Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: vOwwmApa1UxsD+peHy2CF+xr8rIdPppnJijpqDZh0xA=
Subject key identifier: E9:9C:B0:AD:E9:94:C7:BB:97:BC:2F:E8:8C:C3:70:A5:19:37:7F:AD
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 01967D8E85D800E355365CB4B6FD8A6580FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 01CB
Signing time: Mon 28 Apr 2025 18:00:14 +0000
Manifest this update: Mon 28 Apr 2025 18:00:14 +0000
Manifest next update: Tue 29 Apr 2025 18:00:14 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: bhnpx4pMbCDf7IqUEkyeDeKTjf6G0IJOwrfd5H1I+AI=)
2: LkbZ9NbuqV8kVwW0R6t_W7E36SY.roa (hash: OFwtZ8nR+nHbeTcy4UO/g/3elRZlu1GMxchq0zT/W/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:85:d8:00:e3:55:36:5c:b4:b6:fd:8a:65:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Apr 28 18:00:14 2025 GMT
Not After : Apr 29 18:00:14 2025 GMT
Subject: CN=e99cb0ade994c7bb97bc2fe88cc370a519377fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:1e:e9:53:5c:0e:28:ba:55:ed:ae:58:75:
b1:1b:53:35:41:53:dd:9c:fe:ce:a3:4f:17:b0:a8:
72:c2:26:4b:b7:02:f9:49:e1:52:f5:b5:6c:ac:98:
d5:30:00:92:b8:dc:05:6b:25:cc:db:8b:ff:76:de:
35:97:48:97:21:a4:9b:64:57:11:04:c4:52:29:01:
bd:40:71:d5:a7:78:df:f3:3b:7c:21:68:50:23:cc:
fb:22:bf:86:5f:f5:fa:7d:66:c7:ca:a4:13:68:f7:
3e:5d:e8:02:14:95:fa:72:d4:c9:f8:55:fb:1d:e7:
ce:8f:d9:38:ae:b9:71:84:75:92:7b:9d:31:25:55:
3c:0d:cb:cf:74:6f:2a:ef:8e:60:9c:da:db:9c:44:
51:98:86:54:6c:e9:40:2f:ff:31:60:e8:d8:68:de:
bc:07:36:5a:7c:b9:60:83:09:0f:2e:14:6f:93:e0:
31:69:28:f6:09:1c:10:da:3a:fe:6d:c2:01:50:a1:
7e:f7:49:b6:54:b0:0b:93:70:0a:b5:39:fb:95:0c:
92:23:34:c3:d8:05:8b:82:81:bc:9e:b5:df:a7:6a:
8f:04:d2:ae:6d:9f:51:cd:c3:f9:1d:72:f7:92:11:
0d:2e:f2:5a:27:02:b1:65:e3:7f:e0:25:0c:f8:40:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9C:B0:AD:E9:94:C7:BB:97:BC:2F:E8:8C:C3:70:A5:19:37:7F:AD
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:46:e8:6a:98:73:df:40:58:35:0d:e9:15:bc:c5:b4:ce:7f:
39:0e:fa:8d:be:4b:56:00:a6:48:5d:f8:09:94:e7:65:58:20:
f2:dc:25:70:5c:7c:9b:f4:97:75:b1:f7:7a:73:56:9b:82:80:
07:95:3f:06:b7:ae:3f:a2:ce:0c:f2:49:43:4c:b1:c5:08:7e:
89:2a:43:6e:9d:7b:c0:5e:12:f8:93:2c:53:45:54:82:fb:ed:
51:2d:cf:0c:d0:8f:c3:86:c9:e1:30:8d:31:90:f9:61:61:ec:
e9:88:72:2e:e8:2f:6b:56:46:02:9e:eb:77:46:72:8d:0e:a4:
b6:83:81:1c:1c:d2:68:5f:15:55:a6:1c:b6:57:f5:4c:73:5f:
a5:8b:41:43:2c:a7:5c:b1:78:7d:c6:3a:bb:cd:66:da:91:a7:
cf:c7:4f:d7:f4:5a:46:70:f7:75:85:37:d8:38:95:43:3c:1a:
c4:1a:45:da:cd:d4:04:20:ff:37:60:57:ac:14:bf:41:a3:2f:
44:91:89:d6:02:a6:16:3e:fa:b3:67:68:e7:37:3e:a3:0f:fb:
6c:13:df:97:0b:fb:e5:cb:90:f7:18:ab:9e:7e:bb:07:68:de:
eb:c2:5b:62:5b:e7:d8:cd:6d:dd:c6:3d:92:0f:5b:75:b7:f7:
6b:d6:89:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9joXYAONVNly0tv2KZYD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjUwNDI4MTgwMDE0WhcNMjUwNDI5MTgwMDE0WjAzMTEwLwYDVQQD
EyhlOTljYjBhZGU5OTRjN2JiOTdiYzJmZTg4Y2MzNzBhNTE5Mzc3ZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyce6VNcDii6Ve2uWHWxG1M1QVPd
nP7Oo08XsKhywiZLtwL5SeFS9bVsrJjVMACSuNwFayXM24v/dt41l0iXIaSbZFcR
BMRSKQG9QHHVp3jf8zt8IWhQI8z7Ir+GX/X6fWbHyqQTaPc+XegCFJX6ctTJ+FX7
HefOj9k4rrlxhHWSe50xJVU8DcvPdG8q745gnNrbnERRmIZUbOlAL/8xYOjYaN68
BzZafLlggwkPLhRvk+AxaSj2CRwQ2jr+bcIBUKF+90m2VLALk3AKtTn7lQySIzTD
2AWLgoG8nrXfp2qPBNKubZ9RzcP5HXL3khENLvJaJwKxZeN/4CUM+ED51QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmcsK3plMe7l7wv6IzDcKUZN3+tMB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkboaphz
30BYNQ3pFbzFtM5/OQ76jb5LVgCmSF34CZTnZVgg8twlcFx8m/SXdbH3enNWm4KA
B5U/BreuP6LODPJJQ0yxxQh+iSpDbp17wF4S+JMsU0VUgvvtUS3PDNCPw4bJ4TCN
MZD5YWHs6YhyLugva1ZGAp7rd0ZyjQ6ktoOBHBzSaF8VVaYctlf1THNfpYtBQyyn
XLF4fcY6u81m2pGnz8dP1/RaRnD3dYU32DiVQzwaxBpF2s3UBCD/N2BXrBS/QaMv
RJGJ1gKmFj76s2do5zc+ow/7bBPflwv75cuQ9xirnn67B2je68JbYlvn2M1t3cY9
kg9bdbf3a9aJ7g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:35:21 2025 by rpki-client