Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: 4PPyC65H+0guPILUAsy8ZbFowDjy6rGqL/0IUbW0u4E=
Subject key identifier: 88:68:B4:47:17:4E:BA:72:F4:DE:8A:16:37:DD:CB:A1:3B:0B:FD:75
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 0196B9DA87B6BB8709135EEB1994D05C1006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 0FDE
Signing time: Sat 10 May 2025 11:00:28 +0000
Manifest this update: Sat 10 May 2025 11:00:28 +0000
Manifest next update: Sun 11 May 2025 11:00:28 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: a7mdnoEfww5MzkX2LOSmrWhad4ZwKI9+KcaWl4/L44s=)
2: hcuixNDtZTOahJr2Izkq1PkvB30.roa (hash: 0Y98rWR7z+ovo4LddJHUN4JqVyjOhGekgLOw4fEG1XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:87:b6:bb:87:09:13:5e:eb:19:94:d0:5c:10:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: May 10 11:00:28 2025 GMT
Not After : May 11 11:00:28 2025 GMT
Subject: CN=8868b447174eba72f4de8a1637ddcba13b0bfd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:4a:8b:a6:6d:08:c4:1c:ee:5c:2a:e2:b2:
8f:e2:cb:35:b2:ae:a3:00:2a:6f:7d:2f:10:eb:71:
30:ca:ec:22:a2:91:b2:f2:07:75:99:a5:c0:38:dc:
67:da:01:a9:90:17:08:6a:b4:30:0f:cf:5b:7a:f3:
62:c2:f2:f6:e7:38:71:d0:55:31:a7:ac:f7:53:bb:
85:e1:8f:80:30:30:28:21:d0:4f:4b:77:e1:1e:ba:
46:a0:ec:95:36:96:2c:58:a8:19:05:21:1a:b6:b5:
e6:6a:09:5c:a0:c2:e3:8e:dc:9a:e0:24:18:56:d9:
0c:b5:29:48:c0:8f:41:c5:ae:54:6a:da:f9:0b:ca:
6e:a9:d5:ad:37:da:a0:87:f3:ab:50:26:90:3a:a6:
d3:f8:19:a2:4a:67:dc:bd:e8:89:78:63:fb:b2:79:
6f:d2:d4:d4:55:0e:b4:3e:19:3f:f1:bd:4e:0b:fe:
4d:29:39:6b:5f:12:f2:80:3b:d4:01:f0:09:89:b7:
af:04:57:ce:35:c2:9b:17:16:4a:7b:4d:4c:ba:d5:
0c:33:9a:7e:fe:20:a3:0a:cb:29:df:e7:b2:0a:49:
3f:f4:5c:0e:0d:9d:7a:b7:b0:72:5d:fd:bd:4e:70:
82:02:71:f9:aa:bf:31:e3:c2:7e:54:33:f0:1e:bc:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:B4:47:17:4E:BA:72:F4:DE:8A:16:37:DD:CB:A1:3B:0B:FD:75
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:65:de:aa:03:aa:cd:eb:66:f6:d0:10:ea:1b:84:f1:f5:
29:a3:78:78:5a:c8:e7:04:85:a9:c9:26:33:02:72:00:dc:f0:
1c:26:62:42:6c:9c:db:46:31:69:18:57:44:3f:e3:d2:87:5e:
6f:9a:8b:fe:0d:47:85:ce:4b:79:33:0d:20:49:9b:62:04:22:
ad:2c:ee:4f:e1:39:74:4a:91:dd:31:ea:93:2c:0c:42:fb:b6:
8d:19:d7:0d:bf:85:d2:e4:00:ca:19:87:44:0a:e8:17:c3:75:
7c:62:88:d4:6c:bd:22:59:c7:02:70:89:f0:de:ee:4e:d6:6c:
da:37:c6:7c:de:58:c8:7e:af:e3:4b:f3:a3:74:75:ce:cc:8b:
ba:70:44:59:13:32:b1:31:75:6c:19:21:41:0c:60:26:4f:9b:
d0:07:45:e5:4e:2a:4d:53:85:de:c4:cf:12:2a:20:57:46:38:
12:5d:e0:e1:cd:d0:23:38:16:60:90:bc:b0:4a:ba:99:b2:81:
4b:83:af:02:1f:b0:a4:ea:e8:a1:7b:7c:db:78:22:55:aa:f6:
74:c1:e4:9f:27:89:62:cc:3e:c5:13:5d:07:bf:fd:e9:ce:70:
05:63:8d:84:b1:4d:f7:59:39:72:43:88:ad:2e:d9:24:f8:23:
17:5a:fc:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa52oe2u4cJE17rGZTQXBAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZGY2OTc0MzBjYmI1N2M0OWEwYTE5OTMwMjRkNmQzMjlm
N2U1NjUwHhcNMjUwNTEwMTEwMDI4WhcNMjUwNTExMTEwMDI4WjAzMTEwLwYDVQQD
Eyg4ODY4YjQ0NzE3NGViYTcyZjRkZThhMTYzN2RkY2JhMTNiMGJmZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lVKi6ZtCMQc7lwq4rKP4ss1sq6j
ACpvfS8Q63EwyuwiopGy8gd1maXAONxn2gGpkBcIarQwD89bevNiwvL25zhx0FUx
p6z3U7uF4Y+AMDAoIdBPS3fhHrpGoOyVNpYsWKgZBSEatrXmaglcoMLjjtya4CQY
VtkMtSlIwI9Bxa5Uatr5C8puqdWtN9qgh/OrUCaQOqbT+BmiSmfcveiJeGP7snlv
0tTUVQ60Phk/8b1OC/5NKTlrXxLygDvUAfAJibevBFfONcKbFxZKe01MutUMM5p+
/iCjCssp3+eyCkk/9FwODZ16t7ByXf29TnCCAnH5qr8x48J+VDPwHrzXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhotEcXTrpy9N6KFjfdy6E7C/11MB8GA1UdIwQY
MBaAFHLfaXQwy7V8SaChmTAk1tMp9+VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMt
OGM0MmJiMjIzMWFiLzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMtOGM0MmJiMjIzMWFi
LzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0Fl3qoD
qs3rZvbQEOobhPH1KaN4eFrI5wSFqckmMwJyANzwHCZiQmyc20YxaRhXRD/j0ode
b5qL/g1Hhc5LeTMNIEmbYgQirSzuT+E5dEqR3THqkywMQvu2jRnXDb+F0uQAyhmH
RAroF8N1fGKI1Gy9IlnHAnCJ8N7uTtZs2jfGfN5YyH6v40vzo3R1zsyLunBEWRMy
sTF1bBkhQQxgJk+b0AdF5U4qTVOF3sTPEiogV0Y4El3g4c3QIzgWYJC8sEq6mbKB
S4OvAh+wpOrooXt823giVar2dMHknyeJYsw+xRNdB7/96c5wBWONhLFN91k5ckOI
rS7ZJPgjF1r8Tw==
-----END CERTIFICATE-----
Generated at Sat May 10 14:49:48 2025 by rpki-client