
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: BwSz35GoEloZb6vCXcAiepyFuJ9RDPO05uQy0fBwAYs=
Subject key identifier: C4:CE:1F:CC:E9:79:DD:DF:8C:38:9E:89:BF:32:17:62:F4:1B:A6:95
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 0196895C38B29303615E34750EAD80CD84BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1515
Signing time: Thu 01 May 2025 01:00:44 +0000
Manifest this update: Thu 01 May 2025 01:00:44 +0000
Manifest next update: Fri 02 May 2025 01:00:44 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: i41jjtNo54mPOtAYE3b0iZ5WLZsTufX+ewEr99tkdBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:38:b2:93:03:61:5e:34:75:0e:ad:80:cd:84:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: May 1 01:00:44 2025 GMT
Not After : May 2 01:00:44 2025 GMT
Subject: CN=c4ce1fcce979dddf8c389e89bf321762f41ba695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:52:ef:27:f9:ba:88:10:90:33:35:74:ef:
3d:98:43:2b:72:cb:b2:7e:88:18:bd:25:94:b2:89:
26:70:af:41:d9:d0:96:40:e0:21:3c:e0:96:d4:4a:
17:c8:bd:6e:07:c6:20:a8:a8:83:7e:78:62:7a:2d:
24:eb:6e:a4:09:b1:88:c8:00:47:d1:20:f7:52:89:
5e:ac:1e:b2:d3:ca:2c:1c:32:31:06:ed:17:07:ea:
f7:fb:1b:8f:e9:42:c0:68:43:41:72:70:2f:f6:0e:
3e:4d:23:96:42:5f:ea:ce:e4:4c:ff:0b:a8:06:2f:
a1:8f:c9:3b:3c:3f:e4:84:cb:b9:66:97:d0:53:05:
8c:06:52:8f:fe:a0:86:eb:a8:73:6b:6f:9c:ae:c8:
bf:e8:3f:20:9c:3d:a2:b3:d0:e2:1b:0a:96:22:e6:
11:4c:c7:e5:fa:ec:af:27:04:fb:0e:57:39:49:5a:
25:cd:6a:82:e3:a6:8b:94:86:b2:6b:1c:fe:ce:fd:
de:f1:9b:0f:5d:b1:72:05:42:ff:7b:26:03:61:21:
e7:da:ad:a6:ce:d4:b4:3f:9d:2c:32:ae:fd:0d:01:
6c:e0:52:d7:0a:9b:f4:eb:fc:39:04:96:c1:2f:44:
28:22:f2:75:08:03:77:4a:0f:89:09:f8:9a:2e:36:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:1F:CC:E9:79:DD:DF:8C:38:9E:89:BF:32:17:62:F4:1B:A6:95
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:8d:87:28:e8:15:c0:2b:86:a9:f1:b9:a9:91:a3:9b:02:
08:65:16:05:d9:db:f9:f5:1d:61:a5:3a:ab:02:da:e7:c1:5c:
69:55:91:3b:08:5a:f4:fd:81:08:f9:ad:78:09:52:75:7d:1f:
d4:a7:ff:c2:a6:20:f4:c7:58:8a:5a:05:ee:6c:1b:21:32:0f:
c3:d0:47:c7:ac:fb:59:6d:23:9c:61:29:5e:c5:aa:28:d0:78:
2c:fe:ae:30:a1:b1:24:cc:2e:59:de:6b:9c:9f:47:58:ee:ce:
2d:3d:1d:94:ab:21:95:c1:ad:4f:40:12:1d:69:ae:e2:ab:58:
5e:fb:a2:bd:da:f1:3b:31:01:b7:aa:e6:39:e2:20:ef:00:b6:
b8:85:2f:ad:08:d4:bf:b4:ef:18:a2:60:8d:37:4a:a4:a4:ff:
a5:98:a2:08:21:f0:ae:44:de:72:38:6c:0d:a5:73:e8:17:6f:
eb:e4:bf:98:25:dd:94:4f:1e:51:6f:51:e7:04:00:e6:a6:32:
9e:23:8b:2b:65:98:1a:1c:db:9e:8d:17:7f:0e:c2:97:71:4b:
87:c6:64:43:fd:0c:cc:75:55:50:b6:56:3a:88:d6:c1:82:2f:
4c:bc:e1:71:01:d7:46:6b:63:bf:0b:55:3d:f5:04:56:e4:0a:
58:1b:7a:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXDiykwNhXjR1Dq2AzYS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky
ZmY5NmMwHhcNMjUwNTAxMDEwMDQ0WhcNMjUwNTAyMDEwMDQ0WjAzMTEwLwYDVQQD
EyhjNGNlMWZjY2U5NzlkZGRmOGMzODllODliZjMyMTc2MmY0MWJhNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGRS7yf5uogQkDM1dO89mEMrcsuy
fogYvSWUsokmcK9B2dCWQOAhPOCW1EoXyL1uB8YgqKiDfnhiei0k626kCbGIyABH
0SD3UolerB6y08osHDIxBu0XB+r3+xuP6ULAaENBcnAv9g4+TSOWQl/qzuRM/wuo
Bi+hj8k7PD/khMu5ZpfQUwWMBlKP/qCG66hza2+crsi/6D8gnD2is9DiGwqWIuYR
TMfl+uyvJwT7Dlc5SVolzWqC46aLlIayaxz+zv3e8ZsPXbFyBUL/eyYDYSHn2q2m
ztS0P50sMq79DQFs4FLXCpv06/w5BJbBL0QoIvJ1CAN3Sg+JCfiaLjbgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTOH8zped3fjDieib8yF2L0G6aVMB8GA1UdIwQY
MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt
ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk
LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDWNhyjo
FcArhqnxuamRo5sCCGUWBdnb+fUdYaU6qwLa58FcaVWROwha9P2BCPmteAlSdX0f
1Kf/wqYg9MdYiloF7mwbITIPw9BHx6z7WW0jnGEpXsWqKNB4LP6uMKGxJMwuWd5r
nJ9HWO7OLT0dlKshlcGtT0ASHWmu4qtYXvuivdrxOzEBt6rmOeIg7wC2uIUvrQjU
v7TvGKJgjTdKpKT/pZiiCCHwrkTecjhsDaVz6Bdv6+S/mCXdlE8eUW9R5wQA5qYy
niOLK2WYGhzbno0Xfw7Cl3FLh8ZkQ/0MzHVVULZWOojWwYIvTLzhcQHXRmtjvwtV
PfUEVuQKWBt6Xg==
-----END CERTIFICATE-----
Generated at Thu May 1 11:14:51 2025 by rpki-client