Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: ll5/77YZVypfbniqaALgRcxzdr2LJa5YdcVlfuxEQEg=
Subject key identifier: 17:1A:D2:2E:90:F4:41:8F:38:4C:FF:20:29:74:E6:6C:D6:DA:61:00
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 0196B6A2D0BC30E94C8F1DCEA6F2DCD64CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 1102
Signing time: Fri 09 May 2025 20:00:45 +0000
Manifest this update: Fri 09 May 2025 20:00:45 +0000
Manifest next update: Sat 10 May 2025 20:00:45 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: 9EIZ09ASiNlXXN7LRUHCXofw9qal4ZAubPuoxHR0HPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:d0:bc:30:e9:4c:8f:1d:ce:a6:f2:dc:d6:4c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: May 9 20:00:45 2025 GMT
Not After : May 10 20:00:45 2025 GMT
Subject: CN=171ad22e90f4418f384cff202974e66cd6da6100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:be:6e:99:20:ef:cf:18:b0:00:dc:37:90:
20:18:ba:0e:fd:a7:24:de:cc:51:c6:bb:03:37:00:
38:f6:81:f1:93:e0:d8:52:f6:6f:23:57:c1:4a:8f:
c9:d5:d0:90:70:8b:6e:f5:d3:92:68:55:99:1a:93:
6b:f2:21:d8:5c:50:f2:62:81:b6:e9:5e:0a:2a:91:
31:8a:29:eb:04:39:28:95:36:35:5e:ad:dd:7b:cc:
a1:99:bf:f3:4c:54:fe:7b:df:9b:7c:49:50:53:90:
b0:02:ba:04:00:ac:ea:16:a2:48:62:07:58:2c:7d:
c0:ba:fa:d4:bd:5b:b6:7e:42:d8:8f:9d:60:fe:f9:
72:23:57:d7:9b:ed:3c:64:7b:64:03:00:9a:23:72:
01:f4:48:89:d6:59:e6:cb:3a:d5:6d:d9:01:a1:07:
0d:ea:cb:ad:0f:f4:e6:a1:47:cf:f2:bc:10:e7:27:
b3:98:7e:e6:e5:23:34:fd:fd:ba:4e:b6:69:cd:29:
a3:e1:c0:78:30:64:c4:c3:01:95:94:a4:e7:fd:b3:
31:1a:27:db:08:4d:62:86:de:67:3a:df:66:0f:ce:
39:83:3e:8a:6c:6e:4c:8d:38:6c:6e:dd:3d:21:1f:
44:af:e4:10:7f:83:db:e6:17:19:e8:7d:8f:27:4a:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1A:D2:2E:90:F4:41:8F:38:4C:FF:20:29:74:E6:6C:D6:DA:61:00
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6d:ff:c3:05:45:56:3f:a2:63:d6:db:da:1f:90:3f:88:b3:
fc:ce:f2:f3:30:75:0f:8d:f6:ad:5e:8c:95:7f:0a:6b:54:d5:
32:96:bd:a6:5d:f0:c1:81:5f:b4:e6:f6:9c:48:12:ad:3a:cd:
d0:1c:7e:54:87:bd:a0:cb:de:c1:50:60:68:01:46:ff:32:c8:
48:15:ea:af:3b:ee:71:9d:ed:ad:ee:60:bd:98:27:d5:ca:8e:
15:e6:05:8f:74:6c:18:0c:7f:e3:21:4d:ba:d0:28:00:a3:82:
d3:da:47:70:42:a8:d7:07:45:0a:22:83:e9:e5:dd:31:c3:51:
cf:d1:5e:db:d7:00:41:4a:78:d4:10:55:7b:9e:60:dd:84:0f:
76:6b:a4:7d:f7:05:c3:41:ea:0d:92:57:ec:5e:d9:d1:e0:2f:
09:67:4b:92:db:53:5d:45:67:f1:ee:5f:12:1f:95:01:8c:fd:
47:ce:67:81:ca:4f:74:a0:1b:46:6b:64:1b:ee:ea:75:c7:11:
a8:1d:d4:03:47:a8:67:87:0e:5b:23:02:09:6e:89:a7:69:b3:
e4:ad:fb:2f:83:32:ba:3c:30:03:25:d2:b7:cc:28:ec:5b:37:
72:b7:65:ab:e4:94:e9:96:c3:74:37:cc:c5:f4:ad:c1:9b:e6:
f4:9d:a5:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2otC8MOlMjx3OpvLc1kyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh
ZTY0MWQwHhcNMjUwNTA5MjAwMDQ1WhcNMjUwNTEwMjAwMDQ1WjAzMTEwLwYDVQQD
EygxNzFhZDIyZTkwZjQ0MThmMzg0Y2ZmMjAyOTc0ZTY2Y2Q2ZGE2MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68G+bpkg788YsADcN5AgGLoO/ack
3sxRxrsDNwA49oHxk+DYUvZvI1fBSo/J1dCQcItu9dOSaFWZGpNr8iHYXFDyYoG2
6V4KKpExiinrBDkolTY1Xq3de8yhmb/zTFT+e9+bfElQU5CwAroEAKzqFqJIYgdY
LH3AuvrUvVu2fkLYj51g/vlyI1fXm+08ZHtkAwCaI3IB9EiJ1lnmyzrVbdkBoQcN
6sutD/TmoUfP8rwQ5yezmH7m5SM0/f26TrZpzSmj4cB4MGTEwwGVlKTn/bMxGifb
CE1iht5nOt9mD845gz6KbG5MjThsbt09IR9Er+QQf4Pb5hcZ6H2PJ0q5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBca0i6Q9EGPOEz/ICl05mzW2mEAMB8GA1UdIwQY
MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt
MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw
LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG3/wwVF
Vj+iY9bb2h+QP4iz/M7y8zB1D432rV6MlX8Ka1TVMpa9pl3wwYFftOb2nEgSrTrN
0Bx+VIe9oMvewVBgaAFG/zLISBXqrzvucZ3tre5gvZgn1cqOFeYFj3RsGAx/4yFN
utAoAKOC09pHcEKo1wdFCiKD6eXdMcNRz9Fe29cAQUp41BBVe55g3YQPdmukffcF
w0HqDZJX7F7Z0eAvCWdLkttTXUVn8e5fEh+VAYz9R85ngcpPdKAbRmtkG+7qdccR
qB3UA0eoZ4cOWyMCCW6Jp2mz5K37L4MyujwwAyXSt8wo7Fs3crdlq+SU6ZbDdDfM
xfStwZvm9J2leg==
-----END CERTIFICATE-----
Generated at Fri May 9 23:56:49 2025 by rpki-client