Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: 5K5N764Z6J263BAXWmON9kdPHjf7BSt98uJLtzQdolE=
Subject key identifier: 8B:74:47:40:3C:D4:0A:EF:DC:7A:2E:AA:5D:CA:35:8B:C7:14:79:89
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01968A37B4E219A003E95B0B412029443FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 095E
Signing time: Thu 01 May 2025 05:00:28 +0000
Manifest this update: Thu 01 May 2025 05:00:28 +0000
Manifest next update: Fri 02 May 2025 05:00:28 +0000
Files and hashes: 1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: p1zlrVtbYlXq+JvdGqsYGdkKfqr52NL870wBFymjbPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:b4:e2:19:a0:03:e9:5b:0b:41:20:29:44:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: May 1 05:00:28 2025 GMT
Not After : May 2 05:00:28 2025 GMT
Subject: CN=8b7447403cd40aefdc7a2eaa5dca358bc7147989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:d1:2a:d4:4c:a1:d0:72:bc:40:cf:66:2a:
eb:1b:9b:bd:20:2f:34:05:67:64:ec:ca:ac:bc:8b:
39:34:88:82:b6:03:69:69:14:1d:27:0f:5b:8d:3d:
af:66:b5:a7:ba:c3:05:0a:c2:50:36:31:89:8d:4b:
b3:5c:fd:f6:89:e1:46:24:e7:fe:82:8b:b2:75:fc:
30:90:bc:ef:e1:42:2f:50:00:3c:1b:59:db:b5:ed:
d3:44:bd:d9:41:e6:00:b3:48:c8:8a:83:83:b6:66:
88:46:d1:3e:52:cc:45:f8:f6:3f:88:d7:31:51:bf:
89:2e:91:4f:ec:ce:69:56:7e:ca:00:7c:a4:fa:29:
83:2a:7b:9b:1c:b1:69:2a:93:f3:18:1c:ea:48:ee:
4e:23:1f:49:7f:68:8d:13:f0:66:70:36:32:8e:76:
dd:65:9a:49:71:2a:3a:b7:97:38:56:1c:d7:4f:c8:
df:fc:14:f9:be:f8:6f:00:9c:8a:44:8e:46:0d:a0:
64:51:30:e3:ae:cf:7f:cb:42:ab:60:db:1a:f5:2a:
e0:2d:a4:6a:4a:73:78:40:7b:5d:d6:ee:c4:41:f0:
47:7d:6c:9a:f7:c7:f8:ba:32:57:44:95:1a:b1:1d:
59:7f:1c:76:cf:bc:75:86:81:7e:26:ba:52:8c:b0:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:47:40:3C:D4:0A:EF:DC:7A:2E:AA:5D:CA:35:8B:C7:14:79:89
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b1:3d:73:a4:a3:e3:bb:cf:8f:38:33:5a:c7:fd:a3:a2:34:
de:48:8b:60:1b:d2:fc:c1:36:0c:94:22:1f:9c:07:a8:24:94:
5e:b4:7c:eb:22:b5:d8:02:2b:f8:81:9b:65:6b:a3:85:1c:e3:
e3:77:dd:2b:83:b9:8b:e0:4b:d4:1a:4f:a0:aa:04:44:c3:ba:
33:11:c6:b2:66:0e:72:5f:16:dd:ce:be:b6:f2:30:24:e5:ff:
e4:af:a5:17:c8:ab:2c:e6:73:c0:6a:5f:73:f2:5f:e8:db:b5:
74:27:31:ed:38:13:af:7d:d6:78:26:8b:59:06:18:bd:5c:9e:
09:cf:63:4f:7a:1d:b5:98:d2:48:5f:77:98:72:b4:40:bc:b0:
38:6f:2d:5f:5a:46:ae:84:d7:8f:9e:bb:58:b4:51:73:a6:cb:
cd:d8:b4:ca:0f:e0:46:5d:48:7a:bf:e6:23:8f:4e:03:a2:e4:
0f:a2:c2:b4:d5:1b:94:b5:71:eb:20:8c:ed:55:f6:85:c1:65:
16:a4:b7:2c:bd:67:57:98:62:0b:1e:90:af:f6:92:b9:61:09:
46:0a:15:79:d8:14:81:c9:84:7c:05:8e:d5:61:9f:60:69:ad:
d3:d5:0d:25:18:94:d4:8f:85:0a:76:45:d8:57:9d:7e:f5:1f:
4e:38:96:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKN7TiGaAD6VsLQSApRD/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmY0MTk2NTlmNTRkZjM3ODc5MmI2MDJjMDA5MmMzNTM5
ODhlYzgwHhcNMjUwNTAxMDUwMDI4WhcNMjUwNTAyMDUwMDI4WjAzMTEwLwYDVQQD
Eyg4Yjc0NDc0MDNjZDQwYWVmZGM3YTJlYWE1ZGNhMzU4YmM3MTQ3OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyPRKtRModByvEDPZirrG5u9IC80
BWdk7MqsvIs5NIiCtgNpaRQdJw9bjT2vZrWnusMFCsJQNjGJjUuzXP32ieFGJOf+
gouydfwwkLzv4UIvUAA8G1nbte3TRL3ZQeYAs0jIioODtmaIRtE+UsxF+PY/iNcx
Ub+JLpFP7M5pVn7KAHyk+imDKnubHLFpKpPzGBzqSO5OIx9Jf2iNE/BmcDYyjnbd
ZZpJcSo6t5c4VhzXT8jf/BT5vvhvAJyKRI5GDaBkUTDjrs9/y0KrYNsa9SrgLaRq
SnN4QHtd1u7EQfBHfWya98f4ujJXRJUasR1Zfxx2z7x1hoF+JrpSjLDtpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt0R0A81Arv3Houql3KNYvHFHmJMB8GA1UdIwQY
MBaAFL//QZZZ9U3zeHkrYCwAksNTmI7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEt
NzBiZGYxNWRkNjE5LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEtNzBiZGYxNWRkNjE5
LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbE9c6Sj
47vPjzgzWsf9o6I03kiLYBvS/ME2DJQiH5wHqCSUXrR86yK12AIr+IGbZWujhRzj
43fdK4O5i+BL1BpPoKoERMO6MxHGsmYOcl8W3c6+tvIwJOX/5K+lF8irLOZzwGpf
c/Jf6Nu1dCcx7TgTr33WeCaLWQYYvVyeCc9jT3odtZjSSF93mHK0QLywOG8tX1pG
roTXj567WLRRc6bLzdi0yg/gRl1Ier/mI49OA6LkD6LCtNUblLVx6yCM7VX2hcFl
FqS3LL1nV5hiCx6Qr/aSuWEJRgoVedgUgcmEfAWO1WGfYGmt09UNJRiU1I+FCnZF
2FedfvUfTjiWhA==
-----END CERTIFICATE-----
Generated at Thu May 1 07:59:27 2025 by rpki-client