Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: qgoh3bsIBjagywIfTzLFuGJ937aatoBSZiOCXeWXXXg=
Subject key identifier: 40:D9:58:0E:91:CF:7E:4D:5A:72:65:46:77:F8:9F:8B:70:5A:B5:39
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 0196B2FD01395884F57E02FCB1D9DB68B1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 14C1
Signing time: Fri 09 May 2025 03:00:47 +0000
Manifest this update: Fri 09 May 2025 03:00:47 +0000
Manifest next update: Sat 10 May 2025 03:00:47 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: 5C0ESQYOQDOw7ZSIIGVpS53Db8ZksnoDFVgDfkngIGE=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fd:01:39:58:84:f5:7e:02:fc:b1:d9:db:68:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: May 9 03:00:47 2025 GMT
Not After : May 10 03:00:47 2025 GMT
Subject: CN=40d9580e91cf7e4d5a72654677f89f8b705ab539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:a3:bc:05:c7:fa:f0:f0:82:24:df:94:9e:
b5:78:00:13:9e:ba:ff:01:95:b9:cd:16:13:03:96:
cf:fd:d4:bc:ab:91:85:84:a3:4f:38:a8:d1:d8:e3:
2d:3d:48:04:15:d4:23:af:4f:27:ce:28:59:6b:8d:
4b:d5:9e:c0:d5:2e:0f:e3:6b:9a:8d:b3:c6:f5:79:
4a:d1:96:a2:f8:cc:fa:08:b1:08:5c:5a:63:cb:5b:
f2:4f:ca:d3:e0:17:2a:ee:ca:75:09:e3:2b:68:88:
6a:6e:10:cb:96:50:8e:c1:81:d7:8f:16:31:f2:71:
e9:53:fd:4b:64:21:e5:5c:4e:de:25:0d:79:f5:c8:
dc:80:2a:50:69:11:63:20:f4:9b:97:3d:3f:3d:00:
ff:d2:92:c1:0f:c6:83:82:4d:40:8d:f5:3d:82:87:
a0:b9:c6:38:05:92:7b:3e:98:76:94:e9:c6:9c:9e:
0f:e2:3a:99:e2:1d:e8:2d:04:0d:f8:75:7f:33:b3:
1e:48:0f:f3:3d:07:74:e2:48:7e:bb:f7:17:dc:ba:
f7:74:69:d6:f4:04:c2:6b:4b:99:96:41:d4:71:ad:
2d:e6:63:50:d1:8a:66:99:d5:6a:13:54:93:7e:8c:
e8:f4:20:22:38:b9:0f:aa:ee:f9:66:96:16:56:0b:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D9:58:0E:91:CF:7E:4D:5A:72:65:46:77:F8:9F:8B:70:5A:B5:39
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:09:4b:11:44:8b:c8:76:31:91:8f:e9:e3:b2:e3:9b:e6:2d:
c6:8e:a3:a4:32:a4:e0:fa:0d:d5:70:fd:6d:78:e4:b3:70:bb:
7e:92:18:c2:28:d2:12:65:dc:79:05:f5:62:b1:43:39:2f:70:
d5:b6:eb:39:d2:92:32:ea:95:07:78:d8:3f:44:d8:b5:44:c3:
b5:d4:8c:d7:ab:51:53:a0:5c:85:41:7b:36:0d:0b:f3:70:d6:
81:bb:e8:52:a2:d3:f6:0d:4e:d4:ba:fc:b6:41:78:69:95:2e:
d0:93:88:2c:94:9b:a9:43:88:98:23:a7:71:d3:1d:42:55:a1:
ef:ab:0f:9e:ff:fe:86:90:73:a7:7d:e5:2d:c6:99:60:a9:ec:
24:95:3d:80:be:bb:1f:ae:48:c9:3e:14:a1:4d:69:f8:6b:ae:
7f:ec:7c:e1:b2:38:18:9c:25:e9:ca:a2:48:08:fb:03:65:06:
00:a3:16:29:f2:73:85:3a:00:ff:28:c1:52:e1:d0:f8:c8:82:
7d:cb:26:53:bb:9f:d3:b6:8f:ce:38:90:68:52:87:96:a7:48:
56:fb:8e:47:6d:59:08:80:b0:f5:aa:95:a3:2f:79:da:d1:12:
2c:07:ce:68:42:2a:e9:0e:1a:b3:03:cf:83:74:d7:17:db:b2:
74:31:f9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZay/QE5WIT1fgL8sdnbaLHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5
NzRlM2UwHhcNMjUwNTA5MDMwMDQ3WhcNMjUwNTEwMDMwMDQ3WjAzMTEwLwYDVQQD
Eyg0MGQ5NTgwZTkxY2Y3ZTRkNWE3MjY1NDY3N2Y4OWY4YjcwNWFiNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX6jvAXH+vDwgiTflJ61eAATnrr/
AZW5zRYTA5bP/dS8q5GFhKNPOKjR2OMtPUgEFdQjr08nzihZa41L1Z7A1S4P42ua
jbPG9XlK0Zai+Mz6CLEIXFpjy1vyT8rT4Bcq7sp1CeMraIhqbhDLllCOwYHXjxYx
8nHpU/1LZCHlXE7eJQ159cjcgCpQaRFjIPSblz0/PQD/0pLBD8aDgk1AjfU9goeg
ucY4BZJ7Pph2lOnGnJ4P4jqZ4h3oLQQN+HV/M7MeSA/zPQd04kh+u/cX3Lr3dGnW
9ATCa0uZlkHUca0t5mNQ0YpmmdVqE1STfozo9CAiOLkPqu75ZpYWVgtw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDZWA6Rz35NWnJlRnf4n4twWrU5MB8GA1UdIwQY
MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt
ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5
LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFglLEUSL
yHYxkY/p47Ljm+Ytxo6jpDKk4PoN1XD9bXjks3C7fpIYwijSEmXceQX1YrFDOS9w
1bbrOdKSMuqVB3jYP0TYtUTDtdSM16tRU6BchUF7Ng0L83DWgbvoUqLT9g1O1Lr8
tkF4aZUu0JOILJSbqUOImCOncdMdQlWh76sPnv/+hpBzp33lLcaZYKnsJJU9gL67
H65IyT4UoU1p+Guuf+x84bI4GJwl6cqiSAj7A2UGAKMWKfJzhToA/yjBUuHQ+MiC
fcsmU7uf07aPzjiQaFKHlqdIVvuOR21ZCICw9aqVoy952tESLAfOaEIq6Q4aswPP
g3TXF9uydDH5UQ==
-----END CERTIFICATE-----
Generated at Fri May 9 07:48:21 2025 by rpki-client