Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: FkC35JUEOxJGqQrz5yVHbANHbfiOqzykzuEa88XNATQ=
Subject key identifier: 0F:D6:70:70:94:82:D3:1F:16:C4:56:A9:9E:26:16:6B:1E:B0:79:7A
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 01967C44E8144F1E342CA3122FEFABDAEF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 12:00:12 +0000
Manifest this update: Mon 28 Apr 2025 12:00:12 +0000
Manifest next update: Tue 29 Apr 2025 12:00:12 +0000
Files and hashes: 1: 9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa (hash: kiU7QM0C1mwEaOQNcthFFJZevyv4iXHm9WMDBPMiwH8=)
2: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: HltmeCrWPyNVAbKZugAlgKN2bTrw8quUqy5DXvtjgtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:e8:14:4f:1e:34:2c:a3:12:2f:ef:ab:da:ef:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Apr 28 12:00:12 2025 GMT
Not After : Apr 29 12:00:12 2025 GMT
Subject: CN=0fd670709482d31f16c456a99e26166b1eb0797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:81:b4:87:e1:4b:9a:3b:96:48:cc:04:8c:
32:df:af:26:dd:11:04:47:31:6d:d4:d9:d6:50:da:
a5:06:fe:eb:d8:3f:62:95:96:f8:fb:00:8f:29:02:
e2:90:36:19:6c:a6:26:8e:ef:79:1b:8f:57:b9:e5:
01:20:64:94:ff:4b:9e:83:d3:c8:9b:0d:b5:bc:f9:
76:a8:44:e7:58:d1:9e:14:de:73:47:85:21:59:97:
01:2e:22:8b:19:8e:62:66:40:68:d7:6d:7b:43:00:
40:c6:5e:94:54:c0:4f:62:3c:4b:3d:3f:55:9f:c4:
95:0b:e1:ac:d2:9c:f6:bb:13:42:f2:65:62:96:bf:
36:99:5e:c8:39:7e:c5:6c:0c:a2:bf:ac:65:e2:e4:
e7:35:a2:fc:dc:d5:da:e3:98:8a:40:80:b8:04:04:
63:4f:be:69:87:9b:a7:d7:1e:46:d4:11:ef:28:7d:
e2:01:32:a1:c7:e0:e2:a4:7c:00:4f:85:40:ff:6d:
ec:27:9f:04:0e:fd:56:a4:11:94:a5:1a:ca:c1:8c:
51:7e:49:9e:fd:80:8c:57:d8:ca:63:07:b1:25:b5:
92:c0:19:b4:35:d3:26:16:52:12:26:b5:d3:09:7c:
06:0b:32:61:39:d8:63:c9:c9:6c:64:59:82:3e:8a:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:70:70:94:82:D3:1F:16:C4:56:A9:9E:26:16:6B:1E:B0:79:7A
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a0:fc:d1:7f:9b:28:f3:cc:78:f3:59:a4:7d:6a:75:71:f9:
34:80:ae:47:a2:f1:74:d4:3f:92:c4:3f:eb:2d:06:76:3f:36:
b8:98:d7:82:d7:ed:f3:d5:2b:6d:e6:9f:cc:e8:04:88:e9:4f:
18:36:d6:90:25:ce:19:7f:41:15:c5:9f:3c:fb:8f:b3:ba:d2:
be:bf:26:58:34:38:dd:90:49:7f:92:0a:b9:91:a8:fe:2d:f3:
f6:af:24:28:11:bd:71:ed:67:21:6b:06:dc:52:62:c2:19:d6:
73:8e:ba:24:75:04:5a:ab:41:c6:18:c8:1a:4c:01:80:60:f1:
c2:cc:e6:44:73:30:e0:d6:93:95:be:07:22:e7:d2:14:f3:10:
23:f5:d9:c6:d5:58:dd:bb:94:d8:2c:e5:72:f7:84:62:27:3c:
2c:c5:b7:10:40:df:1e:9e:3c:d3:d3:29:3f:22:9e:b9:50:70:
37:b4:42:4b:6e:5f:04:67:30:61:ad:89:2f:9b:7a:cf:d2:81:
86:b1:b4:11:ba:c0:5b:e1:0b:0c:e3:f4:67:ec:8a:93:8a:68:
e7:da:4c:b4:ff:7b:40:aa:1b:37:c6:ab:12:e9:51:05:af:0a:
03:b1:01:6f:77:ed:0c:39:ec:ac:c0:e0:bf:cd:da:e0:4d:f2:
3e:06:7e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8ROgUTx40LKMSL++r2u+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzFjMzM5YjE4NjE3MjJiZmZlODY3MjE4MzE0Y2UxMjk1
YzNjODUwHhcNMjUwNDI4MTIwMDEyWhcNMjUwNDI5MTIwMDEyWjAzMTEwLwYDVQQD
EygwZmQ2NzA3MDk0ODJkMzFmMTZjNDU2YTk5ZTI2MTY2YjFlYjA3OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnOBtIfhS5o7lkjMBIwy368m3REE
RzFt1NnWUNqlBv7r2D9ilZb4+wCPKQLikDYZbKYmju95G49XueUBIGSU/0ueg9PI
mw21vPl2qETnWNGeFN5zR4UhWZcBLiKLGY5iZkBo1217QwBAxl6UVMBPYjxLPT9V
n8SVC+Gs0pz2uxNC8mVilr82mV7IOX7FbAyiv6xl4uTnNaL83NXa45iKQIC4BARj
T75ph5un1x5G1BHvKH3iATKhx+DipHwAT4VA/23sJ58EDv1WpBGUpRrKwYxRfkme
/YCMV9jKYwexJbWSwBm0NdMmFlISJrXTCXwGCzJhOdhjyclsZFmCPooLGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/WcHCUgtMfFsRWqZ4mFmsesHl6MB8GA1UdIwQY
MBaAFPcxwzmxhhciv/6GchgxTOEpXDyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAt
MGRjMjBhN2Q4MmI5LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAtMGRjMjBhN2Q4MmI5
LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKD80X+b
KPPMePNZpH1qdXH5NICuR6LxdNQ/ksQ/6y0Gdj82uJjXgtft89UrbeafzOgEiOlP
GDbWkCXOGX9BFcWfPPuPs7rSvr8mWDQ43ZBJf5IKuZGo/i3z9q8kKBG9ce1nIWsG
3FJiwhnWc466JHUEWqtBxhjIGkwBgGDxwszmRHMw4NaTlb4HIufSFPMQI/XZxtVY
3buU2CzlcveEYic8LMW3EEDfHp4809MpPyKeuVBwN7RCS25fBGcwYa2JL5t6z9KB
hrG0EbrAW+ELDOP0Z+yKk4po59pMtP97QKobN8arEulRBa8KA7EBb3ftDDnsrMDg
v83a4E3yPgZ+qg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:46:38 2025 by rpki-client