Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: iaG8eQb/Samo2F55QyP94vhPmO2CGR+zWh3mFVH8qZ4=
Subject key identifier: B4:A8:0C:3F:44:E7:FF:4D:2C:95:7B:56:5A:1F:21:BC:C1:58:F6:7D
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 0196AFFC6B7F88B7EA85F6B40F475BCBB162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 153C
Signing time: Thu 08 May 2025 13:01:17 +0000
Manifest this update: Thu 08 May 2025 13:01:17 +0000
Manifest next update: Fri 09 May 2025 13:01:17 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: FIIKckAdlsqwnzeAqmeWMB3D6GSlLChjYpzgaOSI/gs=)
2: KSXk6_QixsbQCQ2GK1YJYLuVams.roa (hash: GDt7z9XLr1rCQ6h4J11cfytv5T2PRyRC5L305CX1O3M=)
3: VThOfYn2yicDk7nCFvApHsO86Wg.roa (hash: mej7dGpuagdDYe3wWlS5P2O07cvlpo15DDfF6tOHiTI=)
4: YPZX0HGNcy7fuonRciJjzr0LELg.roa (hash: KklsaD6L02aKBxwsHKKUSkABYQGV+6RasQceYPMlPew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:6b:7f:88:b7:ea:85:f6:b4:0f:47:5b:cb:b1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: May 8 13:01:17 2025 GMT
Not After : May 9 13:01:17 2025 GMT
Subject: CN=b4a80c3f44e7ff4d2c957b565a1f21bcc158f67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:08:80:87:3b:5b:0e:51:87:89:6d:89:b2:
f0:3d:c9:21:f9:c8:af:9b:94:73:9b:19:8c:3b:b9:
54:1a:0b:98:0e:fe:6d:1f:41:d1:d0:cf:de:f6:cc:
56:b1:f7:ac:33:af:03:59:5a:8e:cc:72:e8:6f:c6:
3e:8e:b2:3f:88:bc:0a:b6:fd:63:00:ee:db:4f:41:
89:74:cd:76:d9:f0:8c:af:6e:95:d4:c4:58:8f:94:
7d:67:ce:19:58:7a:e7:9d:f5:45:a2:f4:5a:0b:7b:
87:db:2d:8a:99:17:2a:82:e2:28:d7:f5:6b:2d:6d:
90:53:0c:8c:a7:8b:37:4c:8d:cb:11:6e:92:77:1b:
ee:d3:4d:26:2c:ab:f0:2e:f4:81:62:63:2f:8e:72:
dd:c6:70:10:ac:5e:5a:27:1f:f4:4d:5b:79:b3:84:
c9:66:7c:a1:6d:9d:8a:6f:03:19:0d:79:19:17:39:
d2:2f:d5:a1:ff:9c:f5:5e:28:76:c6:e2:eb:17:84:
bf:7c:82:08:45:a7:5e:e6:8c:e5:19:44:4e:b8:f1:
6d:3b:7c:b9:8b:ef:e9:06:05:6f:4e:45:27:63:0d:
33:60:cb:4f:4a:79:55:f1:4b:22:1e:36:d6:0d:74:
52:5d:40:f3:e4:b2:11:7b:fb:ec:9b:0d:72:b9:09:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:0C:3F:44:E7:FF:4D:2C:95:7B:56:5A:1F:21:BC:C1:58:F6:7D
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c3:c3:f2:3c:ae:c1:90:60:71:fe:90:78:e2:c1:01:3d:6b:
bd:53:32:89:65:93:90:51:92:36:68:72:e0:a3:46:57:bd:5f:
b7:d5:ff:14:57:47:f4:f8:b4:c5:d4:92:b8:3e:70:24:dc:69:
df:65:95:1d:46:c2:cc:19:1a:0b:84:40:30:b4:d9:85:3f:9e:
f1:08:05:63:ac:7d:42:96:00:e2:ed:3a:a6:0b:00:c6:e7:e7:
fa:4b:eb:f4:b6:ac:9f:ee:f3:72:b7:24:4e:e5:65:38:1c:a6:
ab:0a:16:a1:e3:16:1b:1d:20:71:c3:c7:cb:72:1a:0b:9a:a6:
1d:24:9e:0a:40:f7:84:1b:6a:4a:69:dd:ee:f1:a9:0d:90:9f:
fb:44:56:ce:17:3e:7b:fb:46:21:ed:8d:b8:04:8a:54:53:bc:
7b:bb:20:7f:3e:8c:5e:29:20:d9:ca:92:8d:76:60:69:06:00:
9f:31:8b:64:55:c9:ca:33:cd:c8:73:87:44:1a:cc:42:dd:83:
bd:c9:c2:d9:f6:4e:a8:09:60:4a:6d:76:8f:d2:de:8f:e8:61:
28:b7:aa:e7:64:02:49:0e:5e:a7:17:59:f4:2d:c2:7a:d0:2c:
17:8e:d6:bf:74:e1:94:ad:f8:68:41:84:b9:b7:b8:16:87:6f:
61:c8:10:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav/Gt/iLfqhfa0D0dby7FiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzFiYmYxZDNkM2MwZWZlMzZkZTExMDM5MmJlMGM3YWM0
NDdhODQwHhcNMjUwNTA4MTMwMTE3WhcNMjUwNTA5MTMwMTE3WjAzMTEwLwYDVQQD
EyhiNGE4MGMzZjQ0ZTdmZjRkMmM5NTdiNTY1YTFmMjFiY2MxNThmNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnEIgIc7Ww5Rh4ltibLwPckh+civ
m5RzmxmMO7lUGguYDv5tH0HR0M/e9sxWsfesM68DWVqOzHLob8Y+jrI/iLwKtv1j
AO7bT0GJdM122fCMr26V1MRYj5R9Z84ZWHrnnfVFovRaC3uH2y2KmRcqguIo1/Vr
LW2QUwyMp4s3TI3LEW6Sdxvu000mLKvwLvSBYmMvjnLdxnAQrF5aJx/0TVt5s4TJ
ZnyhbZ2KbwMZDXkZFznSL9Wh/5z1Xih2xuLrF4S/fIIIRade5ozlGUROuPFtO3y5
i+/pBgVvTkUnYw0zYMtPSnlV8UsiHjbWDXRSXUDz5LIRe/vsmw1yuQnhJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSoDD9E5/9NLJV7VlofIbzBWPZ9MB8GA1UdIwQY
MBaAFPVxu/HT08Dv423hEDkr4MesRHqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYt
YTk2NTdlYjFmOGQ3LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYtYTk2NTdlYjFmOGQ3
LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcPD8jyu
wZBgcf6QeOLBAT1rvVMyiWWTkFGSNmhy4KNGV71ft9X/FFdH9Pi0xdSSuD5wJNxp
32WVHUbCzBkaC4RAMLTZhT+e8QgFY6x9QpYA4u06pgsAxufn+kvr9Lasn+7zcrck
TuVlOBymqwoWoeMWGx0gccPHy3IaC5qmHSSeCkD3hBtqSmnd7vGpDZCf+0RWzhc+
e/tGIe2NuASKVFO8e7sgfz6MXikg2cqSjXZgaQYAnzGLZFXJyjPNyHOHRBrMQt2D
vcnC2fZOqAlgSm12j9Lej+hhKLeq52QCSQ5epxdZ9C3CetAsF47Wv3ThlK34aEGE
ube4FodvYcgQBw==
-----END CERTIFICATE-----
Generated at Thu May 8 20:45:45 2025 by rpki-client