Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: KMs75mH4IK/XxA1aapibl5x/dwS1GGfeP3v3ewE4EPI=
Subject key identifier: BA:6E:00:95:6D:02:1A:A0:88:57:73:98:C1:D3:8C:6D:A9:8D:2F:E9
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 01967F461F92450A5BAEC5A9FBD5A4F44880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 02:00:24 +0000
Manifest this update: Tue 29 Apr 2025 02:00:24 +0000
Manifest next update: Wed 30 Apr 2025 02:00:24 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: VdKIpsqmnS1CdosF6WOe/6hSa3y4Dfwtt0SyPwzObwM=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:1f:92:45:0a:5b:ae:c5:a9:fb:d5:a4:f4:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Apr 29 02:00:24 2025 GMT
Not After : Apr 30 02:00:24 2025 GMT
Subject: CN=ba6e00956d021aa088577398c1d38c6da98d2fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:18:45:80:ea:ff:8c:6d:72:e9:ed:8f:b9:
37:c8:89:ff:d6:c2:bb:5a:aa:7e:d6:6a:dc:07:c6:
ed:52:83:df:fb:a3:89:00:4b:b8:0c:ba:76:e7:71:
22:56:c9:e2:92:96:bb:8f:eb:cb:80:5d:db:06:e2:
83:de:c9:8d:ad:25:16:e2:2f:50:d5:8f:09:c7:72:
7d:d3:73:d3:75:24:1f:8d:6a:8c:ab:ef:26:60:c1:
fe:19:0f:bf:d0:94:40:27:53:4b:d9:c0:bf:7d:78:
e4:f7:67:f6:dc:47:84:1b:13:b4:b5:e1:17:6a:6c:
81:83:df:81:bb:15:08:7b:9a:82:58:db:16:d1:fa:
b9:14:33:5b:2c:8c:7f:c6:a9:85:db:d7:13:2a:7d:
68:02:ab:ec:af:f6:23:9e:ef:67:a3:c4:59:40:f5:
bb:a0:c3:5a:5f:23:5b:ef:69:99:de:c6:57:26:24:
b4:34:34:f7:70:d7:71:af:75:91:28:ba:7d:b9:86:
ca:f3:a7:21:9b:78:0f:49:90:b1:75:9e:a8:3b:66:
44:02:4e:90:05:e5:02:72:d6:59:de:06:3e:8a:4a:
4e:37:26:ed:2a:82:93:54:1c:29:22:b3:8f:2f:6d:
14:95:b5:51:20:82:05:21:ea:d3:02:b6:dd:fd:95:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:00:95:6D:02:1A:A0:88:57:73:98:C1:D3:8C:6D:A9:8D:2F:E9
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:70:80:d2:e5:c7:a7:af:60:07:4d:6a:b1:dc:d4:24:42:
81:d0:40:83:de:94:71:91:f6:b6:76:da:53:62:d2:5b:cd:54:
b5:92:4d:0a:e9:09:f9:26:9d:46:cf:b8:2f:40:86:51:a6:45:
9b:00:1a:3f:8e:98:78:c1:ae:b8:99:9d:93:f6:a0:1b:5d:95:
07:15:b6:96:3e:f5:9a:1a:49:38:e9:4c:75:20:65:f8:29:ae:
38:44:a3:00:58:06:4f:da:e0:3e:be:17:ce:4f:d3:4f:97:f0:
66:0e:78:5a:08:4f:98:6a:fd:12:c0:eb:f3:69:4e:8e:14:c9:
ff:f9:64:3f:06:a0:05:5c:27:7d:5c:0e:eb:96:01:e3:73:26:
cc:b1:64:a7:63:f6:d8:5f:a7:43:bd:cc:dc:54:aa:33:c0:60:
35:fd:58:7c:2c:21:8a:4c:96:ab:23:88:84:e4:cd:f7:d0:c4:
4a:d8:89:4a:aa:21:9c:08:58:5e:ad:4e:f5:2b:c9:a7:e1:24:
2e:86:87:75:93:62:b1:5a:1b:29:18:cd:1b:4c:3c:7c:71:35:
22:f6:3f:39:6c:f7:bd:52:30:b8:e1:27:30:95:9e:65:f2:1b:
60:77:20:21:ac:33:e6:0e:5c:ea:4d:40:ae:eb:9d:dc:04:19:
c0:73:56:07
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ/Rh+SRQpbrsWp+9Wk9EiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx
YWEzNGYwHhcNMjUwNDI5MDIwMDI0WhcNMjUwNDMwMDIwMDI0WjAzMTEwLwYDVQQD
EyhiYTZlMDA5NTZkMDIxYWEwODg1NzczOThjMWQzOGM2ZGE5OGQyZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kAYRYDq/4xtcuntj7k3yIn/1sK7
Wqp+1mrcB8btUoPf+6OJAEu4DLp253EiVsnikpa7j+vLgF3bBuKD3smNrSUW4i9Q
1Y8Jx3J903PTdSQfjWqMq+8mYMH+GQ+/0JRAJ1NL2cC/fXjk92f23EeEGxO0teEX
amyBg9+BuxUIe5qCWNsW0fq5FDNbLIx/xqmF29cTKn1oAqvsr/Yjnu9no8RZQPW7
oMNaXyNb72mZ3sZXJiS0NDT3cNdxr3WRKLp9uYbK86chm3gPSZCxdZ6oO2ZEAk6Q
BeUCctZZ3gY+ikpONybtKoKTVBwpIrOPL20UlbVRIIIFIerTArbd/ZWxKQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLpuAJVtAhqgiFdzmMHTjG2pjS/pMB8GA1UdIwQY
MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw
LWU2MzM3MDNmY2JlZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcxL2Q3ODRlZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNi
ZWQvMS8xLWM5bTdYUW9vNTVqOE5KellEZjBNY1FhbzA4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVlw
gNLlx6evYAdNarHc1CRCgdBAg96UcZH2tnbaU2LSW81UtZJNCukJ+SadRs+4L0CG
UaZFmwAaP46YeMGuuJmdk/agG12VBxW2lj71mhpJOOlMdSBl+CmuOESjAFgGT9rg
Pr4Xzk/TT5fwZg54WghPmGr9EsDr82lOjhTJ//lkPwagBVwnfVwO65YB43MmzLFk
p2P22F+nQ73M3FSqM8BgNf1YfCwhikyWqyOIhOTN99DEStiJSqohnAhYXq1O9SvJ
p+EkLoaHdZNisVobKRjNG0w8fHE1IvY/OWz3vVIwuOEnMJWeZfIbYHcgIawz5g5c
6k1Aruud3AQZwHNWBw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:53:40 2025 by rpki-client