Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: tFkiIZdKxSXphp/XO3QZwF68Lj9Zc/9LBEde2YP2I9U=
Subject key identifier: 70:47:A2:2E:99:F3:78:EC:E0:04:34:28:8A:58:96:CA:0A:C3:52:F5
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 01968FCC4858B6F31C8FC2CB8A83910C42C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 065D
Signing time: Fri 02 May 2025 07:00:51 +0000
Manifest this update: Fri 02 May 2025 07:00:51 +0000
Manifest next update: Sat 03 May 2025 07:00:51 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: V3gsHaBIMqo/enGUC8Gxo5uA8sAlzSLWLO8MsGi/WFU=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:48:58:b6:f3:1c:8f:c2:cb:8a:83:91:0c:42:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: May 2 07:00:51 2025 GMT
Not After : May 3 07:00:51 2025 GMT
Subject: CN=7047a22e99f378ece00434288a5896ca0ac352f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:b2:f0:33:de:9c:cc:aa:6d:74:fe:57:4a:
a8:ce:0d:6c:28:13:c7:3f:93:90:0f:e6:2f:ee:da:
d6:a6:c6:bb:e4:73:4d:a2:9d:ca:cc:68:fc:6a:98:
68:1e:fb:a9:95:86:aa:a6:95:ee:b6:aa:e5:3c:48:
71:f7:47:37:09:40:d3:2d:d1:4d:5e:a1:95:26:0d:
cb:34:7f:32:3d:9b:71:16:e1:42:2f:e2:66:11:99:
61:bd:fb:74:2a:13:de:bf:10:2c:b0:de:25:c2:cd:
5b:dd:a2:f4:12:a1:8a:25:5b:43:41:56:66:9b:cf:
20:31:70:9f:45:26:40:78:32:18:f7:4b:be:80:da:
2b:22:40:d9:4d:f2:e2:40:82:49:3c:af:4e:c9:7a:
b6:f1:91:a2:0d:30:63:f5:47:0b:96:5b:8c:5a:48:
a2:90:d6:5d:30:0a:8c:8d:a5:9d:c8:a7:e0:81:ef:
f2:ea:e6:f3:78:c2:cc:2f:88:0c:71:28:0f:46:4b:
5c:d4:92:b2:1c:fb:10:03:be:4b:b5:ab:91:69:12:
55:69:54:f5:8c:aa:83:e8:1f:31:61:a1:ca:a7:f0:
c9:f7:40:de:7e:0f:a0:48:03:3b:44:b1:8e:5c:87:
e0:c5:99:f0:75:8d:ea:50:df:31:f0:a7:87:bd:14:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:A2:2E:99:F3:78:EC:E0:04:34:28:8A:58:96:CA:0A:C3:52:F5
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c7:5c:42:b6:d8:3e:9b:10:f2:cf:7b:49:88:a4:ea:f3:f4:
da:d1:b6:ec:90:4f:c8:33:93:1d:bf:0c:a9:a6:55:cd:05:b3:
73:3e:cb:04:dc:72:b1:47:c1:bd:de:d0:81:24:0b:a9:5c:f2:
11:bc:51:0e:56:e0:78:71:d3:dc:fa:8e:7a:9e:43:70:38:e5:
a8:08:7d:ec:0f:80:8d:4e:4f:d0:27:1e:45:5c:a3:9a:cd:fb:
91:a5:dc:eb:9a:0d:dc:d1:24:db:b0:50:5c:33:2e:83:22:14:
ab:b4:e2:cd:ec:9c:9d:3e:0c:10:b3:92:b1:7e:81:e7:26:07:
78:05:e2:3b:7a:b7:78:62:c2:56:5f:69:3f:da:89:d3:82:f0:
26:88:ef:4d:de:aa:23:52:39:e3:c9:47:49:5d:de:48:73:42:
52:3e:38:f3:da:d8:b6:69:4d:4c:a3:e5:a6:71:3a:91:85:19:
f1:d6:b0:7a:8a:c9:31:01:78:b4:cb:e5:35:02:1e:9b:42:46:
80:de:97:4b:a9:8f:45:23:ad:74:74:98:c9:34:cb:57:1e:4c:
74:20:59:eb:af:7d:6a:d9:1f:c4:3f:1d:b4:26:1c:76:8f:92:
b0:b7:a0:46:e2:ea:b2:34:12:6a:ce:39:c2:61:a4:c4:e0:6c:
e5:4d:c9:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPzEhYtvMcj8LLioORDELBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ1ZTU4MjA2YTFiOWQ1OWVkZGZhOGY5ODhiMzI3MTdi
ZjljNmIwHhcNMjUwNTAyMDcwMDUxWhcNMjUwNTAzMDcwMDUxWjAzMTEwLwYDVQQD
Eyg3MDQ3YTIyZTk5ZjM3OGVjZTAwNDM0Mjg4YTU4OTZjYTBhYzM1MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmWy8DPenMyqbXT+V0qozg1sKBPH
P5OQD+Yv7trWpsa75HNNop3KzGj8aphoHvuplYaqppXutqrlPEhx90c3CUDTLdFN
XqGVJg3LNH8yPZtxFuFCL+JmEZlhvft0KhPevxAssN4lws1b3aL0EqGKJVtDQVZm
m88gMXCfRSZAeDIY90u+gNorIkDZTfLiQIJJPK9OyXq28ZGiDTBj9UcLlluMWkii
kNZdMAqMjaWdyKfgge/y6ubzeMLML4gMcSgPRktc1JKyHPsQA75LtauRaRJVaVT1
jKqD6B8xYaHKp/DJ90Defg+gSAM7RLGOXIfgxZnwdY3qUN8x8KeHvRQGawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBHoi6Z83js4AQ0KIpYlsoKw1L1MB8GA1UdIwQY
MBaAFEvUXlggahudWe3fqPmIsycXv5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQt
MDc4NTEwY2VhYzBkLzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQtMDc4NTEwY2VhYzBk
LzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsdcQrbY
PpsQ8s97SYik6vP02tG27JBPyDOTHb8MqaZVzQWzcz7LBNxysUfBvd7QgSQLqVzy
EbxRDlbgeHHT3PqOep5DcDjlqAh97A+AjU5P0CceRVyjms37kaXc65oN3NEk27BQ
XDMugyIUq7TizeycnT4MELOSsX6B5yYHeAXiO3q3eGLCVl9pP9qJ04LwJojvTd6q
I1I548lHSV3eSHNCUj4489rYtmlNTKPlpnE6kYUZ8daweorJMQF4tMvlNQIem0JG
gN6XS6mPRSOtdHSYyTTLVx5MdCBZ6699atkfxD8dtCYcdo+SsLegRuLqsjQSas45
wmGkxOBs5U3JYA==
-----END CERTIFICATE-----
Generated at Fri May 2 12:04:00 2025 by rpki-client