 00:00:43 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: TGLdBrVcySy0bkZOjV3zfTmfU1/2vyeO4I6ult93vJg=)
2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:39:04:17:d2:c6:ce:57:83:9f:ae:19:61:17:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: May 12 00:00:43 2025 GMT
Not After : May 13 00:00:43 2025 GMT
Subject: CN=9eedb54c2112360827e9c2cb3a67d93389a8733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:76:06:11:d1:87:8d:61:a1:2c:d2:ee:2e:
39:ac:f7:39:34:b5:8a:63:0e:5c:7d:6b:a9:ac:9a:
b3:38:4b:b5:2a:0c:76:40:2d:f2:4c:1d:df:89:73:
46:10:a5:85:f2:8b:cc:0a:f5:b1:7b:fc:e5:b5:e8:
8e:37:83:7a:72:11:ea:20:39:08:a3:fc:74:01:46:
12:16:c7:9c:f1:e0:e4:5c:53:83:25:52:ce:92:89:
fb:f7:25:31:10:9f:a8:d3:02:6e:63:6e:11:30:30:
e7:33:64:ae:92:95:55:0e:57:e4:56:bb:c4:1d:0f:
22:d6:f2:8d:3c:bf:43:fa:a5:2d:6e:7d:29:0c:fc:
33:90:cd:54:53:e6:7f:e7:86:ad:19:b5:28:ce:7a:
3a:5e:7d:62:99:94:2b:71:cb:08:c0:aa:61:38:e7:
d2:b3:85:09:77:d2:93:fc:e6:52:98:41:32:b1:d6:
10:a6:77:48:e2:78:df:27:77:18:56:79:51:73:f3:
37:fd:6c:c7:08:2a:70:7f:08:28:40:c2:3f:8f:21:
80:b3:b3:0f:26:a8:67:a0:df:3c:05:74:e1:f9:5f:
ac:2b:a0:34:1d:b6:dd:5b:58:85:6b:e8:2d:61:ec:
39:52:d4:8a:bf:be:ce:f1:0c:2b:d5:b3:e9:46:d8:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:B5:4C:21:12:36:08:27:E9:C2:CB:3A:67:D9:33:89:A8:73:3B
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bd:2d:90:08:95:b6:8f:98:86:f8:2e:38:f6:28:d6:11:ff:
44:3c:76:26:80:2b:0d:68:ac:34:de:1d:2a:a4:c2:e9:9c:10:
fb:ef:35:06:10:fe:22:17:9d:e1:9a:95:29:0a:af:3e:b6:f8:
d7:d5:c8:c7:fb:2e:e8:70:06:49:34:bf:33:86:e4:b8:7f:da:
bd:f8:68:2a:9a:c0:bc:89:5e:67:de:ec:5a:c5:3b:49:3d:04:
9a:5e:bc:ff:eb:3d:55:b7:8a:3c:95:0c:52:d0:9a:90:88:0f:
a6:d2:50:57:2a:6f:16:65:18:6d:c5:f4:de:a2:37:3d:ce:92:
12:dc:7e:58:dc:3e:c4:ba:12:c8:5f:cc:2c:74:85:52:d8:36:
a8:0e:79:48:81:c5:5d:e7:68:20:76:9f:8c:04:5b:3d:20:d6:
7c:33:bd:81:56:9f:e2:d7:1d:c7:ee:dd:97:5c:46:1d:04:c2:
1b:47:ea:52:11:a9:a7:ad:5d:dc:37:83:84:f5:ab:e7:50:81:
2b:fe:6f:f0:80:3e:2a:2f:2f:2d:22:8d:7b:5f:24:3f:dc:b6:
7e:18:65:50:c3:54:1d:73:1f:e2:91:75:05:3c:b5:00:27:99:
3e:f6:3c:7b:87:19:0d:46:52:dd:76:c7:10:f1:cb:df:89:af:
b7:64:f2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByzkEF9LGzleDn64ZYReoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw
YjU0N2IwHhcNMjUwNTEyMDAwMDQzWhcNMjUwNTEzMDAwMDQzWjAzMTEwLwYDVQQD
Eyg5ZWVkYjU0YzIxMTIzNjA4MjdlOWMyY2IzYTY3ZDkzMzg5YTg3MzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Z2BhHRh41hoSzS7i45rPc5NLWK
Yw5cfWuprJqzOEu1Kgx2QC3yTB3fiXNGEKWF8ovMCvWxe/zlteiON4N6chHqIDkI
o/x0AUYSFsec8eDkXFODJVLOkon79yUxEJ+o0wJuY24RMDDnM2SukpVVDlfkVrvE
HQ8i1vKNPL9D+qUtbn0pDPwzkM1UU+Z/54atGbUozno6Xn1imZQrccsIwKphOOfS
s4UJd9KT/OZSmEEysdYQpndI4njfJ3cYVnlRc/M3/WzHCCpwfwgoQMI/jyGAs7MP
JqhnoN88BXTh+V+sK6A0HbbdW1iFa+gtYew5UtSKv77O8Qwr1bPpRtgOYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7ttUwhEjYIJ+nCyzpn2TOJqHM7MB8GA1UdIwQY
MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt
ODE2NzRkOTUzZDU2LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2
LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX70tkAiV
to+YhvguOPYo1hH/RDx2JoArDWisNN4dKqTC6ZwQ++81BhD+Ihed4ZqVKQqvPrb4
19XIx/su6HAGSTS/M4bkuH/avfhoKprAvIleZ97sWsU7ST0Eml68/+s9VbeKPJUM
UtCakIgPptJQVypvFmUYbcX03qI3Pc6SEtx+WNw+xLoSyF/MLHSFUtg2qA55SIHF
XedoIHafjARbPSDWfDO9gVaf4tcdx+7dl1xGHQTCG0fqUhGpp61d3DeDhPWr51CB
K/5v8IA+Ki8vLSKNe18kP9y2fhhlUMNUHXMf4pF1BTy1ACeZPvY8e4cZDUZS3XbH
EPHL34mvt2Tyfg==
-----END CERTIFICATE-----
Generated at Mon May 12 01:47:49 2025 by rpki-client