Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: P5XSsYvYo58eNpfuT5AD3iNaqZLUHrkMwj8VhKN9N7s=
Subject key identifier: 4A:DD:4C:06:1A:89:4B:8E:E4:0C:0C:27:EC:D9:31:4C:76:9C:17:8D
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 01967868EEC46E21892F7C59F88FA5C50EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 18:01:04 +0000
Manifest this update: Sun 27 Apr 2025 18:01:04 +0000
Manifest next update: Mon 28 Apr 2025 18:01:04 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: YNuCbQgsG9sNraaADPNIdp6fQitSthvkHyZj0XkmmnI=)
2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:ee:c4:6e:21:89:2f:7c:59:f8:8f:a5:c5:0e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Apr 27 18:01:04 2025 GMT
Not After : Apr 28 18:01:04 2025 GMT
Subject: CN=4add4c061a894b8ee40c0c27ecd9314c769c178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:f9:c8:f1:02:b7:90:a4:b1:ff:05:51:29:
b7:b4:8c:14:ad:39:be:c8:91:d0:62:d7:e7:a1:a3:
a0:69:62:35:c8:4c:5a:e8:ae:67:86:34:ec:53:8d:
d8:ff:17:2c:b0:06:a5:0c:fc:85:a1:b9:4e:b2:81:
c2:d3:f2:d3:12:4a:e0:fc:b1:67:06:ed:03:bc:fa:
3c:dd:fd:25:03:d0:5f:c5:01:68:d9:3c:52:84:a3:
38:b8:de:a1:aa:05:ee:c1:70:b7:d2:cf:64:0b:30:
25:8e:f4:7d:f9:10:03:be:38:d8:b3:42:02:36:87:
3d:a1:9b:d8:72:96:8c:4f:6a:d1:6d:48:51:e3:e3:
22:e6:77:d4:5e:4a:b3:8e:8a:10:ce:2a:7e:4d:61:
ea:af:ce:f5:5d:6c:d4:45:c4:a1:b8:90:4d:d0:b0:
0f:8f:8f:10:85:44:01:30:32:20:e6:61:79:9e:80:
65:e1:18:58:f1:c5:b6:8e:ab:db:92:52:6c:e5:de:
e0:5a:6c:4c:d9:51:db:c8:fb:c7:09:f5:d0:26:63:
b9:98:0a:3b:9e:13:67:4b:37:59:6c:8e:46:f7:9f:
e1:dc:c9:b2:cf:8f:da:1f:a1:3b:02:08:8f:3b:15:
a0:dc:00:9d:7f:fb:1f:d1:ec:9b:58:6b:92:24:c1:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:4C:06:1A:89:4B:8E:E4:0C:0C:27:EC:D9:31:4C:76:9C:17:8D
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:4d:aa:e7:6e:24:4b:32:36:ee:2a:9b:ab:ba:c4:f0:6d:
53:d1:32:c4:0f:5a:1d:bf:c7:0e:39:61:b0:93:f6:77:ca:01:
a5:47:7a:c1:82:04:f7:ee:b6:17:ac:23:3c:0c:c9:fe:e0:5a:
9d:67:33:8d:f9:94:4f:1d:97:87:fa:61:f6:c3:d7:97:44:3a:
1a:1a:88:52:21:0d:23:82:e5:57:fa:82:9e:0d:c1:85:06:8b:
9c:f3:14:1f:8d:a1:b5:45:bd:02:3d:7e:20:a3:14:81:29:58:
c5:b0:5d:da:02:31:08:87:cb:b3:df:67:94:40:3a:b3:7d:c1:
e4:9b:80:79:07:4f:b0:c6:d7:d1:46:96:d8:53:99:52:81:12:
97:31:3b:ac:e8:48:08:88:6f:28:01:b0:fd:8f:1b:1a:58:32:
5b:cd:f2:6c:e2:44:a7:37:7e:6a:c5:a3:53:54:d5:a1:f2:36:
69:c1:a6:e6:3d:c3:56:e5:82:4c:ab:2a:9a:7e:58:c0:0f:1b:
53:66:48:3a:77:5c:e3:c9:ac:a4:9b:eb:d5:32:e4:23:f9:8f:
55:c3:f5:9d:ef:ed:9a:8b:e3:51:25:fb:d5:b8:83:24:5d:57:
4e:c7:06:a9:ed:3f:7f:ef:a8:bd:1f:59:52:fd:6d:07:42:f7:
9b:e4:1c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aO7EbiGJL3xZ+I+lxQ6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDRiZDQ5OWY1ODQ5NGFjMGU4MjI2M2I1NTIwYTJjNjRk
NjQ3N2UwHhcNMjUwNDI3MTgwMTA0WhcNMjUwNDI4MTgwMTA0WjAzMTEwLwYDVQQD
Eyg0YWRkNGMwNjFhODk0YjhlZTQwYzBjMjdlY2Q5MzE0Yzc2OWMxNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySH5yPECt5Cksf8FUSm3tIwUrTm+
yJHQYtfnoaOgaWI1yExa6K5nhjTsU43Y/xcssAalDPyFoblOsoHC0/LTEkrg/LFn
Bu0DvPo83f0lA9BfxQFo2TxShKM4uN6hqgXuwXC30s9kCzAljvR9+RADvjjYs0IC
Noc9oZvYcpaMT2rRbUhR4+Mi5nfUXkqzjooQzip+TWHqr871XWzURcShuJBN0LAP
j48QhUQBMDIg5mF5noBl4RhY8cW2jqvbklJs5d7gWmxM2VHbyPvHCfXQJmO5mAo7
nhNnSzdZbI5G95/h3Mmyz4/aH6E7AgiPOxWg3ACdf/sf0eybWGuSJMHnxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErdTAYaiUuO5AwMJ+zZMUx2nBeNMB8GA1UdIwQY
MBaAFCDUvUmfWElKwOgiY7VSCixk1kd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzIt
ZDJlZTE1Mzk5ZDA2LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzItZDJlZTE1Mzk5ZDA2
LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbZNqudu
JEsyNu4qm6u6xPBtU9EyxA9aHb/HDjlhsJP2d8oBpUd6wYIE9+62F6wjPAzJ/uBa
nWczjfmUTx2Xh/ph9sPXl0Q6GhqIUiENI4LlV/qCng3BhQaLnPMUH42htUW9Aj1+
IKMUgSlYxbBd2gIxCIfLs99nlEA6s33B5JuAeQdPsMbX0UaW2FOZUoESlzE7rOhI
CIhvKAGw/Y8bGlgyW83ybOJEpzd+asWjU1TVofI2acGm5j3DVuWCTKsqmn5YwA8b
U2ZIOndc48mspJvr1TLkI/mPVcP1ne/tmovjUSX71biDJF1XTscGqe0/f++ovR9Z
Uv1tB0L3m+Qc3w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:27 2025 by rpki-client