Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier: YMVb2XGqZMO60CdKMdO7zZnu/zv5O3RCrmzXXeBM318=
Subject key identifier: 96:FF:B6:27:E9:65:48:04:C4:83:DD:70:AD:7C:D7:92:5F:26:A3:1C
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 01967F461CD326EF28D941A85F8B75F9D50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number: 10F5
Signing time: Tue 29 Apr 2025 02:00:23 +0000
Manifest this update: Tue 29 Apr 2025 02:00:23 +0000
Manifest next update: Wed 30 Apr 2025 02:00:23 +0000
Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: rpfNIiat7fzSsiNgMU0bRa2iFzt4biC6R8U5/xdHOvk=)
2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:1c:d3:26:ef:28:d9:41:a8:5f:8b:75:f9:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Apr 29 02:00:23 2025 GMT
Not After : Apr 30 02:00:23 2025 GMT
Subject: CN=96ffb627e9654804c483dd70ad7cd7925f26a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:84:2b:11:6c:79:72:76:13:17:4c:e3:44:
1c:f8:e0:dd:8f:e6:43:61:8b:88:12:cc:ba:e3:e3:
19:1b:d9:8a:28:b4:c5:71:c0:88:5e:1f:ae:54:be:
a7:93:48:8b:61:ac:0d:bc:8c:c9:59:33:8a:6a:bc:
bf:4c:08:f1:72:6b:5c:1b:c8:ed:e6:15:7d:9e:a0:
9c:0d:a1:2a:9f:95:47:9c:f2:ce:26:81:22:26:9d:
a1:34:d4:81:75:0d:e7:28:b7:16:82:0e:ca:68:c3:
8f:07:34:f8:53:91:73:4e:f4:48:3e:66:7d:37:74:
89:2b:41:6c:35:7b:59:a6:ff:24:26:de:00:6b:a3:
7a:a0:37:32:42:a3:e5:b7:ea:89:51:57:fb:76:b5:
b3:bc:4b:f5:d9:77:6b:6b:f3:36:27:d7:94:35:ac:
0b:31:a1:b0:e0:1f:9c:48:57:d1:2f:bf:4a:f7:4a:
c6:03:01:4c:94:30:29:8b:b3:ad:8a:c5:a6:f1:8d:
32:08:11:05:c4:30:3d:93:26:06:54:3e:7f:62:a3:
d7:b6:3e:e8:c9:5e:47:ac:60:0d:f5:24:ab:d8:3f:
33:39:05:9b:63:67:6d:a4:14:85:d4:75:67:ed:7d:
ec:c4:fb:78:31:fd:96:5a:a2:21:3e:84:3e:9b:b4:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:B6:27:E9:65:48:04:C4:83:DD:70:AD:7C:D7:92:5F:26:A3:1C
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d2:e8:5b:05:11:44:fc:d5:4e:04:26:81:3d:3a:6e:55:3e:
f4:f6:0f:6e:38:43:c4:ba:50:2d:90:ec:51:d3:7d:0b:44:44:
46:5f:e9:a8:a8:fe:a4:e8:9e:8b:59:7c:87:90:2d:68:76:4b:
e2:9e:0a:50:0b:01:ec:4b:6c:a2:46:46:98:b9:25:94:c3:43:
69:be:bd:0b:25:ca:f1:b9:9c:e6:70:af:be:d1:dc:46:45:6f:
e3:fa:d6:a4:c1:4e:40:e9:4c:51:b9:2e:0a:d9:d2:16:8b:6d:
b0:86:51:09:f9:90:0d:cf:95:44:01:86:f0:ce:65:fe:03:58:
65:fd:55:83:16:17:e2:e4:62:68:22:36:dd:2c:80:3a:24:7d:
8c:39:80:6e:3e:19:e9:bc:13:2e:f0:98:24:a2:9c:a2:e2:12:
45:27:84:ae:44:a4:a4:3f:84:bf:fe:53:90:61:30:d5:3d:f5:
17:ba:f4:64:cc:17:62:ac:16:73:03:79:c0:3b:a6:c9:34:97:
ec:23:51:b9:99:c5:88:12:b2:7b:a4:22:1d:0c:1c:b0:70:f4:
f2:d0:7d:af:e2:9d:90:81:51:28:35:46:83:80:6b:d7:9c:1c:
70:0b:ed:c1:56:29:6d:65:8b:eb:d6:72:1c:f1:70:5c:ae:e9:
30:54:1d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/RhzTJu8o2UGoX4t1+dUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTVhNjQyMzc5Y2U1NzhmMzllYzBkMTA2MDNkY2ZhODNm
NmUzNGUwHhcNMjUwNDI5MDIwMDIzWhcNMjUwNDMwMDIwMDIzWjAzMTEwLwYDVQQD
Eyg5NmZmYjYyN2U5NjU0ODA0YzQ4M2RkNzBhZDdjZDc5MjVmMjZhMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6qEKxFseXJ2ExdM40Qc+ODdj+ZD
YYuIEsy64+MZG9mKKLTFccCIXh+uVL6nk0iLYawNvIzJWTOKary/TAjxcmtcG8jt
5hV9nqCcDaEqn5VHnPLOJoEiJp2hNNSBdQ3nKLcWgg7KaMOPBzT4U5FzTvRIPmZ9
N3SJK0FsNXtZpv8kJt4Aa6N6oDcyQqPlt+qJUVf7drWzvEv12Xdra/M2J9eUNawL
MaGw4B+cSFfRL79K90rGAwFMlDApi7OtisWm8Y0yCBEFxDA9kyYGVD5/YqPXtj7o
yV5HrGAN9SSr2D8zOQWbY2dtpBSF1HVn7X3sxPt4Mf2WWqIhPoQ+m7S2awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb/tifpZUgExIPdcK1815JfJqMcMB8GA1UdIwQY
MBaAFJtVpkI3nOV4857A0QYD3PqD9uNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMt
ODIyMmUyNTFhOTFiLzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMtODIyMmUyNTFhOTFi
LzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNLoWwUR
RPzVTgQmgT06blU+9PYPbjhDxLpQLZDsUdN9C0RERl/pqKj+pOiei1l8h5AtaHZL
4p4KUAsB7EtsokZGmLkllMNDab69CyXK8bmc5nCvvtHcRkVv4/rWpMFOQOlMUbku
CtnSFottsIZRCfmQDc+VRAGG8M5l/gNYZf1VgxYX4uRiaCI23SyAOiR9jDmAbj4Z
6bwTLvCYJKKcouISRSeErkSkpD+Ev/5TkGEw1T31F7r0ZMwXYqwWcwN5wDumyTSX
7CNRuZnFiBKye6QiHQwcsHD08tB9r+KdkIFRKDVGg4Br15wccAvtwVYpbWWL69Zy
HPFwXK7pMFQdRQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:16 2025 by rpki-client