Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
File: diI4ozxVDMXfAkTz_G49vZHkw54.mft (raw, json)
Hash identifier: B+9w0XEeoH+JrHpINapWfl3Su+5V/U8/rpTY4XqtXhU=
Subject key identifier: 2D:0A:E0:B5:C5:69:B9:F6:CB:DA:D3:E6:7F:51:21:30:B1:07:83:CB
Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Certificate serial: 0196C803CCB1E655BD1DF0D297D4FA029C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
Manifest number: 09A4
Signing time: Tue 13 May 2025 05:00:14 +0000
Manifest this update: Tue 13 May 2025 05:00:14 +0000
Manifest next update: Wed 14 May 2025 05:00:14 +0000
Files and hashes: 1: diI4ozxVDMXfAkTz_G49vZHkw54.crl (hash: YxPyyAKikaEGHZZAOBgHN4+I6c9CEHBcC6z3ygWEvKs=)
2: wJoEv1cTcMs89DVqbv88rXmkjBs.roa (hash: dwNiZrwk++xFBCbnEtCywNysmHqCMLzFmgUxU3OD8L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:03:cc:b1:e6:55:bd:1d:f0:d2:97:d4:fa:02:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Validity
Not Before: May 13 05:00:14 2025 GMT
Not After : May 14 05:00:14 2025 GMT
Subject: CN=2d0ae0b5c569b9f6cbdad3e67f512130b10783cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:4d:76:c4:f1:5f:89:da:6d:25:49:90:38:
73:90:b5:1c:69:57:d9:3a:7c:06:3f:8f:b4:ac:f9:
cf:5e:a8:d0:db:d5:a9:85:08:2d:26:a6:2f:94:59:
57:8e:77:3b:ab:a1:46:d0:8a:3d:91:15:2d:4a:47:
a3:0c:d4:63:fb:b1:c6:cf:21:e8:8b:f6:1b:1c:50:
68:70:5e:75:ce:1a:32:65:f8:61:9e:74:9f:c4:8e:
90:e6:2c:9d:87:55:9c:e2:8d:f5:f1:54:e1:df:e9:
22:34:a7:02:f8:ae:4c:b1:15:fc:0c:21:e8:0f:c9:
1d:17:c2:69:d3:1c:35:ae:44:09:b6:3d:d8:41:be:
3e:a2:89:68:11:7a:c6:1b:b7:4d:d4:ef:cf:9a:41:
d0:47:9e:bd:04:2f:1c:d5:8d:b7:16:a5:57:02:44:
1c:12:f9:a3:55:ea:b8:e8:b6:70:52:ef:65:81:47:
04:67:f9:b9:41:2d:be:a1:43:af:35:0c:a8:43:4e:
4f:8d:1d:59:99:0e:84:66:fb:8d:c9:ee:b3:5d:d1:
77:bc:fe:de:a7:0f:6c:aa:0b:d6:3c:a3:92:28:64:
04:61:a7:b0:5f:1c:f8:52:ab:54:38:fb:50:31:28:
35:67:e0:99:a2:97:10:51:0a:fc:ee:81:be:4c:09:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0A:E0:B5:C5:69:B9:F6:CB:DA:D3:E6:7F:51:21:30:B1:07:83:CB
X509v3 Authority Key Identifier:
keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:29:9a:41:3c:48:53:ee:0f:06:7b:62:e8:af:63:89:ff:c5:
56:d1:f2:a8:3e:07:2e:f1:f4:5d:5f:32:b6:b3:02:f3:f3:ad:
17:7f:b6:13:5b:84:5f:9f:44:ec:32:f0:c6:12:0f:f8:48:4f:
44:bc:68:84:5c:f4:ff:08:e6:ec:d1:4e:ad:2a:fc:c8:2a:ee:
8d:7f:69:b6:20:84:67:de:6c:9d:39:fb:58:12:ba:89:dd:ef:
a1:21:06:a0:a0:fd:fa:c6:ca:09:97:db:a3:2b:bc:cc:03:66:
df:91:05:8b:0d:7d:fc:c2:68:14:5f:0f:5c:5f:a4:93:8f:82:
85:0a:45:37:0c:5d:54:ed:6a:c5:cb:ed:7f:34:04:7c:65:51:
1e:49:1c:75:cc:b8:31:d3:1a:e2:c1:93:f3:4b:85:8e:94:18:
bc:23:72:bf:87:ac:9f:14:3b:76:ad:c6:45:9b:2e:1d:dc:55:
d4:1e:e5:87:e4:de:73:e3:8a:ca:34:cc:b6:04:e1:87:7b:11:
ea:0b:93:e8:67:1f:a6:d5:12:1f:20:34:db:df:f5:18:eb:28:
a2:2d:84:b5:4a:3b:7b:26:bc:4c:9e:3c:12:76:63:7e:8c:d6:
e5:a6:d8:b0:da:77:2f:5a:96:fd:2c:59:b8:f1:23:0e:0b:b7:
2b:48:af:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIA8yx5lW9HfDSl9T6ApxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjIzOGEzM2M1NTBjYzVkZjAyNDRmM2ZjNmUzZGJkOTFl
NGMzOWUwHhcNMjUwNTEzMDUwMDE0WhcNMjUwNTE0MDUwMDE0WjAzMTEwLwYDVQQD
EygyZDBhZTBiNWM1NjliOWY2Y2JkYWQzZTY3ZjUxMjEzMGIxMDc4M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq5NdsTxX4nabSVJkDhzkLUcaVfZ
OnwGP4+0rPnPXqjQ29WphQgtJqYvlFlXjnc7q6FG0Io9kRUtSkejDNRj+7HGzyHo
i/YbHFBocF51zhoyZfhhnnSfxI6Q5iydh1Wc4o318VTh3+kiNKcC+K5MsRX8DCHo
D8kdF8Jp0xw1rkQJtj3YQb4+ooloEXrGG7dN1O/PmkHQR569BC8c1Y23FqVXAkQc
EvmjVeq46LZwUu9lgUcEZ/m5QS2+oUOvNQyoQ05PjR1ZmQ6EZvuNye6zXdF3vP7e
pw9sqgvWPKOSKGQEYaewXxz4UqtUOPtQMSg1Z+CZopcQUQr87oG+TAkrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0K4LXFabn2y9rT5n9RITCxB4PLMB8GA1UdIwQY
MBaAFHYiOKM8VQzF3wJE8/xuPb2R5MOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2Qt
MWIxZmM3OWQwNTUxLzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2QtMWIxZmM3OWQwNTUx
LzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATimaQTxI
U+4PBnti6K9jif/FVtHyqD4HLvH0XV8ytrMC8/OtF3+2E1uEX59E7DLwxhIP+EhP
RLxohFz0/wjm7NFOrSr8yCrujX9ptiCEZ95snTn7WBK6id3voSEGoKD9+sbKCZfb
oyu8zANm35EFiw19/MJoFF8PXF+kk4+ChQpFNwxdVO1qxcvtfzQEfGVRHkkcdcy4
MdMa4sGT80uFjpQYvCNyv4esnxQ7dq3GRZsuHdxV1B7lh+Tec+OKyjTMtgThh3sR
6guT6GcfptUSHyA029/1GOsooi2EtUo7eya8TJ48EnZjfozW5abYsNp3L1qW/SxZ
uPEjDgu3K0iviA==
-----END CERTIFICATE-----
Generated at Tue May 13 07:45:38 2025 by rpki-client