Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: mGrPCatF7MN0j1mRmG+LbwaGLWsw5O7D4J8eb6fF2CA=
Subject key identifier: 70:81:68:92:E2:AE:0C:9F:4B:EF:D4:37:FD:28:AA:8E:7F:2F:39:7D
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 0196BF3821ED117DB0BC1F14870B6184DDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 12:00:49 +0000
Manifest this update: Sun 11 May 2025 12:00:49 +0000
Manifest next update: Mon 12 May 2025 12:00:49 +0000
Files and hashes: 1: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (hash: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: HmFcg+p1LgHXJYQDiLDq9U5rdk2Wq+jZr1Jm2gtP0Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:21:ed:11:7d:b0:bc:1f:14:87:0b:61:84:dd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: May 11 12:00:49 2025 GMT
Not After : May 12 12:00:49 2025 GMT
Subject: CN=70816892e2ae0c9f4befd437fd28aa8e7f2f397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:7f:77:3f:4f:87:e1:7b:d7:37:2b:39:86:
ad:4c:a6:2b:6a:55:fc:aa:54:17:76:8e:93:52:3a:
4b:17:a7:92:5f:33:7e:03:59:9c:ec:dc:c0:20:10:
7f:d8:1b:1c:91:6e:5c:75:bf:70:15:d9:45:3e:2a:
e2:84:4b:f3:8b:98:c6:1c:37:75:31:00:5e:f6:f3:
44:62:fe:46:44:db:3b:10:c0:51:1a:f6:4b:1b:ea:
98:e6:38:9e:e2:fb:89:e2:ca:6a:ec:6b:9c:29:f6:
b0:d8:4b:43:df:d1:da:32:88:8c:68:03:d0:42:49:
74:27:a7:af:c7:7f:87:ce:3e:44:93:9b:5d:00:49:
d6:5f:ad:49:eb:de:19:99:4f:05:0b:44:6c:7e:68:
46:45:1a:45:49:87:93:8f:7d:89:d5:a3:b7:b0:26:
5b:10:1b:de:a9:13:1a:35:27:fe:ae:d0:39:55:33:
3b:14:09:9c:97:10:2d:8b:2a:04:b0:1e:e9:49:51:
20:f1:9f:7d:c3:34:36:0c:00:03:59:94:1c:57:ff:
f3:70:d7:c7:3d:a9:ae:a0:40:29:b5:f2:6e:f5:e2:
66:c5:12:73:68:84:2a:85:7a:2c:99:7e:38:4a:19:
e6:92:7a:24:57:6b:82:8a:15:ef:81:c3:30:b6:99:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:81:68:92:E2:AE:0C:9F:4B:EF:D4:37:FD:28:AA:8E:7F:2F:39:7D
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ae:6f:b0:58:92:f7:6a:f8:df:63:ab:94:97:d4:08:49:ac:
b5:fa:91:54:19:9d:23:a3:e3:cc:fe:f8:e8:94:84:2c:a3:21:
0a:d4:fd:d4:85:68:e2:d7:95:23:22:ff:1f:ca:e4:56:a0:c9:
31:58:9e:3e:c9:81:01:f7:79:fe:0a:86:54:86:3f:de:a8:d8:
6f:26:e1:c0:fd:71:0e:5e:ba:6c:56:69:07:b1:ec:8f:52:ff:
32:77:b6:6d:9f:c5:a0:26:12:16:bf:63:d7:05:0d:7f:04:b5:
54:1d:b5:1b:df:8b:a8:b8:e6:87:b6:3e:d3:f2:49:de:c8:d8:
bb:79:03:0e:6b:fb:11:ca:ca:a5:2e:b3:34:11:ee:77:85:b7:
7f:c0:12:20:dd:2d:7d:41:88:ac:cc:0b:96:0f:5c:c9:a6:d8:
25:f1:ac:bd:8c:6e:fe:63:87:8f:75:6e:ec:22:80:26:1c:7e:
63:50:6f:67:64:22:b1:ff:1b:55:7a:74:66:c3:8a:fb:e2:37:
99:6b:3a:d5:b8:d6:99:8e:70:60:1f:79:88:61:bd:49:6f:72:
9f:b9:a4:6c:27:5b:0b:86:5c:39:c7:e7:52:80:03:ae:c3:24:
12:ac:1d:b7:ce:38:fb:4f:8e:c5:3e:9f:bf:6b:91:bd:b8:1b:
1c:38:ae:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/OCHtEX2wvB8UhwthhN3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZDE4YTZhNDk5MTBjYzMzMWRjOTExMTRhZTU5YjcxODVk
NWYzMGQwHhcNMjUwNTExMTIwMDQ5WhcNMjUwNTEyMTIwMDQ5WjAzMTEwLwYDVQQD
Eyg3MDgxNjg5MmUyYWUwYzlmNGJlZmQ0MzdmZDI4YWE4ZTdmMmYzOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zd/dz9Ph+F71zcrOYatTKYralX8
qlQXdo6TUjpLF6eSXzN+A1mc7NzAIBB/2BsckW5cdb9wFdlFPirihEvzi5jGHDd1
MQBe9vNEYv5GRNs7EMBRGvZLG+qY5jie4vuJ4spq7GucKfaw2EtD39HaMoiMaAPQ
Qkl0J6evx3+Hzj5Ek5tdAEnWX61J694ZmU8FC0RsfmhGRRpFSYeTj32J1aO3sCZb
EBveqRMaNSf+rtA5VTM7FAmclxAtiyoEsB7pSVEg8Z99wzQ2DAADWZQcV//zcNfH
PamuoEAptfJu9eJmxRJzaIQqhXosmX44ShnmknokV2uCihXvgcMwtpmYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCBaJLirgyfS+/UN/0oqo5/Lzl9MB8GA1UdIwQY
MBaAFH/RimpJkQzDMdyREUrlm3GF1fMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wOTQ3ZjItMjJjYS00N2NiLTg5YWQt
M2U1MGE1ZjAxOTk4LzEvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wOTQ3ZjItMjJjYS00N2NiLTg5YWQtM2U1MGE1ZjAxOTk4
LzEvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK5vsFiS
92r432OrlJfUCEmstfqRVBmdI6PjzP746JSELKMhCtT91IVo4teVIyL/H8rkVqDJ
MViePsmBAfd5/gqGVIY/3qjYbybhwP1xDl66bFZpB7Hsj1L/Mne2bZ/FoCYSFr9j
1wUNfwS1VB21G9+LqLjmh7Y+0/JJ3sjYu3kDDmv7EcrKpS6zNBHud4W3f8ASIN0t
fUGIrMwLlg9cyabYJfGsvYxu/mOHj3Vu7CKAJhx+Y1BvZ2Qisf8bVXp0ZsOK++I3
mWs61bjWmY5wYB95iGG9SW9yn7mkbCdbC4ZcOcfnUoADrsMkEqwdt844+0+OxT6f
v2uRvbgbHDiuYA==
-----END CERTIFICATE-----
Generated at Sun May 11 17:03:06 2025 by rpki-client