Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: tCvFp4CX+cZo+oaMHv/D5E0WJS3GdTmCefR+CgqBtYE=
Subject key identifier: E7:0E:6E:66:45:AD:2F:77:7B:57:1E:A3:94:FB:6F:E4:EB:B8:88:47
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 01969FACFFAFD09382EB3838A2406ECC1E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 037D
Signing time: Mon 05 May 2025 09:00:36 +0000
Manifest this update: Mon 05 May 2025 09:00:36 +0000
Manifest next update: Tue 06 May 2025 09:00:36 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: aTwwCnfMIBGXJnS2R7eAmWSZfDEggUYOxA8PaqQs+AM=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:ff:af:d0:93:82:eb:38:38:a2:40:6e:cc:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: May 5 09:00:36 2025 GMT
Not After : May 6 09:00:36 2025 GMT
Subject: CN=e70e6e6645ad2f777b571ea394fb6fe4ebb88847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:a2:e8:42:b4:59:11:59:b0:18:35:91:af:
fc:1a:89:87:c0:cf:ac:a6:84:01:7e:54:24:e7:f0:
30:e4:fd:dd:b4:be:af:45:36:5a:95:d6:61:67:ff:
86:17:7e:5f:83:2c:fc:d0:96:30:03:4d:3d:2e:35:
e8:aa:c3:f4:f7:d5:64:9a:89:8e:14:9c:c3:96:86:
9d:54:dc:d6:64:f5:92:58:74:cb:e8:63:84:64:d2:
dd:88:7e:08:2f:87:78:4d:0a:71:06:f6:7e:04:39:
19:4c:2c:ee:8d:5f:a3:dc:30:89:e5:87:1b:87:e6:
86:f8:af:5e:b7:78:54:b6:7d:1e:50:9e:d5:7c:57:
21:be:8d:17:76:fd:4e:ae:7a:bd:5b:35:39:7a:e7:
e0:57:aa:c3:bb:7b:eb:99:d7:2d:91:c4:cb:e8:97:
f8:ff:53:a3:5f:83:73:f3:ae:60:20:30:32:40:35:
ef:2f:c0:27:d0:34:6c:8d:b3:d2:90:ab:c4:d3:38:
84:e9:ef:80:3e:ad:57:49:75:03:fb:6d:a4:22:55:
5c:0f:80:09:9e:99:e6:ad:f3:3c:3a:c6:34:c8:28:
db:07:31:6e:bb:03:65:42:ac:b7:82:23:c0:69:d0:
aa:70:aa:fe:c2:d4:2d:d1:ee:17:35:1b:ae:22:03:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:6E:66:45:AD:2F:77:7B:57:1E:A3:94:FB:6F:E4:EB:B8:88:47
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a6:c2:05:8b:93:70:11:7d:07:67:8c:de:a9:84:3d:07:f7:
8a:fd:43:08:68:0f:67:59:88:68:f7:ea:6e:21:a1:88:95:9b:
c9:5c:02:ae:a2:15:b6:78:51:ba:66:72:0b:1e:00:e9:c4:08:
4d:34:8a:b8:46:06:56:68:a4:41:c4:c3:6d:0a:a0:45:9b:ed:
15:11:54:46:9f:10:fe:02:c4:16:55:83:9f:a1:c5:04:10:b5:
51:4f:c7:d7:89:95:d6:63:d5:d6:64:4e:a9:09:2d:99:ff:63:
28:5b:d8:ea:b3:c8:36:d0:97:8a:b8:79:dc:81:99:0e:55:7e:
9d:60:5a:28:03:61:b7:f1:a9:5f:db:81:6b:35:1b:79:ca:2d:
60:c6:2c:dd:6c:c1:f7:0d:32:a0:b7:6a:51:d2:de:b2:71:42:
97:63:2f:c7:73:b9:ce:5b:b7:ea:94:76:76:72:fb:e8:24:37:
af:a0:eb:07:12:00:c1:78:70:06:68:5e:bd:28:83:8b:a1:98:
b8:98:c3:05:ba:f7:21:f9:ab:f4:d7:89:af:f2:6d:47:0a:8e:
2e:c5:f9:4a:9f:53:40:2f:76:d1:5b:8d:a3:a1:ef:6c:f9:8b:
93:4c:f1:6b:3b:59:44:33:19:6b:1f:82:62:cc:28:af:a6:e8:
34:db:c8:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafrP+v0JOC6zg4okBuzB6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw
NjU3NzEwHhcNMjUwNTA1MDkwMDM2WhcNMjUwNTA2MDkwMDM2WjAzMTEwLwYDVQQD
EyhlNzBlNmU2NjQ1YWQyZjc3N2I1NzFlYTM5NGZiNmZlNGViYjg4ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWCi6EK0WRFZsBg1ka/8GomHwM+s
poQBflQk5/Aw5P3dtL6vRTZaldZhZ/+GF35fgyz80JYwA009LjXoqsP099VkmomO
FJzDloadVNzWZPWSWHTL6GOEZNLdiH4IL4d4TQpxBvZ+BDkZTCzujV+j3DCJ5Ycb
h+aG+K9et3hUtn0eUJ7VfFchvo0Xdv1Ornq9WzU5eufgV6rDu3vrmdctkcTL6Jf4
/1OjX4Nz865gIDAyQDXvL8An0DRsjbPSkKvE0ziE6e+APq1XSXUD+22kIlVcD4AJ
npnmrfM8OsY0yCjbBzFuuwNlQqy3giPAadCqcKr+wtQt0e4XNRuuIgMTowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcObmZFrS93e1ceo5T7b+TruIhHMB8GA1UdIwQY
MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt
OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy
LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKbCBYuT
cBF9B2eM3qmEPQf3iv1DCGgPZ1mIaPfqbiGhiJWbyVwCrqIVtnhRumZyCx4A6cQI
TTSKuEYGVmikQcTDbQqgRZvtFRFURp8Q/gLEFlWDn6HFBBC1UU/H14mV1mPV1mRO
qQktmf9jKFvY6rPINtCXirh53IGZDlV+nWBaKANht/GpX9uBazUbecotYMYs3WzB
9w0yoLdqUdLesnFCl2Mvx3O5zlu36pR2dnL76CQ3r6DrBxIAwXhwBmhevSiDi6GY
uJjDBbr3Ifmr9NeJr/JtRwqOLsX5Sp9TQC920VuNo6HvbPmLk0zxaztZRDMZax+C
Yswor6boNNvIpw==
-----END CERTIFICATE-----
Generated at Mon May 5 16:43:37 2025 by rpki-client