Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: 6ZmPuOQdsXsg9E5qG9MNiDeM83WjIpZkd/RkrSDDMSQ=
Subject key identifier: 16:75:18:D7:53:D9:D1:13:19:55:18:56:83:79:B1:B0:AF:7A:B8:99
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019671C1D1C765B40AFED302464FF8367C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 10F9
Signing time: Sat 26 Apr 2025 11:00:49 +0000
Manifest this update: Sat 26 Apr 2025 11:00:49 +0000
Manifest next update: Sun 27 Apr 2025 11:00:49 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: ZwpT/Fj+9fwocr4p4QUnM7rV1YW12ufrdK1+JwSFb7k=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:d1:c7:65:b4:0a:fe:d3:02:46:4f:f8:36:7c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Apr 26 11:00:49 2025 GMT
Not After : Apr 27 11:00:49 2025 GMT
Subject: CN=167518d753d9d113195518568379b1b0af7ab899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:8d:a1:ec:d4:3c:ad:b8:b8:d4:c3:dc:63:
05:7f:62:4b:75:cd:03:b4:82:99:dc:ad:53:e8:05:
b2:38:3f:04:dc:52:a1:64:68:83:da:37:73:a7:2f:
26:0f:f7:38:1d:1e:f9:5e:40:94:4e:14:88:dc:ae:
14:7c:d6:2e:d6:09:c8:f7:00:6e:53:3a:db:a0:39:
04:d4:08:60:25:d3:f7:af:34:a8:81:94:20:33:50:
0f:ee:f3:20:33:e4:43:8b:75:95:c0:60:57:2a:3c:
38:b5:73:ad:c0:e3:fb:27:3f:6e:b8:89:b0:e0:0f:
4a:dc:3d:48:0c:76:06:a0:c2:b6:db:10:4f:24:cb:
af:40:93:5f:c1:29:44:b3:e7:23:47:15:1f:b7:82:
ca:03:3e:4b:dd:58:fd:ba:15:a2:c0:c3:3b:1f:8a:
8a:2f:7b:25:d4:b3:a4:28:0e:08:7b:e1:04:81:dc:
11:ca:e3:ef:97:b0:93:ca:26:9d:9c:7a:d3:2e:2a:
86:54:85:bf:bd:57:a0:e3:05:0d:62:0c:2b:d0:f2:
58:7f:d7:9d:0c:33:1a:af:fd:ae:3e:c4:70:ac:46:
f8:bf:09:a8:de:6c:6b:b9:51:6b:85:eb:52:ed:fd:
d6:9a:01:a8:a1:95:63:54:b4:ef:19:9b:7a:7c:83:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:18:D7:53:D9:D1:13:19:55:18:56:83:79:B1:B0:AF:7A:B8:99
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:07:5f:6f:1f:50:68:a4:57:b6:6c:13:7c:a6:ab:94:77:
c4:2e:16:a1:f3:fa:de:56:21:8b:93:09:0b:1f:a6:b1:a1:07:
4c:5c:52:f6:a3:38:33:f6:73:dd:9b:eb:fa:c1:47:7b:bb:78:
0e:21:ee:9f:d9:8d:ca:e2:0c:44:17:24:fd:49:94:b8:82:66:
62:35:e6:5f:16:86:f7:99:72:23:ae:37:a9:ff:31:fb:e1:a5:
10:9a:23:4c:6d:e3:ef:df:b0:fa:06:24:90:04:88:39:24:eb:
f1:0a:43:89:6d:f0:00:e3:0f:0d:01:61:86:97:93:88:29:21:
a8:49:65:e2:40:3d:3e:ae:bb:e9:eb:2f:0c:cd:23:8a:78:9d:
39:89:7d:59:6e:80:ab:2b:50:30:b3:f1:4e:6c:6d:1b:6c:41:
e7:d8:4b:ee:71:61:3c:bb:c7:d8:20:07:cd:e0:ab:71:36:82:
9f:38:c0:76:d1:de:05:2c:af:bd:8a:4a:c9:19:2a:92:4d:8d:
dc:17:97:55:81:0f:26:69:cb:d0:38:47:74:d8:c6:96:8a:5a:
d9:2e:70:6e:a8:30:89:25:d3:df:d5:4c:10:8b:7c:17:16:a7:
87:73:05:9a:fb:6a:9f:ed:8f:79:2f:36:3b:d0:7f:e1:5d:05:
e0:b1:9f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwdHHZbQK/tMCRk/4NnyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjUwNDI2MTEwMDQ5WhcNMjUwNDI3MTEwMDQ5WjAzMTEwLwYDVQQD
EygxNjc1MThkNzUzZDlkMTEzMTk1NTE4NTY4Mzc5YjFiMGFmN2FiODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukONoezUPK24uNTD3GMFf2JLdc0D
tIKZ3K1T6AWyOD8E3FKhZGiD2jdzpy8mD/c4HR75XkCUThSI3K4UfNYu1gnI9wBu
UzrboDkE1AhgJdP3rzSogZQgM1AP7vMgM+RDi3WVwGBXKjw4tXOtwOP7Jz9uuImw
4A9K3D1IDHYGoMK22xBPJMuvQJNfwSlEs+cjRxUft4LKAz5L3Vj9uhWiwMM7H4qK
L3sl1LOkKA4Ie+EEgdwRyuPvl7CTyiadnHrTLiqGVIW/vVeg4wUNYgwr0PJYf9ed
DDMar/2uPsRwrEb4vwmo3mxruVFrhetS7f3WmgGooZVjVLTvGZt6fIONcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ1GNdT2dETGVUYVoN5sbCveriZMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCUHX28f
UGikV7ZsE3ymq5R3xC4WofP63lYhi5MJCx+msaEHTFxS9qM4M/Zz3Zvr+sFHe7t4
DiHun9mNyuIMRBck/UmUuIJmYjXmXxaG95lyI643qf8x++GlEJojTG3j79+w+gYk
kASIOSTr8QpDiW3wAOMPDQFhhpeTiCkhqEll4kA9Pq676esvDM0jinidOYl9WW6A
qytQMLPxTmxtG2xB59hL7nFhPLvH2CAHzeCrcTaCnzjAdtHeBSyvvYpKyRkqkk2N
3BeXVYEPJmnL0DhHdNjGlopa2S5wbqgwiSXT39VMEIt8Fxanh3MFmvtqn+2PeS82
O9B/4V0F4LGfUA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:28:55 2025 by rpki-client