Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: pv+iBR+P1zW8rmGrywmxD6HZAsg9bwIy+daHSDxGlU4=
Subject key identifier: A0:F2:78:CA:04:4F:08:4B:2E:34:A3:17:EB:3D:B7:F0:F0:50:7E:85
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019688B767835863D3FCC4ABB3B8D9A8A8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1098
Signing time: Wed 30 Apr 2025 22:00:42 +0000
Manifest this update: Wed 30 Apr 2025 22:00:42 +0000
Manifest next update: Thu 01 May 2025 22:00:42 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: aoyhFZIeAE2KdEj5JnpaaezCi92/Z+KqnfU2tXIqiJQ=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:67:83:58:63:d3:fc:c4:ab:b3:b8:d9:a8:a8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Apr 30 22:00:42 2025 GMT
Not After : May 1 22:00:42 2025 GMT
Subject: CN=a0f278ca044f084b2e34a317eb3db7f0f0507e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:57:c4:56:49:49:39:05:eb:36:14:ca:71:
a7:3b:01:9a:bd:3c:23:03:16:e0:80:38:0b:51:80:
b0:7f:05:df:15:e3:c8:b0:a8:7a:6b:8e:6d:01:eb:
79:5a:44:02:5e:1e:d8:25:67:69:56:f8:31:c5:85:
58:49:ea:d5:69:78:5c:2a:2b:d9:89:2a:3b:2c:bb:
1b:f6:d5:58:f7:0f:12:e1:34:6f:66:05:76:69:a7:
9f:fd:ab:1c:f0:60:d8:2e:c2:a0:09:ab:a3:e6:9f:
bc:78:9c:db:ce:7e:56:23:2a:79:8b:7e:84:47:23:
18:2a:f2:4a:ae:35:a8:da:ac:2d:a5:5c:ab:00:4e:
02:7f:67:c4:3e:de:c0:64:e6:ad:a4:b5:a5:1e:97:
1d:8c:84:22:b8:18:b4:2d:80:39:7b:e2:21:8a:2c:
c4:9e:86:06:4c:9f:6b:96:91:b7:a2:57:5a:4c:ff:
d8:b8:bf:6a:ce:09:f2:b2:d7:ca:c6:0b:44:66:f1:
b5:65:38:6c:96:dc:44:cf:19:72:5e:a4:35:3f:e7:
90:e7:54:f9:95:1c:5d:e9:10:13:16:4f:18:b9:7f:
34:66:47:c3:b4:f7:98:7a:86:d2:6b:ee:53:16:3a:
22:59:f3:34:b7:36:44:5d:df:ae:b7:5c:88:4a:24:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:78:CA:04:4F:08:4B:2E:34:A3:17:EB:3D:B7:F0:F0:50:7E:85
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:56:03:43:36:15:09:b1:1b:90:0d:c7:09:36:1a:69:11:c4:
12:0f:d0:a8:73:b9:3d:d5:26:3e:08:32:eb:ae:fe:63:bd:c2:
ce:e9:a7:dc:6b:13:53:2c:ac:59:32:b8:db:62:f6:cc:c7:8a:
43:b9:c7:51:d1:b5:4b:e2:43:b8:e2:2f:da:79:9f:cc:84:6d:
43:30:c4:ee:dd:b9:f8:3b:19:9d:b6:90:f4:6d:77:eb:ee:e3:
3f:21:9f:97:17:19:b3:7b:af:4d:95:6f:34:64:2c:a1:4e:40:
78:10:da:a1:bd:65:f3:0a:59:26:37:9c:6d:99:77:62:a3:84:
16:c9:2e:32:63:0c:0d:b0:b3:ff:0a:01:1b:69:8d:36:e2:9a:
4e:08:51:16:d2:1a:80:e8:b0:10:1f:18:8d:dd:b1:3b:ee:f5:
45:9e:86:42:82:8e:bb:1d:94:9e:87:06:fb:f3:e7:dc:1a:ba:
ed:6a:1f:f2:d2:91:24:c1:a9:42:bb:48:24:a0:7f:08:26:47:
89:0a:a2:b0:e9:35:05:b9:9d:43:e2:8a:f5:81:9b:d1:1f:2e:
19:01:f3:ad:55:32:67:82:2d:98:6e:c0:48:1f:64:2a:1e:54:
a8:f7:97:47:5d:c5:e2:6b:cb:f8:92:f8:37:ef:1c:c5:1b:ef:
04:7e:db:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIt2eDWGPT/MSrs7jZqKjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0
Njg5NGIwHhcNMjUwNDMwMjIwMDQyWhcNMjUwNTAxMjIwMDQyWjAzMTEwLwYDVQQD
EyhhMGYyNzhjYTA0NGYwODRiMmUzNGEzMTdlYjNkYjdmMGYwNTA3ZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv9XxFZJSTkF6zYUynGnOwGavTwj
AxbggDgLUYCwfwXfFePIsKh6a45tAet5WkQCXh7YJWdpVvgxxYVYSerVaXhcKivZ
iSo7LLsb9tVY9w8S4TRvZgV2aaef/asc8GDYLsKgCauj5p+8eJzbzn5WIyp5i36E
RyMYKvJKrjWo2qwtpVyrAE4Cf2fEPt7AZOatpLWlHpcdjIQiuBi0LYA5e+IhiizE
noYGTJ9rlpG3oldaTP/YuL9qzgnystfKxgtEZvG1ZThsltxEzxlyXqQ1P+eQ51T5
lRxd6RATFk8YuX80ZkfDtPeYeobSa+5TFjoiWfM0tzZEXd+ut1yISiQZ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDyeMoETwhLLjSjF+s9t/DwUH6FMB8GA1UdIwQY
MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt
NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2
LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFYDQzYV
CbEbkA3HCTYaaRHEEg/QqHO5PdUmPggy667+Y73Czumn3GsTUyysWTK422L2zMeK
Q7nHUdG1S+JDuOIv2nmfzIRtQzDE7t25+DsZnbaQ9G136+7jPyGflxcZs3uvTZVv
NGQsoU5AeBDaob1l8wpZJjecbZl3YqOEFskuMmMMDbCz/woBG2mNNuKaTghRFtIa
gOiwEB8Yjd2xO+71RZ6GQoKOux2UnocG+/Pn3Bq67Wof8tKRJMGpQrtIJKB/CCZH
iQqisOk1BbmdQ+KK9YGb0R8uGQHzrVUyZ4ItmG7ASB9kKh5UqPeXR13F4mvL+JL4
N+8cxRvvBH7bvg==
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:27 2025 by rpki-client