Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: aXjw99cVZjfVbh1m86XRQzCIw5kXpkVbIbHCFHucwIs=
Subject key identifier: A3:6D:CF:25:ED:2F:2F:46:85:A9:EC:30:96:8A:9B:9F:7B:AF:C1:C9
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 0196C803F8A4C01758072BC6BE38E746AED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0B9F
Signing time: Tue 13 May 2025 05:00:25 +0000
Manifest this update: Tue 13 May 2025 05:00:25 +0000
Manifest next update: Wed 14 May 2025 05:00:25 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: 8Rbi/OM8594aDJVorfOVhPmOeZ5TmoaQIdBaq1NV3ls=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:03:f8:a4:c0:17:58:07:2b:c6:be:38:e7:46:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: May 13 05:00:25 2025 GMT
Not After : May 14 05:00:25 2025 GMT
Subject: CN=a36dcf25ed2f2f4685a9ec30968a9b9f7bafc1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:7f:ab:ed:0b:cf:de:81:10:79:10:de:dd:
93:79:12:d4:b3:47:cf:07:4c:b2:76:61:c4:27:d1:
12:34:94:f4:64:f9:da:ac:b4:b7:e9:22:0d:14:05:
9c:73:02:24:62:0d:07:72:23:06:ef:74:7e:26:7f:
dc:14:2b:4c:1c:d8:34:b4:41:17:93:de:7f:db:4c:
16:75:6c:49:f4:19:c0:95:e9:77:d0:05:fe:53:66:
cf:d6:b1:80:c2:b0:86:4e:dc:11:a2:46:2e:8a:de:
d7:b2:b9:12:5b:36:43:b0:69:00:ae:ac:0a:af:b9:
44:08:f5:5d:4b:fe:0f:66:41:4b:d1:cd:d1:01:ec:
be:c1:71:ec:27:23:bd:28:de:f8:7b:b9:5d:ee:4d:
43:e0:fd:56:5b:78:77:ea:a1:1f:3c:98:52:3e:39:
a8:51:c7:2e:99:22:21:b1:7d:31:00:c9:d3:a6:ff:
00:42:ea:34:2e:b9:fe:d0:4e:0c:47:18:64:57:f1:
f4:b0:f9:52:e6:4a:b5:8b:d1:02:b7:1d:a5:49:76:
c6:50:44:5e:51:66:5c:aa:9a:19:d6:a7:25:60:2d:
c5:e8:76:ac:2b:ee:f7:d0:41:6b:5d:72:73:b5:f9:
bc:24:35:dd:9b:59:8c:df:1e:78:70:5d:43:2a:1a:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:CF:25:ED:2F:2F:46:85:A9:EC:30:96:8A:9B:9F:7B:AF:C1:C9
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e6:a5:a4:44:b5:d3:eb:d7:1b:4b:41:9a:4b:53:a8:ee:6f:
5e:8e:4c:da:95:f4:f9:78:b8:39:08:e8:3d:27:a8:69:d8:d9:
df:6a:25:19:0d:10:76:0b:d6:b4:04:c9:a9:db:c2:ee:fb:44:
bd:fc:9e:51:43:77:9d:15:83:28:f7:c8:2d:13:b4:ec:ed:b4:
b8:32:c0:f9:ae:83:05:25:6a:e5:45:ad:a1:a2:e2:69:a1:61:
99:24:90:bf:9e:91:49:54:2b:63:75:ed:01:60:0c:33:c4:20:
2c:40:76:b5:86:41:9a:4e:76:ec:d8:97:80:a3:c9:75:54:de:
d1:a9:5e:50:82:7c:d1:41:24:ca:6d:e6:38:bd:43:97:78:27:
4c:ee:5a:7b:33:b1:32:9c:ee:49:6a:1d:15:a9:cb:a7:1d:14:
79:01:72:92:23:d5:0d:5c:82:c3:fd:4e:71:7d:ba:a3:c7:56:
c1:d7:e0:1f:50:ab:ef:08:55:fa:31:2a:b7:98:60:ad:ed:d1:
ae:9d:9e:45:ea:2d:e9:06:8f:e6:24:66:a0:66:3a:6c:3d:a6:
9b:a1:73:ea:92:e1:81:d8:49:a1:43:12:1d:ea:44:ad:48:68:
43:3a:4c:c8:43:60:10:a6:74:82:3f:a6:4a:bd:16:bf:b2:29:
fd:b5:b5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIA/ikwBdYByvGvjjnRq7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjgxMjc0ZjY2YmRlODlmMTJjMjQzZDA5YTllZGMzZTVi
MWUyMjkwHhcNMjUwNTEzMDUwMDI1WhcNMjUwNTE0MDUwMDI1WjAzMTEwLwYDVQQD
EyhhMzZkY2YyNWVkMmYyZjQ2ODVhOWVjMzA5NjhhOWI5ZjdiYWZjMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lp/q+0Lz96BEHkQ3t2TeRLUs0fP
B0yydmHEJ9ESNJT0ZPnarLS36SINFAWccwIkYg0HciMG73R+Jn/cFCtMHNg0tEEX
k95/20wWdWxJ9BnAlel30AX+U2bP1rGAwrCGTtwRokYuit7XsrkSWzZDsGkArqwK
r7lECPVdS/4PZkFL0c3RAey+wXHsJyO9KN74e7ld7k1D4P1WW3h36qEfPJhSPjmo
UccumSIhsX0xAMnTpv8AQuo0Lrn+0E4MRxhkV/H0sPlS5kq1i9ECtx2lSXbGUERe
UWZcqpoZ1qclYC3F6HasK+730EFrXXJztfm8JDXdm1mM3x54cF1DKhojmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNtzyXtLy9GhansMJaKm597r8HJMB8GA1UdIwQY
MBaAFCD4EnT2a96J8SwkPQmp7cPlseIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzct
ZmUyNmU4OTlkZWI4LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzctZmUyNmU4OTlkZWI4
LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADualpES1
0+vXG0tBmktTqO5vXo5M2pX0+Xi4OQjoPSeoadjZ32olGQ0QdgvWtATJqdvC7vtE
vfyeUUN3nRWDKPfILRO07O20uDLA+a6DBSVq5UWtoaLiaaFhmSSQv56RSVQrY3Xt
AWAMM8QgLEB2tYZBmk527NiXgKPJdVTe0aleUIJ80UEkym3mOL1Dl3gnTO5aezOx
MpzuSWodFanLpx0UeQFykiPVDVyCw/1OcX26o8dWwdfgH1Cr7whV+jEqt5hgre3R
rp2eReot6QaP5iRmoGY6bD2mm6Fz6pLhgdhJoUMSHepErUhoQzpMyENgEKZ0gj+m
Sr0Wv7Ip/bW11w==
-----END CERTIFICATE-----
Generated at Tue May 13 06:20:26 2025 by rpki-client