Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: M71WFiSsSBlBVTR9rfRmPfby3mj3SG/UgijjZHQKyl8=
Subject key identifier: 2C:62:9E:76:CA:FE:20:64:77:78:66:F2:FE:69:4E:D3:01:44:32:D2
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 0196B7B6027524CFFD30379D2EDDE66931AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 01:01:20 +0000
Manifest this update: Sat 10 May 2025 01:01:20 +0000
Manifest next update: Sun 11 May 2025 01:01:20 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: Evi/lgCX74x3+IeERi73cmXsQGbzlH4fn5CGLFAGKbc=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:02:75:24:cf:fd:30:37:9d:2e:dd:e6:69:31:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: May 10 01:01:20 2025 GMT
Not After : May 11 01:01:20 2025 GMT
Subject: CN=2c629e76cafe2064777866f2fe694ed3014432d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:8f:83:8e:ee:95:c4:89:eb:a3:cb:11:c6:
c4:b9:4e:b1:a6:65:11:ad:68:a0:f1:70:60:c5:34:
e3:a6:3b:96:03:6d:51:88:4b:db:8b:b3:79:35:29:
e6:e8:71:55:5d:7d:32:b2:63:e6:06:c5:63:69:f7:
89:dd:5f:77:07:59:a0:1c:f2:bb:67:df:5c:b2:20:
a0:e0:b1:02:52:d0:92:53:69:0c:40:36:38:ce:56:
0c:ef:62:c6:05:aa:ec:2e:53:fd:4b:69:4b:ee:96:
85:37:13:88:4a:9c:fa:c8:2f:e3:4e:68:f8:fc:65:
5a:eb:c4:15:6f:a4:e1:08:4a:54:41:61:a0:d5:89:
c9:f5:3b:1d:c2:af:54:18:2b:66:21:5c:f9:4a:57:
cb:8b:1b:b3:02:da:cd:a6:93:65:d4:b3:2a:da:f4:
07:ab:72:48:84:57:f0:3f:f6:97:f9:85:3d:16:69:
0d:09:7a:9a:2d:9a:9c:a6:5c:a4:fa:73:cb:c0:9c:
55:d1:d8:cf:0b:16:02:e0:15:e9:9b:9e:5d:26:53:
18:81:43:94:42:e9:fa:91:44:af:76:49:ed:26:f3:
30:79:ba:98:26:a2:32:6c:7f:60:1f:36:70:f6:d6:
6c:bc:2c:52:e4:5d:87:36:d2:62:4e:86:e7:d4:00:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:62:9E:76:CA:FE:20:64:77:78:66:F2:FE:69:4E:D3:01:44:32:D2
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ab:bc:2e:d5:b0:a5:6b:88:b6:90:fd:54:bd:05:47:0d:78:
9f:65:2b:63:85:14:ba:ef:a1:84:c0:5a:51:a3:2a:7b:64:50:
e3:7e:7b:34:3d:dc:f9:ac:a0:2b:10:15:59:55:d2:f1:34:34:
50:fc:5c:7e:b5:4a:99:a9:f0:ab:ae:fe:78:f5:0d:8b:be:4a:
fb:7a:46:33:cf:24:06:0f:41:2c:55:ff:28:27:2b:60:63:ef:
57:5f:da:24:e8:ad:01:23:f5:5d:8f:68:31:94:56:a6:4f:96:
85:69:75:0d:89:45:95:69:ac:c7:1f:80:a1:96:86:ea:14:11:
64:bc:c6:b0:81:00:f1:db:48:8f:30:f1:b3:64:d7:37:de:d1:
1c:9b:28:32:6d:b8:53:23:fb:c4:26:23:b6:5a:8b:9b:4a:7b:
ca:5d:b9:8d:a4:c8:b2:37:eb:8f:3f:b8:15:15:eb:a4:56:d1:
7a:8a:84:98:d0:b4:c2:9f:97:c1:49:e5:90:cd:81:1d:2a:c7:
e4:d8:3b:54:fe:09:1f:02:b2:45:2b:24:75:f1:52:d0:9b:da:
61:7d:37:d5:45:37:fc:3f:52:b3:75:39:ed:38:49:ee:54:24:
3a:d9:a2:5a:97:82:3e:99:89:2b:f0:2e:42:2d:72:a4:9c:ea:
65:36:ab:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tgJ1JM/9MDedLt3maTGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzIzMjVkMmQyMTk3NDY2OWM0ODhmOWViYWE2YmJiOTJj
ZDVmZWQwHhcNMjUwNTEwMDEwMTIwWhcNMjUwNTExMDEwMTIwWjAzMTEwLwYDVQQD
EygyYzYyOWU3NmNhZmUyMDY0Nzc3ODY2ZjJmZTY5NGVkMzAxNDQzMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtGPg47ulcSJ66PLEcbEuU6xpmUR
rWig8XBgxTTjpjuWA21RiEvbi7N5NSnm6HFVXX0ysmPmBsVjafeJ3V93B1mgHPK7
Z99csiCg4LECUtCSU2kMQDY4zlYM72LGBarsLlP9S2lL7paFNxOISpz6yC/jTmj4
/GVa68QVb6ThCEpUQWGg1YnJ9Tsdwq9UGCtmIVz5SlfLixuzAtrNppNl1LMq2vQH
q3JIhFfwP/aX+YU9FmkNCXqaLZqcplyk+nPLwJxV0djPCxYC4BXpm55dJlMYgUOU
Qun6kUSvdkntJvMwebqYJqIybH9gHzZw9tZsvCxS5F2HNtJiTobn1ADNAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxinnbK/iBkd3hm8v5pTtMBRDLSMB8GA1UdIwQY
MBaAFPVyMl0tIZdGacSI+euqa7uSzV/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEt
M2U2MmU5ZTc4OTA2LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEtM2U2MmU5ZTc4OTA2
LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqu8LtWw
pWuItpD9VL0FRw14n2UrY4UUuu+hhMBaUaMqe2RQ4357ND3c+aygKxAVWVXS8TQ0
UPxcfrVKmanwq67+ePUNi75K+3pGM88kBg9BLFX/KCcrYGPvV1/aJOitASP1XY9o
MZRWpk+WhWl1DYlFlWmsxx+AoZaG6hQRZLzGsIEA8dtIjzDxs2TXN97RHJsoMm24
UyP7xCYjtlqLm0p7yl25jaTIsjfrjz+4FRXrpFbReoqEmNC0wp+XwUnlkM2BHSrH
5Ng7VP4JHwKyRSskdfFS0JvaYX031UU3/D9Ss3U57ThJ7lQkOtmiWpeCPpmJK/Au
Qi1ypJzqZTarLw==
-----END CERTIFICATE-----
Generated at Sat May 10 09:44:37 2025 by rpki-client