Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: 7Tmjm1oBXUnVnmF3pP2CiCRrQYiZUPysNdhDvLQd1Do=
Subject key identifier: D5:39:8B:8A:2F:2B:EC:06:1F:D9:7D:F5:FB:19:85:7E:D0:F3:2A:FD
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 01967F0FB3151458E7AC1F1F5516EDEA06B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 01:00:57 +0000
Manifest this update: Tue 29 Apr 2025 01:00:57 +0000
Manifest next update: Wed 30 Apr 2025 01:00:57 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: VTeJrjBRjYO1pwbhIh0mis4kQlu0Sm0wD24vODL9EeQ=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:b3:15:14:58:e7:ac:1f:1f:55:16:ed:ea:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Apr 29 01:00:57 2025 GMT
Not After : Apr 30 01:00:57 2025 GMT
Subject: CN=d5398b8a2f2bec061fd97df5fb19857ed0f32afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5f:0b:14:5a:da:94:77:4b:20:35:d7:48:ec:
77:5c:a6:cc:5c:be:44:e9:b6:eb:da:99:17:4b:19:
63:80:dc:d2:1e:98:8e:f9:55:fc:71:69:e8:34:9e:
7f:22:83:83:84:4b:05:7d:82:79:c3:09:70:35:f4:
a2:3a:d4:ad:66:3f:d9:aa:a8:63:0a:20:d4:2e:49:
e6:43:a9:2d:79:3e:58:af:3f:12:d9:fd:c8:46:9c:
13:33:3b:db:42:37:90:e5:fa:d1:a3:22:37:66:80:
99:bb:1a:09:29:4f:31:13:c9:77:90:71:1e:86:cb:
6f:0d:d6:91:4c:03:8c:5c:f2:4e:b6:b2:7d:10:cb:
81:29:b4:22:bd:f6:af:95:16:0d:8b:46:c2:42:8f:
37:51:a2:49:c8:c3:d3:60:39:5d:04:86:d0:09:78:
23:37:14:ba:89:b6:1a:df:87:be:da:12:ca:6a:e5:
07:fc:2e:0b:ba:fb:c2:ee:15:33:ea:79:95:b7:75:
d7:ea:ab:dd:b5:e8:f9:e0:89:7c:8d:cc:b0:97:b8:
4f:9f:a7:c8:c5:f5:e5:7b:1e:93:67:f8:9c:62:f6:
d0:0a:a3:bb:1e:93:d9:fa:5a:bf:50:03:fa:a0:18:
ef:1c:1b:a3:f5:74:50:5f:b7:82:80:8a:cc:a5:e5:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:8B:8A:2F:2B:EC:06:1F:D9:7D:F5:FB:19:85:7E:D0:F3:2A:FD
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7f:fe:3f:9b:83:6e:ac:fa:04:5a:d3:64:68:ec:c8:33:e2:
2a:0c:73:9d:bc:95:1d:a3:80:6f:70:1d:e9:fa:e4:6c:00:c3:
14:dd:73:3a:a5:d0:a7:24:56:ed:d8:d2:82:8f:80:f9:21:cc:
cc:da:4c:08:ca:f1:5a:74:e8:f8:47:dc:da:7f:5b:98:30:56:
f3:42:74:24:b1:e1:19:a3:c3:51:71:4f:d9:af:d9:55:a6:b4:
a7:5d:b7:08:c6:7b:0d:6d:17:ab:78:5c:ae:84:1a:d5:b6:39:
e3:d7:d2:e5:fb:d5:07:a9:a7:78:d6:e0:27:ea:da:71:7c:93:
51:b3:50:7a:9a:34:c7:88:ff:b2:50:77:6a:91:46:f4:c7:0e:
f1:14:73:77:e6:fc:45:bb:80:88:51:8a:4f:88:72:9f:a9:d4:
75:30:dc:7e:05:e0:0f:de:fd:0f:98:51:a4:22:5e:08:44:1d:
e5:27:92:f3:f3:74:31:ab:fe:c2:6b:4f:19:98:92:0a:25:6b:
65:21:11:3f:9e:4f:18:56:c5:46:34:67:2f:d5:64:39:44:e8:
36:62:84:44:2a:f9:55:16:c5:46:55:13:b9:60:3a:db:9f:00:
13:56:1b:f3:30:a7:9e:51:f9:76:fc:0e:02:18:a1:dd:18:d4:
08:88:c3:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/D7MVFFjnrB8fVRbt6ga4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx
ZWExMWQwHhcNMjUwNDI5MDEwMDU3WhcNMjUwNDMwMDEwMDU3WjAzMTEwLwYDVQQD
EyhkNTM5OGI4YTJmMmJlYzA2MWZkOTdkZjVmYjE5ODU3ZWQwZjMyYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F8LFFralHdLIDXXSOx3XKbMXL5E
6bbr2pkXSxljgNzSHpiO+VX8cWnoNJ5/IoODhEsFfYJ5wwlwNfSiOtStZj/Zqqhj
CiDULknmQ6kteT5Yrz8S2f3IRpwTMzvbQjeQ5frRoyI3ZoCZuxoJKU8xE8l3kHEe
hstvDdaRTAOMXPJOtrJ9EMuBKbQivfavlRYNi0bCQo83UaJJyMPTYDldBIbQCXgj
NxS6ibYa34e+2hLKauUH/C4LuvvC7hUz6nmVt3XX6qvdtej54Il8jcywl7hPn6fI
xfXlex6TZ/icYvbQCqO7HpPZ+lq/UAP6oBjvHBuj9XRQX7eCgIrMpeWisQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU5i4ovK+wGH9l99fsZhX7Q8yr9MB8GA1UdIwQY
MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt
YjRiMjg0MzdmZTZjLzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj
LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3/+P5uD
bqz6BFrTZGjsyDPiKgxznbyVHaOAb3Ad6frkbADDFN1zOqXQpyRW7djSgo+A+SHM
zNpMCMrxWnTo+Efc2n9bmDBW80J0JLHhGaPDUXFP2a/ZVaa0p123CMZ7DW0Xq3hc
roQa1bY549fS5fvVB6mneNbgJ+racXyTUbNQepo0x4j/slB3apFG9McO8RRzd+b8
RbuAiFGKT4hyn6nUdTDcfgXgD979D5hRpCJeCEQd5SeS8/N0Mav+wmtPGZiSCiVr
ZSERP55PGFbFRjRnL9VkOUToNmKERCr5VRbFRlUTuWA6258AE1Yb8zCnnlH5dvwO
Ahih3RjUCIjDDw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:32:47 2025 by rpki-client