Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: /npRHfnWUyaiaq0DlH6N4p623O2gJW+wOx76FldCt/c=
Subject key identifier: A4:E4:E5:B5:6F:D4:22:61:B6:04:28:1E:B6:19:F2:F2:67:8A:08:2A
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 0196CBE180A3C424BB1334D89E698D4D56F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0C49
Signing time: Tue 13 May 2025 23:01:15 +0000
Manifest this update: Tue 13 May 2025 23:01:15 +0000
Manifest next update: Wed 14 May 2025 23:01:15 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: eHSnS9JHxnTDlfRjghPAHn3PB+G482nX3k1+4TkbFZU=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:80:a3:c4:24:bb:13:34:d8:9e:69:8d:4d:56:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: May 13 23:01:15 2025 GMT
Not After : May 14 23:01:15 2025 GMT
Subject: CN=a4e4e5b56fd42261b604281eb619f2f2678a082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:9b:71:ac:65:4f:5c:eb:b5:2c:0b:8d:0d:
f1:26:a1:40:af:81:93:6b:f4:ba:f5:2e:a4:56:07:
f4:62:4a:e7:f1:c4:dd:e4:1b:e9:2f:00:33:f0:18:
c5:34:16:64:91:86:da:e5:35:9e:73:45:67:89:95:
5f:40:ae:6d:d5:9d:55:af:b1:9c:0f:61:6d:2f:81:
5c:0d:72:dd:76:95:7b:c3:0b:55:a3:b0:26:e3:94:
61:44:7c:fa:b2:cf:ef:56:d9:7a:43:b5:53:88:7a:
d1:87:25:78:59:12:a3:f9:83:22:62:d8:ef:83:bc:
2a:15:b3:07:19:75:ae:90:ad:ea:08:7b:c7:26:d3:
3a:9c:5a:c4:b6:c1:16:71:dc:13:49:f9:61:d8:52:
3d:f5:33:a1:49:3b:74:38:c0:4f:07:ff:c9:fd:79:
5f:b5:3b:e0:1e:19:90:6b:eb:d4:7f:1d:99:99:91:
d6:85:ae:70:11:7e:2e:e6:75:1a:9b:2b:f3:ee:bd:
47:8e:d1:48:7d:73:52:68:17:13:d5:a7:42:b5:ab:
3f:f3:88:cb:81:f0:d3:09:04:6a:01:1b:80:a2:33:
98:1a:78:d1:8a:96:d9:0f:57:f4:47:75:fe:f9:db:
e0:29:7f:f4:be:96:9e:98:b8:19:98:ba:fd:41:54:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:E5:B5:6F:D4:22:61:B6:04:28:1E:B6:19:F2:F2:67:8A:08:2A
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:42:70:be:f0:9a:db:5d:f7:68:16:f8:8d:7e:09:8a:9a:b8:
46:30:39:8b:1a:a9:5f:5a:29:7a:36:d0:c8:39:c3:70:ae:9a:
d6:b6:34:ad:11:f3:47:33:9e:b9:4d:3a:d8:2e:c0:07:1d:c5:
0b:65:d2:1d:48:60:3c:50:2e:df:3f:51:54:b1:2f:fa:3e:a5:
cf:15:75:52:46:85:d0:c1:3c:8f:9b:2e:ce:6e:e1:b5:a6:40:
6a:4e:41:f9:76:54:f0:13:b7:29:20:a7:e8:4a:ff:47:08:06:
a5:d4:6d:08:81:73:4b:2d:1a:33:62:53:18:88:7b:d2:d1:0c:
09:2d:a6:ef:92:c0:bd:8b:c3:0e:05:fe:68:dc:21:d5:39:9f:
9a:51:ac:3c:b1:cb:8b:e1:cc:10:55:e4:63:b2:5e:b5:68:59:
3a:3f:c0:f2:f5:84:9d:83:81:1a:8f:aa:df:dc:6e:7f:94:71:
6e:8d:af:7a:66:cf:f8:c7:af:15:23:8e:ab:2f:25:82:5f:f6:
dc:e0:4c:6f:91:01:43:be:9c:3b:b7:84:15:12:62:c3:43:e6:
1c:e5:2b:6c:dd:bc:f9:db:7d:2f:1b:ef:67:6b:dc:4c:d0:4e:
1b:0b:70:9b:b4:47:8d:f2:b8:96:e2:c1:42:47:b1:fd:62:09:
17:80:38:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbL4YCjxCS7EzTYnmmNTVbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWFkYjAyMDhhMmQyYTcxOGQzMDY0YjQ2MTNmZGM0MzIw
ZDI4ZjkwHhcNMjUwNTEzMjMwMTE1WhcNMjUwNTE0MjMwMTE1WjAzMTEwLwYDVQQD
EyhhNGU0ZTViNTZmZDQyMjYxYjYwNDI4MWViNjE5ZjJmMjY3OGEwODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKObcaxlT1zrtSwLjQ3xJqFAr4GT
a/S69S6kVgf0Ykrn8cTd5BvpLwAz8BjFNBZkkYba5TWec0VniZVfQK5t1Z1Vr7Gc
D2FtL4FcDXLddpV7wwtVo7Am45RhRHz6ss/vVtl6Q7VTiHrRhyV4WRKj+YMiYtjv
g7wqFbMHGXWukK3qCHvHJtM6nFrEtsEWcdwTSflh2FI99TOhSTt0OMBPB//J/Xlf
tTvgHhmQa+vUfx2ZmZHWha5wEX4u5nUamyvz7r1HjtFIfXNSaBcT1adCtas/84jL
gfDTCQRqARuAojOYGnjRipbZD1f0R3X++dvgKX/0vpaemLgZmLr9QVRYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTk5bVv1CJhtgQoHrYZ8vJniggqMB8GA1UdIwQY
MBaAFPWa2wIIotKnGNMGS0YT/cQyDSj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEt
ZTQ0NzhjNTUzMDhhLzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEtZTQ0NzhjNTUzMDhh
LzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekJwvvCa
2133aBb4jX4Jipq4RjA5ixqpX1opejbQyDnDcK6a1rY0rRHzRzOeuU062C7ABx3F
C2XSHUhgPFAu3z9RVLEv+j6lzxV1UkaF0ME8j5suzm7htaZAak5B+XZU8BO3KSCn
6Er/RwgGpdRtCIFzSy0aM2JTGIh70tEMCS2m75LAvYvDDgX+aNwh1TmfmlGsPLHL
i+HMEFXkY7JetWhZOj/A8vWEnYOBGo+q39xuf5Rxbo2vembP+MevFSOOqy8lgl/2
3OBMb5EBQ76cO7eEFRJiw0PmHOUrbN28+dt9LxvvZ2vcTNBOGwtwm7RHjfK4luLB
Qkex/WIJF4A4zQ==
-----END CERTIFICATE-----
Generated at Wed May 14 07:13:52 2025 by rpki-client