Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: L8yJLYoG/b8noygboV7VenHmqaw+n1YeKOw0PpuEMK8=
Subject key identifier: D1:81:74:C4:24:07:24:45:5D:98:34:A6:15:30:27:C5:C8:E0:CA:96
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 019675678A9C7403E452AA9D6F44098EB58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 120E
Signing time: Sun 27 Apr 2025 04:00:42 +0000
Manifest this update: Sun 27 Apr 2025 04:00:42 +0000
Manifest next update: Mon 28 Apr 2025 04:00:42 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: 1kyoCFoyIGfojdC8JzRqt7fxQRXZTNQEdyiax0RpInE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:8a:9c:74:03:e4:52:aa:9d:6f:44:09:8e:b5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Apr 27 04:00:42 2025 GMT
Not After : Apr 28 04:00:42 2025 GMT
Subject: CN=d18174c4240724455d9834a6153027c5c8e0ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:9e:cc:95:48:8a:b0:70:7d:cd:1a:81:66:
0e:4d:a9:bf:6c:25:25:81:30:fa:d5:4a:04:e2:a9:
2c:ca:9b:48:f4:c1:4c:db:8f:0e:b4:75:f4:1f:70:
82:35:d2:d5:7b:de:2b:e1:e6:a5:e4:14:a1:4d:2f:
f2:78:2c:8b:e1:1d:a7:a8:61:e7:69:a3:0e:52:5d:
ab:fa:b3:65:41:30:f9:2b:e6:51:c1:d8:01:56:ec:
13:86:7f:3c:0b:5c:eb:90:8e:bd:71:8c:96:cd:1a:
b5:9d:79:ec:94:33:87:21:fc:6e:d0:f4:f7:09:a7:
3c:f9:ac:52:9d:0b:b0:d7:a6:a5:85:1c:62:8a:b5:
fd:67:a2:01:d2:f3:b3:ac:d3:dd:bc:56:2d:8f:75:
b9:3e:66:12:63:a4:b6:bd:73:41:9a:f6:bd:d0:c1:
44:a9:91:aa:5e:e7:5a:58:f8:d3:11:2e:0d:ee:96:
49:3c:5c:7e:0e:6b:c6:67:af:e4:a7:d9:62:56:21:
f9:2d:29:77:8a:e7:24:eb:a2:70:22:35:55:44:84:
da:a4:8e:ff:b4:60:7b:9e:fd:45:cf:b9:e9:11:4a:
91:6f:0c:8d:05:1d:73:77:49:45:8d:7e:79:e3:00:
b3:18:bb:15:07:b2:14:8b:a8:7a:9e:01:b0:4c:f3:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:74:C4:24:07:24:45:5D:98:34:A6:15:30:27:C5:C8:E0:CA:96
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f7:84:fb:50:b7:06:35:76:6c:c9:c9:a0:d0:d4:e9:51:0b:
6c:14:68:0c:65:ee:21:2e:ef:6e:c5:00:fa:60:b0:05:50:91:
12:97:f1:8f:f6:2e:00:28:b5:b0:c9:fe:a7:bf:ce:32:ce:cd:
7d:4c:45:a7:b1:ee:11:f5:72:ed:ef:dd:d5:ef:2a:53:4d:4e:
ed:a1:ba:e2:87:6a:89:a6:f7:32:ad:a6:cd:f0:fc:61:04:fe:
8d:7d:23:39:fb:6d:c4:b3:5f:63:44:fa:59:55:43:76:45:e3:
14:84:0f:46:97:82:d9:1d:82:35:06:ae:99:cd:b0:10:52:41:
b4:b7:6c:cd:af:55:e8:9c:27:34:dd:33:d5:76:61:ea:bf:33:
96:70:a8:90:c4:e8:7e:fd:55:69:6d:02:2a:44:8e:98:ba:82:
85:0a:ac:56:18:95:35:5f:93:96:c1:b8:59:69:52:2c:d5:03:
1b:1d:92:8a:d1:22:3e:55:2c:a6:eb:74:fd:99:f1:92:a0:ef:
20:2c:d8:8e:b4:85:f4:c9:b6:34:30:61:93:50:f8:ca:a3:3a:
c5:4a:56:cb:6a:e7:11:ce:e5:b1:1f:d9:4c:4b:63:57:ec:83:
53:93:79:79:9b:e3:8a:91:cc:7b:32:9d:85:72:61:46:21:4b:
b9:cf:69:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z4qcdAPkUqqdb0QJjrWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzE4NzMzYWFkNDNlZjZhOTliZDhkOTUwNGEyMGRkODkw
MjJlOGYwHhcNMjUwNDI3MDQwMDQyWhcNMjUwNDI4MDQwMDQyWjAzMTEwLwYDVQQD
EyhkMTgxNzRjNDI0MDcyNDQ1NWQ5ODM0YTYxNTMwMjdjNWM4ZTBjYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHCezJVIirBwfc0agWYOTam/bCUl
gTD61UoE4qksyptI9MFM248OtHX0H3CCNdLVe94r4eal5BShTS/yeCyL4R2nqGHn
aaMOUl2r+rNlQTD5K+ZRwdgBVuwThn88C1zrkI69cYyWzRq1nXnslDOHIfxu0PT3
Cac8+axSnQuw16alhRxiirX9Z6IB0vOzrNPdvFYtj3W5PmYSY6S2vXNBmva90MFE
qZGqXudaWPjTES4N7pZJPFx+DmvGZ6/kp9liViH5LSl3iuck66JwIjVVRITapI7/
tGB7nv1Fz7npEUqRbwyNBR1zd0lFjX554wCzGLsVB7IUi6h6ngGwTPMBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGBdMQkByRFXZg0phUwJ8XI4MqWMB8GA1UdIwQY
MBaAFPVxhzOq1D72qZvY2VBKIN2JAi6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5Yzgt
ZDcyNWZhNjczMmI2LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5YzgtZDcyNWZhNjczMmI2
LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfeE+1C3
BjV2bMnJoNDU6VELbBRoDGXuIS7vbsUA+mCwBVCREpfxj/YuACi1sMn+p7/OMs7N
fUxFp7HuEfVy7e/d1e8qU01O7aG64odqiab3Mq2mzfD8YQT+jX0jOfttxLNfY0T6
WVVDdkXjFIQPRpeC2R2CNQaumc2wEFJBtLdsza9V6JwnNN0z1XZh6r8zlnCokMTo
fv1VaW0CKkSOmLqChQqsVhiVNV+TlsG4WWlSLNUDGx2SitEiPlUsput0/ZnxkqDv
ICzYjrSF9Mm2NDBhk1D4yqM6xUpWy2rnEc7lsR/ZTEtjV+yDU5N5eZvjipHMezKd
hXJhRiFLuc9pHA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:48:07 2025 by rpki-client