Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: LfyV8pxv9YboStU8iHM1o7ApSXyTSiOCvoFKwX2hszk=
Subject key identifier: FF:EA:51:BD:E9:9D:6E:28:7C:EC:A8:BC:B4:B8:82:98:6C:2F:A2:FE
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 0196A088778258665304222BC3B82211489C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 14B4
Signing time: Mon 05 May 2025 13:00:20 +0000
Manifest this update: Mon 05 May 2025 13:00:20 +0000
Manifest next update: Tue 06 May 2025 13:00:20 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: 1pjGw8GS/Usnh/keau6kQMeFslz8Qn5ItZ9FZn/1U5o=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:77:82:58:66:53:04:22:2b:c3:b8:22:11:48:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: May 5 13:00:20 2025 GMT
Not After : May 6 13:00:20 2025 GMT
Subject: CN=ffea51bde99d6e287ceca8bcb4b882986c2fa2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:a3:7e:31:53:f1:a0:c7:39:df:65:5f:32:
7e:4b:bd:82:87:d8:38:1f:cf:08:a0:c4:1a:62:07:
ce:b9:2b:a4:39:c1:7d:de:52:48:0f:b4:68:bc:fc:
47:af:64:91:e0:3e:45:cd:91:ea:2a:b3:be:2b:66:
f1:78:8b:25:d2:5a:71:56:0c:87:f5:b3:42:a1:c1:
20:1b:4f:84:1d:48:b5:c8:08:d8:de:e2:51:0d:f4:
18:c6:d2:5f:98:60:20:ff:3a:1f:b8:d3:a3:39:b7:
d4:2f:4b:89:f1:ca:fc:0c:04:34:80:12:23:ff:91:
b1:74:fd:92:fc:f5:1a:db:51:00:f9:f3:e7:50:6e:
00:9f:1e:a3:0d:b3:8c:c9:34:12:da:8f:a4:ff:d4:
53:4b:c7:c9:dc:25:4b:18:fa:de:d0:3e:dd:22:c4:
02:11:ce:69:83:9a:ad:c9:cd:29:4e:24:52:eb:87:
c3:3e:87:ae:85:a1:ad:55:20:7d:82:53:84:9c:9c:
41:b0:94:df:65:50:97:0a:fd:0b:ee:da:29:f8:43:
c4:55:f6:95:ca:64:20:fb:b2:5c:fa:73:68:bb:24:
f0:14:42:e1:8e:94:e2:7b:90:9e:4b:ab:e7:ff:d4:
b8:ff:03:50:d3:ab:a3:5d:00:6f:13:23:47:54:96:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:51:BD:E9:9D:6E:28:7C:EC:A8:BC:B4:B8:82:98:6C:2F:A2:FE
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:00:53:7b:b7:22:52:c6:e8:e2:7c:9d:9a:a0:c1:aa:0b:1f:
57:08:4a:e4:72:20:77:1d:48:eb:9c:20:a3:ae:79:b5:19:52:
c1:62:1b:08:05:f5:70:45:05:82:b2:09:96:00:bf:11:22:22:
2e:4a:62:d1:2a:14:b0:2a:95:d1:8c:5e:6b:a8:45:71:91:31:
e3:68:95:2f:bc:27:1b:86:a9:03:7e:98:3b:12:ca:d2:f8:e9:
df:90:eb:cb:97:c8:25:2a:3c:b4:49:16:2a:84:bb:98:c0:e4:
3b:c8:b3:23:12:6d:87:5a:cf:36:c0:90:9e:f1:ac:06:eb:7b:
74:ab:01:9a:fe:d2:6a:60:e2:58:bc:b4:f3:cd:fa:8c:59:bc:
97:e1:18:bc:9f:72:99:b1:f5:bb:a4:d2:4e:8b:5d:32:46:c7:
5e:3a:69:0a:3f:58:68:cb:ec:b3:4a:cf:83:ec:61:90:f9:e0:
7b:94:f8:e7:83:5c:6b:9c:93:4c:6e:52:76:e1:09:a2:52:29:
7c:9b:e4:5b:6d:e1:90:bb:63:23:f3:b7:c2:96:50:9f:f8:53:
41:8f:8f:31:82:a4:95:3e:46:a6:09:de:03:81:ef:8d:d4:65:
4d:aa:50:d4:83:12:18:b9:88:4a:54:1e:82:1a:af:da:c0:c9:
31:8e:77:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiHeCWGZTBCIrw7giEUicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjUwNTA1MTMwMDIwWhcNMjUwNTA2MTMwMDIwWjAzMTEwLwYDVQQD
EyhmZmVhNTFiZGU5OWQ2ZTI4N2NlY2E4YmNiNGI4ODI5ODZjMmZhMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfqjfjFT8aDHOd9lXzJ+S72Ch9g4
H88IoMQaYgfOuSukOcF93lJID7RovPxHr2SR4D5FzZHqKrO+K2bxeIsl0lpxVgyH
9bNCocEgG0+EHUi1yAjY3uJRDfQYxtJfmGAg/zofuNOjObfUL0uJ8cr8DAQ0gBIj
/5GxdP2S/PUa21EA+fPnUG4Anx6jDbOMyTQS2o+k/9RTS8fJ3CVLGPre0D7dIsQC
Ec5pg5qtyc0pTiRS64fDPoeuhaGtVSB9glOEnJxBsJTfZVCXCv0L7top+EPEVfaV
ymQg+7Jc+nNouyTwFELhjpTie5CeS6vn/9S4/wNQ06ujXQBvEyNHVJbRHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/qUb3pnW4ofOyovLS4gphsL6L+MB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQBTe7ci
Usbo4nydmqDBqgsfVwhK5HIgdx1I65wgo655tRlSwWIbCAX1cEUFgrIJlgC/ESIi
Lkpi0SoUsCqV0Yxea6hFcZEx42iVL7wnG4apA36YOxLK0vjp35Dry5fIJSo8tEkW
KoS7mMDkO8izIxJth1rPNsCQnvGsBut7dKsBmv7SamDiWLy08836jFm8l+EYvJ9y
mbH1u6TSTotdMkbHXjppCj9YaMvss0rPg+xhkPnge5T454Nca5yTTG5SduEJolIp
fJvkW23hkLtjI/O3wpZQn/hTQY+PMYKklT5GpgneA4HvjdRlTapQ1IMSGLmISlQe
ghqv2sDJMY53TA==
-----END CERTIFICATE-----
Generated at Mon May 5 15:44:39 2025 by rpki-client