Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier: gmUJvP8Tqq0UCXeWkmajoqIDeKa1zamt67A26KN0AiM=
Subject key identifier: A8:F8:EE:1C:2E:74:69:E1:56:56:DC:BF:F1:74:92:7C:30:84:D2:12
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 01967BD739044E574E53BA1571FDC4829C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number: 0CC3
Signing time: Mon 28 Apr 2025 10:00:24 +0000
Manifest this update: Mon 28 Apr 2025 10:00:24 +0000
Manifest next update: Tue 29 Apr 2025 10:00:24 +0000
Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: 4lDjJI1KeGJ/h0CcefncOpgKIdaF9DBnoNK3C5pzjNA=)
2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:39:04:4e:57:4e:53:ba:15:71:fd:c4:82:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Apr 28 10:00:24 2025 GMT
Not After : Apr 29 10:00:24 2025 GMT
Subject: CN=a8f8ee1c2e7469e15656dcbff174927c3084d212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:f2:f9:dc:04:a3:55:de:43:ab:0b:ba:54:
94:7e:ef:59:31:d2:0a:17:16:af:e5:67:ad:c0:86:
54:5f:7f:a9:7b:ba:a2:0c:fb:26:b7:f5:e9:50:b6:
9f:58:49:46:8c:11:2b:32:44:69:aa:d4:9e:a5:27:
ba:0d:06:f0:fb:c5:f5:64:ba:97:31:89:20:38:87:
bb:6c:0b:a3:7e:5e:2c:2d:cd:60:a7:ee:5b:c1:bb:
b3:61:1d:f7:da:60:13:09:13:35:d2:9f:49:ad:ca:
99:16:3e:9b:84:11:56:29:91:18:df:32:5c:f8:2b:
10:b4:f2:1a:c5:44:8e:f5:84:fd:a5:a9:18:18:55:
be:03:e9:5a:6f:85:c2:54:54:d4:65:2f:ef:a3:df:
f2:59:13:e2:55:d4:ec:c2:a8:1a:7a:0e:d3:e6:f3:
90:66:42:57:d2:6d:06:a2:b8:6a:f7:bc:b4:7d:32:
b4:db:e4:d3:2f:92:fa:44:ab:09:98:c2:13:f5:ed:
08:56:f6:44:96:bb:83:f1:d6:60:e5:08:bf:85:f2:
7c:4f:82:47:76:2b:0d:7c:64:fb:7e:25:44:4b:28:
ae:7a:1c:c2:14:8d:bf:c4:66:3c:a0:c1:41:91:34:
5f:0c:08:a9:23:6e:17:03:61:dc:3a:32:6f:03:af:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F8:EE:1C:2E:74:69:E1:56:56:DC:BF:F1:74:92:7C:30:84:D2:12
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f4:1f:1f:3e:2f:79:0b:31:62:85:d8:71:70:44:fd:6f:66:
57:9a:69:a9:57:70:e8:15:ec:34:c0:f4:de:ec:cc:28:f9:9d:
ed:22:c2:a6:6f:ca:e9:61:e8:71:d1:7d:94:0e:dd:96:d6:e4:
ee:0d:a6:11:41:dc:e5:c2:4f:93:29:20:9f:69:f4:36:a3:40:
fb:09:d0:e4:50:df:b1:f2:51:22:08:84:11:c9:92:05:cf:01:
28:3d:d6:73:d3:e7:15:8f:a3:d2:4b:bd:67:e6:9e:5f:9e:8d:
bf:20:a7:cf:27:0b:70:84:e9:d2:34:70:8d:95:4e:c5:78:d3:
49:c0:ec:03:aa:be:c3:8b:a5:83:5d:58:be:42:52:88:bd:2b:
2b:20:64:98:6d:ea:89:78:47:16:92:a7:b1:f2:91:ee:8c:8c:
7a:c2:e0:6c:57:fa:26:ec:16:36:df:19:ad:90:0f:7b:20:ac:
fe:ab:cd:f3:86:7c:ca:1d:e2:d6:60:6a:ea:42:96:57:d6:f9:
bd:06:89:1b:e7:d7:ab:b8:d2:d5:8a:5b:09:f4:3c:a2:ea:fe:
3b:93:a0:a9:4b:29:6b:2d:64:d3:06:db:73:8e:02:eb:bb:fa:
d8:ce:d9:c0:80:e5:00:61:9a:a6:c3:d4:6e:a4:8d:66:4d:ec:
59:16:d0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ71zkETldOU7oVcf3EgpwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMmU4MGExNDFjOTc0ZjZkYThmNDAyNzQzMzhmZGFjZWU0
MmE3NzAwHhcNMjUwNDI4MTAwMDI0WhcNMjUwNDI5MTAwMDI0WjAzMTEwLwYDVQQD
EyhhOGY4ZWUxYzJlNzQ2OWUxNTY1NmRjYmZmMTc0OTI3YzMwODRkMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuDy+dwEo1XeQ6sLulSUfu9ZMdIK
Fxav5WetwIZUX3+pe7qiDPsmt/XpULafWElGjBErMkRpqtSepSe6DQbw+8X1ZLqX
MYkgOIe7bAujfl4sLc1gp+5bwbuzYR332mATCRM10p9JrcqZFj6bhBFWKZEY3zJc
+CsQtPIaxUSO9YT9pakYGFW+A+lab4XCVFTUZS/vo9/yWRPiVdTswqgaeg7T5vOQ
ZkJX0m0Gorhq97y0fTK02+TTL5L6RKsJmMIT9e0IVvZElruD8dZg5Qi/hfJ8T4JH
disNfGT7fiVESyiuehzCFI2/xGY8oMFBkTRfDAipI24XA2HcOjJvA68QowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj47hwudGnhVlbcv/F0knwwhNISMB8GA1UdIwQY
MBaAFJsugKFByXT22o9AJ0M4/azuQqdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXk2QW9VSEpkUGJhajBBblF6ajlyTzVDcDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mYWFiYmMtODFiYS00OTc3LTg5MjMt
Y2M5M2IxMDUwZGU3LzEvbXk2QW9VSEpkUGJhajBBblF6ajlyTzVDcDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mYWFiYmMtODFiYS00OTc3LTg5MjMtY2M5M2IxMDUwZGU3
LzEvbXk2QW9VSEpkUGJhajBBblF6ajlyTzVDcDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvQfHz4v
eQsxYoXYcXBE/W9mV5ppqVdw6BXsNMD03uzMKPmd7SLCpm/K6WHocdF9lA7dltbk
7g2mEUHc5cJPkykgn2n0NqNA+wnQ5FDfsfJRIgiEEcmSBc8BKD3Wc9PnFY+j0ku9
Z+aeX56NvyCnzycLcITp0jRwjZVOxXjTScDsA6q+w4ulg11YvkJSiL0rKyBkmG3q
iXhHFpKnsfKR7oyMesLgbFf6JuwWNt8ZrZAPeyCs/qvN84Z8yh3i1mBq6kKWV9b5
vQaJG+fXq7jS1YpbCfQ8our+O5OgqUspay1k0wbbc44C67v62M7ZwIDlAGGapsPU
bqSNZk3sWRbQsw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:09:11 2025 by rpki-client