Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: fc2IJnAGkhpR65xbTxcRPe7hsip1kvj4mubLYtxMnJ8=
Subject key identifier: 5E:1A:FE:58:BE:9F:08:42:AB:64:C0:71:F1:28:F9:19:7C:9F:07:C0
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 0196C53AD291F1F4712B9BD0328A70A2F9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 059F
Signing time: Mon 12 May 2025 16:01:28 +0000
Manifest this update: Mon 12 May 2025 16:01:28 +0000
Manifest next update: Tue 13 May 2025 16:01:28 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: efKF9iuYvitkV+CbFTZGCAJwPcQpsSF5dUt78BGk+nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:d2:91:f1:f4:71:2b:9b:d0:32:8a:70:a2:f9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: May 12 16:01:28 2025 GMT
Not After : May 13 16:01:28 2025 GMT
Subject: CN=5e1afe58be9f0842ab64c071f128f9197c9f07c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:b3:c2:73:7e:93:04:53:b2:13:b2:e0:94:
20:99:40:42:b9:e0:f5:1e:8d:79:ff:a1:f5:9a:aa:
25:29:a4:fb:32:fc:74:f4:2e:8d:5d:01:17:4e:03:
d8:b1:06:43:d4:d6:53:1a:6a:e1:b6:ee:1e:82:8e:
00:34:14:e6:e0:e1:04:f2:44:99:d7:c3:2b:4f:96:
09:a8:81:50:f6:ac:1d:c8:a1:26:32:8f:4e:39:66:
7e:35:dc:b4:0b:64:d4:a7:fc:7a:f0:71:f4:f1:60:
67:1e:00:70:92:cf:6b:6b:20:4b:71:cc:2a:1f:bc:
13:b1:c7:53:8e:35:59:38:67:62:0c:ab:24:47:34:
fe:fe:8c:e9:f1:ac:34:05:c5:26:99:d3:b9:1e:78:
54:81:0a:d0:1a:5b:40:48:5f:e6:fc:4e:81:51:3a:
0a:55:f0:18:4d:04:43:a6:43:54:d2:ad:18:2b:54:
0d:44:59:ee:f3:6a:5e:9a:42:de:d2:34:4e:67:24:
21:55:07:a5:dc:3c:42:f0:26:c4:34:63:42:54:95:
7d:9c:df:47:4e:0d:fe:50:0d:a5:de:0a:95:53:a7:
8e:18:bb:46:e4:91:ff:50:38:2f:40:73:81:8f:fe:
af:8e:6d:f5:54:11:9c:91:a0:7a:8c:96:bf:0b:10:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:FE:58:BE:9F:08:42:AB:64:C0:71:F1:28:F9:19:7C:9F:07:C0
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:26:82:c9:cc:b1:1a:4a:d1:a2:6a:fc:3c:1f:7e:b1:d3:5e:
72:2b:1c:3f:5f:9d:fe:a5:1a:49:cd:b4:6a:d3:fb:e9:48:90:
12:e3:dc:a0:81:3e:67:9c:c6:5a:89:f3:be:f1:c7:e5:d1:0c:
35:d0:4b:38:63:f1:33:f6:ca:11:c3:84:b7:cb:b5:d8:9f:5c:
58:28:23:a4:a7:9e:c2:d5:a5:25:34:a4:4d:11:c9:f9:b5:26:
e1:67:56:c7:e1:c0:0c:53:4c:9b:76:dc:86:b1:72:30:c5:81:
82:5c:b9:08:8f:c1:8b:37:9a:d0:b7:cd:ed:07:55:12:5b:04:
cb:c9:6f:2e:c2:19:e8:8f:08:9d:a5:32:ca:32:1e:7d:7d:96:
f6:32:71:6e:f8:7e:a6:cc:62:a9:3e:f9:1b:0e:24:9d:48:c3:
69:bd:6a:46:1d:e3:f3:51:8e:b0:b6:ad:49:ba:9a:01:51:2d:
90:79:72:1f:6c:88:8d:68:66:f9:a2:4d:59:7b:6d:b7:e2:84:
38:d9:c1:60:5d:e8:03:3c:40:e1:57:7f:1a:bf:d7:c2:b1:fd:
55:41:42:0f:a8:31:54:82:c5:79:a5:ec:8d:30:a1:51:66:f5:
19:11:bf:3d:7d:3d:ad:dd:53:fa:b2:f0:f8:18:66:c6:da:16:
d7:f1:33:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOtKR8fRxK5vQMopwovm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4
NWU3MGMwHhcNMjUwNTEyMTYwMTI4WhcNMjUwNTEzMTYwMTI4WjAzMTEwLwYDVQQD
Eyg1ZTFhZmU1OGJlOWYwODQyYWI2NGMwNzFmMTI4ZjkxOTdjOWYwN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXqzwnN+kwRTshOy4JQgmUBCueD1
Ho15/6H1mqolKaT7Mvx09C6NXQEXTgPYsQZD1NZTGmrhtu4ego4ANBTm4OEE8kSZ
18MrT5YJqIFQ9qwdyKEmMo9OOWZ+Ndy0C2TUp/x68HH08WBnHgBwks9rayBLccwq
H7wTscdTjjVZOGdiDKskRzT+/ozp8aw0BcUmmdO5HnhUgQrQGltASF/m/E6BUToK
VfAYTQRDpkNU0q0YK1QNRFnu82pemkLe0jROZyQhVQel3DxC8CbENGNCVJV9nN9H
Tg3+UA2l3gqVU6eOGLtG5JH/UDgvQHOBj/6vjm31VBGckaB6jJa/CxDuuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4a/li+nwhCq2TAcfEo+Rl8nwfAMB8GA1UdIwQY
MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt
ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw
LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiaCycyx
GkrRomr8PB9+sdNeciscP1+d/qUaSc20atP76UiQEuPcoIE+Z5zGWonzvvHH5dEM
NdBLOGPxM/bKEcOEt8u12J9cWCgjpKeewtWlJTSkTRHJ+bUm4WdWx+HADFNMm3bc
hrFyMMWBgly5CI/Bizea0LfN7QdVElsEy8lvLsIZ6I8InaUyyjIefX2W9jJxbvh+
psxiqT75Gw4knUjDab1qRh3j81GOsLatSbqaAVEtkHlyH2yIjWhm+aJNWXttt+KE
ONnBYF3oAzxA4Vd/Gr/XwrH9VUFCD6gxVILFeaXsjTChUWb1GRG/PX09rd1T+rLw
+BhmxtoW1/EzNA==
-----END CERTIFICATE-----
Generated at Mon May 12 20:18:47 2025 by rpki-client