Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: RgwbcNu1e+bNSP2PgOLqFctSOJu149mutQoQRCTt81E=
Subject key identifier: FE:9A:04:04:D5:DE:F1:59:D5:56:22:2A:20:DC:E1:DF:71:F0:29:65
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 0196C8047FF898D88457F3854B2443457C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 015F
Signing time: Tue 13 May 2025 05:01:00 +0000
Manifest this update: Tue 13 May 2025 05:01:00 +0000
Manifest next update: Wed 14 May 2025 05:01:00 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: WC5XDhls7Uxi4HaMasUbwgirer+ZCf4fRJQV4jDxip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:7f:f8:98:d8:84:57:f3:85:4b:24:43:45:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: May 13 05:01:00 2025 GMT
Not After : May 14 05:01:00 2025 GMT
Subject: CN=fe9a0404d5def159d556222a20dce1df71f02965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:bb:27:1a:cd:77:8e:8b:76:64:20:64:be:
2b:dc:0f:11:19:88:02:7d:63:bb:97:cd:e3:63:79:
4a:ea:4a:1c:1f:f4:c7:37:da:5f:63:01:a3:3c:46:
a2:1f:bf:c0:4b:72:55:c2:bf:8f:72:12:1e:ba:8f:
e1:a1:e0:bd:60:44:2b:6e:57:74:08:4d:75:3c:37:
24:e8:e5:3b:6a:69:17:ed:23:5d:93:4d:7c:b5:80:
31:96:d4:65:5a:18:b5:6f:8d:14:d4:61:a4:fe:f8:
eb:2a:6c:79:8f:fc:11:f9:fb:44:0a:fd:fc:52:7d:
97:d3:4d:75:4a:5c:84:a1:ee:30:b3:db:76:82:03:
56:34:42:c7:2d:e5:a9:55:4a:2f:4b:fb:02:f2:38:
75:b6:58:72:02:46:4b:30:da:c9:9b:93:22:46:03:
96:24:05:f3:6b:74:d0:48:8c:36:be:50:a0:f1:16:
ab:da:98:0e:6f:e9:f7:d8:b5:8b:2c:b2:6d:d8:ec:
c5:26:c5:d0:b2:17:a7:2e:9d:bc:88:e1:c7:86:cb:
f2:d9:2a:c2:65:c5:af:7d:a9:25:53:1b:25:43:87:
eb:4e:a7:9d:5b:b9:44:53:a3:56:e9:2b:ee:0d:aa:
62:f0:90:e8:16:07:6e:09:7a:f0:2b:07:a0:c9:b4:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9A:04:04:D5:DE:F1:59:D5:56:22:2A:20:DC:E1:DF:71:F0:29:65
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:78:2e:45:dd:40:f5:d8:16:84:0d:a0:85:58:f6:9e:b1:43:
35:63:37:33:cb:4b:24:ad:55:36:bf:45:e1:54:fd:c1:c6:b7:
1d:1a:55:3a:93:13:75:00:4d:bf:3b:6b:bb:d2:65:de:00:f2:
50:8c:20:cd:07:75:f1:f9:d1:22:58:6e:f2:d9:16:5c:a5:ef:
90:29:b8:ad:d0:4d:42:04:79:fb:54:3a:62:7e:dc:36:02:f6:
6b:61:a6:96:bd:1f:50:ab:6a:84:1c:be:28:89:b9:f2:ff:1d:
24:0c:80:0c:89:5f:36:a2:4f:ab:8f:65:63:5e:72:03:2f:cb:
05:9c:f0:32:01:67:18:d2:e6:79:77:2c:9e:32:d4:83:52:fb:
7f:66:28:b9:ad:8d:45:9c:5e:72:21:3f:81:f0:92:a8:50:6d:
16:95:0a:11:a0:35:a5:71:0f:a7:48:57:5f:d8:42:d4:87:cb:
c9:5a:a8:23:09:c7:08:ad:84:ea:3f:9d:d1:bd:f1:5b:d5:74:
f0:dd:e4:5f:e8:a1:a8:a2:a9:fa:36:53:67:75:68:1f:ea:5e:
75:49:1f:66:86:3e:0a:37:fc:c3:7e:e5:fb:f9:20:43:95:f3:
07:a4:d0:02:b4:a5:7b:05:9b:05:de:40:7c:c6:58:08:05:cf:
85:e7:2b:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIBH/4mNiEV/OFSyRDRXw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmY2MWQ1YzU4ZTZlYTZlYzVjZjdlZTZjZjM1M2E2NjNi
MWIzYTgwHhcNMjUwNTEzMDUwMTAwWhcNMjUwNTE0MDUwMTAwWjAzMTEwLwYDVQQD
EyhmZTlhMDQwNGQ1ZGVmMTU5ZDU1NjIyMmEyMGRjZTFkZjcxZjAyOTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kK7JxrNd46LdmQgZL4r3A8RGYgC
fWO7l83jY3lK6kocH/THN9pfYwGjPEaiH7/AS3JVwr+PchIeuo/hoeC9YEQrbld0
CE11PDck6OU7amkX7SNdk018tYAxltRlWhi1b40U1GGk/vjrKmx5j/wR+ftECv38
Un2X0011SlyEoe4ws9t2ggNWNELHLeWpVUovS/sC8jh1tlhyAkZLMNrJm5MiRgOW
JAXza3TQSIw2vlCg8Rar2pgOb+n32LWLLLJt2OzFJsXQshenLp28iOHHhsvy2SrC
ZcWvfaklUxslQ4frTqedW7lEU6NW6SvuDapi8JDoFgduCXrwKwegybTJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6aBATV3vFZ1VYiKiDc4d9x8CllMB8GA1UdIwQY
MBaAFNv/YdXFjm6m7Fz37mzzU6ZjsbOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMt
YjhiMzZmODk1NmI3LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMtYjhiMzZmODk1NmI3
LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3guRd1A
9dgWhA2ghVj2nrFDNWM3M8tLJK1VNr9F4VT9wca3HRpVOpMTdQBNvztru9Jl3gDy
UIwgzQd18fnRIlhu8tkWXKXvkCm4rdBNQgR5+1Q6Yn7cNgL2a2Gmlr0fUKtqhBy+
KIm58v8dJAyADIlfNqJPq49lY15yAy/LBZzwMgFnGNLmeXcsnjLUg1L7f2Youa2N
RZxeciE/gfCSqFBtFpUKEaA1pXEPp0hXX9hC1IfLyVqoIwnHCK2E6j+d0b3xW9V0
8N3kX+ihqKKp+jZTZ3VoH+pedUkfZoY+Cjf8w37l+/kgQ5XzB6TQArSlewWbBd5A
fMZYCAXPhecrqg==
-----END CERTIFICATE-----
Generated at Tue May 13 06:32:20 2025 by rpki-client