Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: axOebHmHeoTSrJdPXondiZvJv/yeN+j+KPYiG8YDkzs=
Subject key identifier: 17:17:3C:76:40:70:E6:E3:30:D9:2B:F3:40:C0:63:F0:41:AD:7C:EE
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 0196C2A698353322A6B4520FAAC6257EFB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0906
Signing time: Mon 12 May 2025 04:00:19 +0000
Manifest this update: Mon 12 May 2025 04:00:19 +0000
Manifest next update: Tue 13 May 2025 04:00:19 +0000
Files and hashes: 1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: pLUW9heve30jXQPFV0J8/XV2fe8ySNUZqdXNaXiy2WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:98:35:33:22:a6:b4:52:0f:aa:c6:25:7e:fb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: May 12 04:00:19 2025 GMT
Not After : May 13 04:00:19 2025 GMT
Subject: CN=17173c764070e6e330d92bf340c063f041ad7cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:84:39:c3:92:07:86:7f:cd:12:32:35:40:
d1:a3:0e:42:e1:a5:4d:46:e1:7f:38:db:64:a4:90:
a0:f1:ef:3b:44:37:13:f9:16:82:e3:cb:70:91:a4:
c6:30:fc:e2:3c:d3:cb:60:53:6d:94:7b:b4:d0:fc:
ba:f4:49:9b:e1:5d:b1:9a:6d:12:37:be:84:03:7a:
5e:98:34:ac:d1:db:ad:2c:8a:68:34:28:e7:8c:97:
5e:35:e2:bd:45:c2:f1:ba:1c:86:ad:55:b8:7d:9a:
eb:18:1d:cc:71:2e:2d:a1:89:ff:19:24:be:03:de:
7a:d3:8d:90:28:1a:77:4a:50:9c:b7:5b:24:0a:c3:
fa:d1:c9:be:9a:90:e2:20:cc:17:de:b0:05:d3:50:
d8:f2:4a:58:c1:d0:f8:aa:83:6b:2f:95:dd:8d:3e:
0f:49:86:c4:f6:d2:b7:af:03:49:6c:dd:25:1b:09:
84:10:9c:86:e5:cd:ef:45:2a:20:8a:84:18:d4:1f:
57:48:bd:d8:cb:37:88:89:c6:74:96:51:04:1d:2d:
74:b5:c8:5c:25:52:92:ed:85:75:7f:2d:71:a1:f1:
96:9a:26:de:1e:9c:28:3c:49:2c:02:da:1b:66:f5:
c6:32:8d:db:a2:b4:e1:19:28:ff:71:ce:7f:0c:c5:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:17:3C:76:40:70:E6:E3:30:D9:2B:F3:40:C0:63:F0:41:AD:7C:EE
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cc:c6:5e:f2:a5:b4:24:32:e7:43:e3:cd:54:58:a8:e6:8d:
66:39:53:1e:b7:19:12:3c:1d:10:21:1f:74:6b:b3:8e:56:e9:
e4:fe:2c:10:30:53:10:9b:bb:17:88:d6:eb:52:6a:45:56:d1:
48:18:4b:f7:6f:b7:bf:02:e0:87:87:c6:a5:26:f6:f2:4a:11:
f5:80:12:5f:e9:f4:1a:43:a4:3a:0d:24:20:33:21:f4:89:ce:
95:95:0b:25:85:ca:a7:b7:4a:50:d8:8e:f2:c9:64:ac:66:5f:
5e:b9:18:cb:e4:4a:b6:a3:b2:96:b6:e9:77:3b:aa:05:49:34:
3a:b9:1f:35:64:09:14:51:79:a7:bf:17:c8:b0:38:d1:a3:67:
fa:b1:a4:8f:ae:de:b1:eb:ce:c0:53:8c:8e:a7:81:8f:f1:f9:
a1:b0:99:31:77:99:1b:40:ee:fd:63:e6:59:53:f7:b8:47:6d:
ab:2b:82:36:01:c1:e5:35:ec:7d:85:35:26:a3:ed:d8:48:ee:
49:b2:23:32:0c:77:60:fe:89:53:c3:03:b3:d1:b0:c6:b1:73:
ae:3f:1f:07:da:46:c5:92:c2:11:94:ba:85:bf:2c:a9:4e:df:
4b:42:a9:83:c7:54:f7:78:af:98:83:84:14:53:2f:29:a4:41:
07:6e:9c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCppg1MyKmtFIPqsYlfvsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDU5OTdlZDA3NWMyMjk4YjQ2MTIyNWUxMDYwZjU3N2Ix
ZDdkNGQwHhcNMjUwNTEyMDQwMDE5WhcNMjUwNTEzMDQwMDE5WjAzMTEwLwYDVQQD
EygxNzE3M2M3NjQwNzBlNmUzMzBkOTJiZjM0MGMwNjNmMDQxYWQ3Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt66EOcOSB4Z/zRIyNUDRow5C4aVN
RuF/ONtkpJCg8e87RDcT+RaC48twkaTGMPziPNPLYFNtlHu00Py69Emb4V2xmm0S
N76EA3pemDSs0dutLIpoNCjnjJdeNeK9RcLxuhyGrVW4fZrrGB3McS4toYn/GSS+
A956042QKBp3SlCct1skCsP60cm+mpDiIMwX3rAF01DY8kpYwdD4qoNrL5XdjT4P
SYbE9tK3rwNJbN0lGwmEEJyG5c3vRSogioQY1B9XSL3YyzeIicZ0llEEHS10tchc
JVKS7YV1fy1xofGWmibeHpwoPEksAtobZvXGMo3borThGSj/cc5/DMVy9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcXPHZAcObjMNkr80DAY/BBrXzuMB8GA1UdIwQY
MBaAFHvVmX7QdcIpi0YSJeEGD1d7HX1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUt
NWFjN2YwNjYyMzBiLzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUtNWFjN2YwNjYyMzBi
LzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgszGXvKl
tCQy50PjzVRYqOaNZjlTHrcZEjwdECEfdGuzjlbp5P4sEDBTEJu7F4jW61JqRVbR
SBhL92+3vwLgh4fGpSb28koR9YASX+n0GkOkOg0kIDMh9InOlZULJYXKp7dKUNiO
8slkrGZfXrkYy+RKtqOylrbpdzuqBUk0OrkfNWQJFFF5p78XyLA40aNn+rGkj67e
sevOwFOMjqeBj/H5obCZMXeZG0Du/WPmWVP3uEdtqyuCNgHB5TXsfYU1JqPt2Eju
SbIjMgx3YP6JU8MDs9GwxrFzrj8fB9pGxZLCEZS6hb8sqU7fS0Kpg8dU93ivmIOE
FFMvKaRBB26c4g==
-----END CERTIFICATE-----
Generated at Mon May 12 08:12:01 2025 by rpki-client