Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: nA0evJoCcJTE/uKKBKrKuaeKZe7jRNDzOYKuWDjFl3U=
Subject key identifier: AF:C2:6C:79:62:6C:52:11:66:5C:BC:ED:FC:AE:D1:6F:87:16:C5:44
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 01969672BB08B323A4BC9A690508DE5B6D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0994
Signing time: Sat 03 May 2025 14:00:23 +0000
Manifest this update: Sat 03 May 2025 14:00:23 +0000
Manifest next update: Sun 04 May 2025 14:00:23 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: eChvYQ+0kiZXSRpEfy4oRXd0P8XqmPQhg+4ChpsfPEM=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:72:bb:08:b3:23:a4:bc:9a:69:05:08:de:5b:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: May 3 14:00:23 2025 GMT
Not After : May 4 14:00:23 2025 GMT
Subject: CN=afc26c79626c5211665cbcedfcaed16f8716c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:42:2f:c4:39:f0:71:b1:ae:03:af:d9:d3:
53:d4:7a:40:4f:76:00:1e:07:f5:95:d7:37:50:c0:
aa:eb:c0:d1:b4:ba:4d:4c:0c:44:bd:78:30:9d:13:
05:b3:16:c2:72:2d:60:ab:16:57:6a:5f:29:1c:00:
ce:e7:cf:06:87:7a:fb:b7:c9:91:5a:ee:b8:a7:7f:
b6:6b:80:8d:94:04:a4:14:36:a3:08:80:87:1b:cb:
f8:32:ed:35:98:81:5e:b5:3e:cf:1f:10:9a:c0:75:
61:0f:f2:94:ab:fd:46:90:34:21:dd:2a:86:91:c0:
1d:01:c5:71:fe:66:07:9e:1b:41:ac:ce:68:da:5c:
46:23:77:56:b6:9d:9a:10:9e:03:16:3c:52:9a:92:
51:aa:f0:ae:37:df:d8:2d:93:b6:5c:9e:1f:86:0a:
20:1e:fd:8b:47:ed:3a:57:dc:2d:60:7d:3f:e0:de:
3e:ad:9b:a0:ec:c0:ee:72:97:75:cf:aa:c3:f6:73:
46:6c:d5:2b:87:7f:8e:9a:fe:37:2f:a5:7b:cf:f4:
80:20:48:8a:35:01:be:67:c9:a6:fd:eb:af:0c:dc:
e7:67:a9:73:fb:41:a9:a4:68:42:d6:13:1f:80:34:
69:19:0b:d3:c0:8f:c2:e6:cc:8d:50:fb:46:10:c2:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:6C:79:62:6C:52:11:66:5C:BC:ED:FC:AE:D1:6F:87:16:C5:44
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:72:e5:b9:ce:71:ef:c1:ef:c0:97:e0:67:28:31:79:92:66:
eb:29:e9:ea:87:92:ac:b5:cb:d2:1c:36:9b:08:49:87:bc:05:
bf:b7:ee:a3:eb:26:23:42:a0:11:f3:60:d7:90:2c:44:fa:ea:
29:34:82:4b:1a:f4:5a:50:f9:2d:7b:f2:cb:f2:b1:6c:74:24:
d0:5a:29:d4:ac:d9:03:ce:83:29:0f:1b:c1:10:0b:2f:f5:49:
45:bc:6f:2e:e0:66:70:8e:8b:33:25:a9:60:8c:5e:7c:2a:96:
3c:9e:15:e9:ef:0f:a7:0c:e1:f4:0f:aa:f2:ad:bb:9f:f1:54:
27:d8:c1:45:cf:4f:3a:ad:ae:01:f1:23:5f:70:b2:31:36:c1:
66:69:34:d3:53:09:70:13:f4:cf:47:5a:94:d3:60:b9:3c:82:
9a:fd:e3:b7:5d:8c:d6:2c:9c:77:17:56:34:e6:61:0d:d3:3d:
72:4c:d1:83:62:b7:9f:51:49:ce:84:91:56:be:a5:ff:5b:d0:
9e:02:69:33:1a:12:15:65:96:a3:01:95:1a:63:b4:9a:5f:c1:
46:d6:a5:58:e9:f1:cc:97:94:ab:29:67:ad:42:bd:3c:6e:87:
db:38:31:ce:5f:21:13:f1:cd:e9:b9:56:3d:64:2b:9f:0d:60:
e8:4b:24:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaWcrsIsyOkvJppBQjeW203MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Njc0YjZhYjNkNWM2NzQzZDAwNGVjMDkyMGEwMzcxY2Uw
MTk3NTgwHhcNMjUwNTAzMTQwMDIzWhcNMjUwNTA0MTQwMDIzWjAzMTEwLwYDVQQD
EyhhZmMyNmM3OTYyNmM1MjExNjY1Y2JjZWRmY2FlZDE2Zjg3MTZjNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rNCL8Q58HGxrgOv2dNT1HpAT3YA
Hgf1ldc3UMCq68DRtLpNTAxEvXgwnRMFsxbCci1gqxZXal8pHADO588Gh3r7t8mR
Wu64p3+2a4CNlASkFDajCICHG8v4Mu01mIFetT7PHxCawHVhD/KUq/1GkDQh3SqG
kcAdAcVx/mYHnhtBrM5o2lxGI3dWtp2aEJ4DFjxSmpJRqvCuN9/YLZO2XJ4fhgog
Hv2LR+06V9wtYH0/4N4+rZug7MDucpd1z6rD9nNGbNUrh3+Omv43L6V7z/SAIEiK
NQG+Z8mm/euvDNznZ6lz+0GppGhC1hMfgDRpGQvTwI/C5syNUPtGEMJ+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/CbHlibFIRZly87fyu0W+HFsVEMB8GA1UdIwQY
MBaAFPRnS2qz1cZ0PQBOwJIKA3HOAZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzIt
Mzk1NzBkNmYwMDllLzEvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzItMzk1NzBkNmYwMDll
LzEvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHLluc5x
78HvwJfgZygxeZJm6ynp6oeSrLXL0hw2mwhJh7wFv7fuo+smI0KgEfNg15AsRPrq
KTSCSxr0WlD5LXvyy/KxbHQk0Fop1KzZA86DKQ8bwRALL/VJRbxvLuBmcI6LMyWp
YIxefCqWPJ4V6e8Ppwzh9A+q8q27n/FUJ9jBRc9POq2uAfEjX3CyMTbBZmk001MJ
cBP0z0dalNNguTyCmv3jt12M1iycdxdWNOZhDdM9ckzRg2K3n1FJzoSRVr6l/1vQ
ngJpMxoSFWWWowGVGmO0ml/BRtalWOnxzJeUqylnrUK9PG6H2zgxzl8hE/HN6blW
PWQrnw1g6EskLA==
-----END CERTIFICATE-----
Generated at Sat May 3 18:14:03 2025 by rpki-client