Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: boco3L6D6cnLSaFuNk9FWpW1WFoXRlhv3zRrd4eh/JU=
Subject key identifier: 14:79:AC:D2:8C:F9:E5:E1:12:BD:9F:67:15:CF:31:63:20:54:4D:C9
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 01968A37F57FAD25CD2163262F3D55E70FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1517
Signing time: Thu 01 May 2025 05:00:45 +0000
Manifest this update: Thu 01 May 2025 05:00:45 +0000
Manifest next update: Fri 02 May 2025 05:00:45 +0000
Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: QKAfgDc944N9j9bNjU4KM1osd5H0PhlndPww6FgHEko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:f5:7f:ad:25:cd:21:63:26:2f:3d:55:e7:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: May 1 05:00:45 2025 GMT
Not After : May 2 05:00:45 2025 GMT
Subject: CN=1479acd28cf9e5e112bd9f6715cf316320544dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:55:30:6b:6d:a1:41:67:d6:b4:d7:80:fd:
59:00:3e:94:ba:33:df:b0:01:99:85:6e:8b:d6:5a:
65:5c:30:df:f2:b4:b4:45:cf:7a:fe:0f:75:f6:c8:
b7:65:95:4f:23:7e:ed:fd:1c:b8:d0:ed:2d:cd:d2:
03:03:22:d8:59:59:6c:f1:62:a4:ae:89:d7:20:a2:
ec:d2:f5:4d:0a:c3:6e:5c:91:c2:ca:34:37:40:c4:
4b:83:0a:fb:73:d5:a3:4b:81:f5:b2:e6:c6:4c:2e:
5c:c2:31:93:59:8c:bf:30:c7:f9:cd:c9:f6:c8:0b:
ab:53:1b:b2:06:29:3e:74:a3:d5:04:58:7e:60:c1:
78:7e:43:ae:ff:42:8b:82:e6:53:a4:d7:33:88:e8:
1d:8e:3f:6f:9d:e9:72:6e:6b:ea:1e:17:6c:d6:57:
4e:be:5d:1f:03:3d:04:e9:99:08:90:8e:8d:8b:92:
07:1f:b1:ba:ff:6e:50:86:12:c5:b2:1c:33:97:0c:
b5:0e:0a:40:7e:ad:23:38:b4:f8:a2:45:9f:95:b9:
9c:1e:25:a3:e1:be:52:d3:87:48:7a:1e:53:3c:34:
71:30:d0:1d:c5:e7:4a:66:33:1b:9a:62:3a:9f:73:
18:50:ae:b8:5c:13:78:10:2c:67:63:06:50:8e:31:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:AC:D2:8C:F9:E5:E1:12:BD:9F:67:15:CF:31:63:20:54:4D:C9
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0b:20:fe:00:52:8f:c6:db:89:df:ce:40:8c:94:15:af:05:
c7:82:b2:e9:29:b5:1e:0d:a8:f6:59:30:b9:81:52:67:8b:02:
09:fb:b3:20:09:9f:8a:2b:4f:c8:18:03:62:9d:c8:db:cf:b6:
9b:46:ce:b0:6f:1c:96:16:87:fd:4f:6b:2c:a0:05:eb:d3:a6:
5f:03:45:f3:16:7d:cd:c7:45:4f:e6:08:2a:a9:04:f6:5f:1e:
5d:52:b6:6d:48:54:76:68:f0:7b:2a:8c:93:41:0a:d0:e3:4e:
c5:94:11:e5:a1:3f:30:e7:e4:6a:38:fd:9d:b9:af:c4:13:8d:
c5:c2:f1:19:4f:69:6f:b8:84:92:78:65:2a:18:e9:e3:c7:bb:
83:f4:74:eb:7e:53:5f:3d:7a:c0:5b:0a:b8:80:1e:f3:31:75:
6a:0f:85:7b:ec:7f:b7:6d:e2:7e:da:92:90:a3:93:9d:f7:42:
3b:b5:5e:78:56:76:c4:89:3d:49:9c:06:c9:9a:89:4a:5c:26:
0e:cb:2a:95:90:22:6c:06:b6:66:10:b7:b0:71:7d:4f:18:be:
c2:ef:e4:c1:3b:6d:51:ff:9d:8a:9f:4d:28:92:53:01:c8:4d:
50:d3:5a:8a:02:c5:d1:55:c8:cb:b6:88:66:ea:c6:f1:c8:9e:
ff:f2:82:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKN/V/rSXNIWMmLz1V5w+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGEzNDE0MTM3MTI5ZmEzOGE2YzYxYzQ5NmFiOGI2MTQw
OWNlMDIwHhcNMjUwNTAxMDUwMDQ1WhcNMjUwNTAyMDUwMDQ1WjAzMTEwLwYDVQQD
EygxNDc5YWNkMjhjZjllNWUxMTJiZDlmNjcxNWNmMzE2MzIwNTQ0ZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR5VMGttoUFn1rTXgP1ZAD6UujPf
sAGZhW6L1lplXDDf8rS0Rc96/g919si3ZZVPI37t/Ry40O0tzdIDAyLYWVls8WKk
ronXIKLs0vVNCsNuXJHCyjQ3QMRLgwr7c9WjS4H1subGTC5cwjGTWYy/MMf5zcn2
yAurUxuyBik+dKPVBFh+YMF4fkOu/0KLguZTpNcziOgdjj9vnelybmvqHhds1ldO
vl0fAz0E6ZkIkI6Ni5IHH7G6/25QhhLFshwzlwy1DgpAfq0jOLT4okWflbmcHiWj
4b5S04dIeh5TPDRxMNAdxedKZjMbmmI6n3MYUK64XBN4ECxnYwZQjjHfrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR5rNKM+eXhEr2fZxXPMWMgVE3JMB8GA1UdIwQY
MBaAFJvaNBQTcSn6OKbGHElquLYUCc4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUt
MTZkM2NkMzUyZjJlLzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUtMTZkM2NkMzUyZjJl
LzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwsg/gBS
j8bbid/OQIyUFa8Fx4Ky6Sm1Hg2o9lkwuYFSZ4sCCfuzIAmfiitPyBgDYp3I28+2
m0bOsG8clhaH/U9rLKAF69OmXwNF8xZ9zcdFT+YIKqkE9l8eXVK2bUhUdmjweyqM
k0EK0ONOxZQR5aE/MOfkajj9nbmvxBONxcLxGU9pb7iEknhlKhjp48e7g/R0635T
Xz16wFsKuIAe8zF1ag+Fe+x/t23iftqSkKOTnfdCO7VeeFZ2xIk9SZwGyZqJSlwm
DssqlZAibAa2ZhC3sHF9Txi+wu/kwTttUf+dip9NKJJTAchNUNNaigLF0VXIy7aI
ZurG8cie//KCcA==
-----END CERTIFICATE-----
Generated at Thu May 1 08:31:57 2025 by rpki-client