Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: s7kbGlTJebZprwH47b2HPAHWpD9PQ+7yPpDAcrIRZTY=
Subject key identifier: 5F:7D:9E:4C:FB:4C:ED:54:91:CB:DD:22:8B:C8:CA:9A:23:54:5F:C4
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 01967ED8BDCE25E8F809DDA6CB4A7D8480B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 109B
Signing time: Tue 29 Apr 2025 00:00:55 +0000
Manifest this update: Tue 29 Apr 2025 00:00:55 +0000
Manifest next update: Wed 30 Apr 2025 00:00:55 +0000
Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: F93W4/19XT5hZquP8WY0gqnPCqUTuJfS59lfem4+lrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:bd:ce:25:e8:f8:09:dd:a6:cb:4a:7d:84:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Apr 29 00:00:55 2025 GMT
Not After : Apr 30 00:00:55 2025 GMT
Subject: CN=5f7d9e4cfb4ced5491cbdd228bc8ca9a23545fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:94:de:fc:dc:db:e5:6a:c5:12:38:9e:e4:
ab:c5:d0:9e:98:7b:e5:73:ae:8d:2f:fe:38:e8:cf:
1a:7c:2b:7e:2c:12:73:01:48:39:d5:84:4d:bc:c8:
28:15:28:4e:77:17:d5:e6:e8:5b:71:76:0b:bc:b8:
a5:62:32:11:51:aa:f9:45:00:f9:fa:39:69:43:fb:
f5:ee:2d:42:71:c8:a2:94:34:36:c2:df:7c:5f:19:
47:7e:0e:4a:63:75:21:b2:59:d6:03:df:ca:ba:3f:
dc:8a:c3:b3:70:a8:ec:d3:65:4d:42:a6:f4:22:42:
5b:e5:3b:74:6b:7a:a0:64:08:0c:2b:6c:a8:cc:9d:
e9:63:0b:cd:a0:cc:3d:54:41:71:0a:54:77:6e:c0:
0e:01:f0:08:84:3c:59:7d:7e:96:cc:13:1a:7a:ae:
51:8f:2a:71:c4:ac:5b:cb:c1:2d:68:58:f0:97:f2:
02:cf:b7:3e:d0:dd:b5:6d:9e:52:61:28:37:cb:41:
2b:a6:a5:df:a4:93:40:34:bd:13:b7:94:9d:6c:d6:
7e:4a:9b:5a:18:89:d8:8f:14:ef:e0:b5:87:82:6d:
62:90:d4:da:d9:4b:4c:9e:df:9f:ee:1a:fe:ff:b0:
7e:53:4f:20:35:eb:23:be:81:de:0b:4f:1d:fa:94:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:9E:4C:FB:4C:ED:54:91:CB:DD:22:8B:C8:CA:9A:23:54:5F:C4
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:47:54:18:c3:98:e9:41:21:eb:46:bd:61:bb:49:37:18:
8d:b1:e7:53:4c:57:da:07:03:0d:51:b6:e8:da:86:1a:2a:32:
a2:ef:be:5b:70:57:ba:6b:e8:ef:66:65:ce:0f:b3:f5:dd:ac:
93:01:5f:a4:37:65:ba:6c:bc:88:ca:d5:bc:0d:03:b9:55:8d:
00:5f:eb:9d:6f:d6:fc:15:c8:c7:e1:d6:52:9a:65:e3:bc:05:
32:ae:d9:53:da:69:c1:26:1e:ec:c2:49:e7:fb:3d:1d:81:12:
e3:5c:17:63:a6:f3:58:ee:d9:32:46:10:d0:90:19:26:11:5b:
b6:12:59:70:c9:06:72:48:03:b8:55:89:2d:43:31:15:97:b4:
46:55:17:86:32:02:8a:87:79:81:07:8d:3e:7b:d4:8a:77:6c:
f8:ed:d8:34:19:8f:05:b5:ae:21:90:d0:68:36:e2:38:70:cb:
3c:36:34:c7:83:c1:4d:ec:ab:aa:59:70:1f:90:f3:3c:62:d6:
68:57:60:f6:b8:ee:df:17:dc:ea:8a:40:c7:fe:41:dc:06:11:
f3:f2:17:f5:ad:2f:86:4a:39:92:6c:9c:88:ac:e6:2e:c9:f5:
06:bd:a6:5b:32:07:70:d9:18:71:57:cc:5a:e3:8e:91:92:69:
93:2f:d6:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2L3OJej4Cd2my0p9hIC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZDYyZTQyYzA4ZTE2MDFjNDU3MWUwZDg4YTM0OWEwNTA5
ZGVhNWUwHhcNMjUwNDI5MDAwMDU1WhcNMjUwNDMwMDAwMDU1WjAzMTEwLwYDVQQD
Eyg1ZjdkOWU0Y2ZiNGNlZDU0OTFjYmRkMjI4YmM4Y2E5YTIzNTQ1ZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSeU3vzc2+VqxRI4nuSrxdCemHvl
c66NL/446M8afCt+LBJzAUg51YRNvMgoFShOdxfV5uhbcXYLvLilYjIRUar5RQD5
+jlpQ/v17i1CcciilDQ2wt98XxlHfg5KY3UhslnWA9/Kuj/cisOzcKjs02VNQqb0
IkJb5Tt0a3qgZAgMK2yozJ3pYwvNoMw9VEFxClR3bsAOAfAIhDxZfX6WzBMaeq5R
jypxxKxby8EtaFjwl/ICz7c+0N21bZ5SYSg3y0ErpqXfpJNANL0Tt5SdbNZ+Spta
GInYjxTv4LWHgm1ikNTa2UtMnt+f7hr+/7B+U08gNesjvoHeC08d+pRSywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF99nkz7TO1UkcvdIovIypojVF/EMB8GA1UdIwQY
MBaAFH/WLkLAjhYBxFceDYijSaBQnepeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAt
ZTc1YTVlYTg5ZmQxLzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAtZTc1YTVlYTg5ZmQx
LzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOBHVBjD
mOlBIetGvWG7STcYjbHnU0xX2gcDDVG26NqGGioyou++W3BXumvo72Zlzg+z9d2s
kwFfpDdlumy8iMrVvA0DuVWNAF/rnW/W/BXIx+HWUppl47wFMq7ZU9ppwSYe7MJJ
5/s9HYES41wXY6bzWO7ZMkYQ0JAZJhFbthJZcMkGckgDuFWJLUMxFZe0RlUXhjIC
iod5gQeNPnvUinds+O3YNBmPBbWuIZDQaDbiOHDLPDY0x4PBTeyrqllwH5DzPGLW
aFdg9rju3xfc6opAx/5B3AYR8/IX9a0vhko5kmyciKzmLsn1Br2mWzIHcNkYcVfM
WuOOkZJpky/WUQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:46 2025 by rpki-client