Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: cYClgdkMIZhncEMEyUGLglCv1P8hbVSAO1KHUUBiXO8=
Subject key identifier: 73:51:C8:23:74:2B:79:FE:84:3D:2B:E6:D4:98:51:EC:35:40:44:C4
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 01967AC535173A0BABBBB7FE59040808B2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 12E1
Signing time: Mon 28 Apr 2025 05:01:06 +0000
Manifest this update: Mon 28 Apr 2025 05:01:06 +0000
Manifest next update: Tue 29 Apr 2025 05:01:06 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: 1KBVvSbXhAcahbvzfeaq27hztJqtWmFyAby+c049FaA=)
2: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:35:17:3a:0b:ab:bb:b7:fe:59:04:08:08:b2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Apr 28 05:01:06 2025 GMT
Not After : Apr 29 05:01:06 2025 GMT
Subject: CN=7351c823742b79fe843d2be6d49851ec354044c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:9a:4d:3f:ad:31:f4:22:6c:b9:37:cc:e6:
ce:18:c4:86:89:de:c0:eb:79:91:ea:fa:04:42:27:
44:43:4f:ec:77:20:c8:10:67:9a:8d:58:d4:9b:69:
a3:2a:1c:a2:7e:6c:4f:60:79:5f:09:c7:1d:75:41:
2f:df:ed:6c:15:8e:35:ef:97:9e:ae:3b:e8:29:61:
03:bd:35:ef:96:38:41:b3:14:7f:4c:e3:1e:d7:ba:
ec:df:97:bb:b2:76:c8:85:cb:92:c5:81:3b:e1:e0:
0f:53:c4:47:a0:21:01:86:aa:57:f6:e6:80:29:44:
f5:43:4e:49:34:7f:26:6f:79:38:99:8d:a5:d7:0c:
59:b5:a8:de:70:85:97:c8:bc:f7:0a:e8:61:98:b1:
e3:87:cb:79:53:9b:09:13:da:02:10:d1:3e:df:5a:
da:92:6c:05:22:df:cd:ca:47:c3:06:ed:31:d0:b7:
ec:e7:a7:8b:7a:d3:1d:57:f6:59:6a:59:3a:b8:aa:
59:63:2c:71:28:42:9e:5f:9c:ca:96:68:3a:98:d3:
df:71:c5:0d:5e:30:28:1d:28:ce:bf:d0:18:2b:3e:
7f:e5:19:0d:7f:49:80:3e:e2:a9:87:31:fe:11:32:
f6:8f:17:67:b8:18:f2:c2:35:91:84:db:48:b7:06:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:C8:23:74:2B:79:FE:84:3D:2B:E6:D4:98:51:EC:35:40:44:C4
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:37:9c:da:4b:6a:6a:dd:93:e0:5d:0f:c9:e4:b2:23:e5:88:
30:3e:51:82:86:b5:95:3c:09:f4:f0:fc:ff:20:c9:0e:fc:75:
62:55:84:ff:c0:6c:36:54:f0:97:54:fd:f5:96:c0:cf:f1:6b:
be:7b:90:3f:0f:34:e3:0d:d6:5e:45:4f:95:b5:84:ee:8e:1f:
31:2f:84:0d:3c:c6:91:47:bb:97:33:60:4e:a8:3e:06:1c:ec:
10:22:90:a6:b4:59:86:b1:19:27:f1:17:c2:0a:c8:21:32:4a:
2d:3f:86:62:52:73:e8:d0:d8:c3:2a:2f:01:62:63:05:48:9d:
9c:c7:06:98:79:3a:80:2f:78:e3:33:53:62:ed:00:29:7e:1b:
40:5d:f7:9f:05:f7:8f:12:a9:4c:62:b9:a2:20:7c:bb:f8:f5:
dc:71:71:25:d8:64:3e:8c:d9:ef:e0:a9:c0:33:ce:93:df:a4:
2c:70:21:8d:ac:d4:47:aa:fc:03:95:bb:a7:1a:aa:77:9c:72:
6c:92:13:71:0c:f7:1a:22:4b:44:5b:ec:49:2d:b4:91:6a:66:
69:86:61:77:d2:bc:ad:12:64:b7:10:41:b8:de:f8:7a:81:b2:
10:34:67:8b:8b:4b:d0:c8:dc:0b:c8:ae:de:e6:c1:6e:48:c6:
f5:8d:ad:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xTUXOguru7f+WQQICLKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTUwMmM5NzQ4MmIyODUwMjg1MmM5N2VmOWJkM2EwYTJh
NWU5ZjAwHhcNMjUwNDI4MDUwMTA2WhcNMjUwNDI5MDUwMTA2WjAzMTEwLwYDVQQD
Eyg3MzUxYzgyMzc0MmI3OWZlODQzZDJiZTZkNDk4NTFlYzM1NDA0NGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+OaTT+tMfQibLk3zObOGMSGid7A
63mR6voEQidEQ0/sdyDIEGeajVjUm2mjKhyifmxPYHlfCccddUEv3+1sFY4175ee
rjvoKWEDvTXvljhBsxR/TOMe17rs35e7snbIhcuSxYE74eAPU8RHoCEBhqpX9uaA
KUT1Q05JNH8mb3k4mY2l1wxZtajecIWXyLz3CuhhmLHjh8t5U5sJE9oCENE+31ra
kmwFIt/NykfDBu0x0Lfs56eLetMdV/ZZalk6uKpZYyxxKEKeX5zKlmg6mNPfccUN
XjAoHSjOv9AYKz5/5RkNf0mAPuKphzH+ETL2jxdnuBjywjWRhNtItwbrSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNRyCN0K3n+hD0r5tSYUew1QETEMB8GA1UdIwQY
MBaAFPSVAsl0grKFAoUsl++b06CipenwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTct
NzNiMGM3NGU5YjY0LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTctNzNiMGM3NGU5YjY0
LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojec2ktq
at2T4F0PyeSyI+WIMD5Rgoa1lTwJ9PD8/yDJDvx1YlWE/8BsNlTwl1T99ZbAz/Fr
vnuQPw804w3WXkVPlbWE7o4fMS+EDTzGkUe7lzNgTqg+BhzsECKQprRZhrEZJ/EX
wgrIITJKLT+GYlJz6NDYwyovAWJjBUidnMcGmHk6gC944zNTYu0AKX4bQF33nwX3
jxKpTGK5oiB8u/j13HFxJdhkPozZ7+CpwDPOk9+kLHAhjazUR6r8A5W7pxqqd5xy
bJITcQz3GiJLRFvsSS20kWpmaYZhd9K8rRJktxBBuN74eoGyEDRni4tL0MjcC8iu
3ubBbkjG9Y2t0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:22:21 2025 by rpki-client