Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: kxBsfPwdMrskbWUjJRUVp0IJRkYt04zr+6zTegUTmaE=
Subject key identifier: D1:D6:66:A7:F5:38:AC:F8:D7:C6:40:77:48:28:26:36:23:36:BA:7C
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 0196741E884895AC7F99A13EEB9E95A8A245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 22:01:20 +0000
Manifest this update: Sat 26 Apr 2025 22:01:20 +0000
Manifest next update: Sun 27 Apr 2025 22:01:20 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: noFjpu3rHFgPU4PN02DmkgAkvXziPDlk8VR5g9mU+pM=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:88:48:95:ac:7f:99:a1:3e:eb:9e:95:a8:a2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Apr 26 22:01:20 2025 GMT
Not After : Apr 27 22:01:20 2025 GMT
Subject: CN=d1d666a7f538acf8d7c64077482826362336ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:3c:df:be:d7:9a:32:a7:44:7d:61:ef:5a:
f4:fd:f0:37:82:b4:e3:e8:74:3e:9f:da:87:fa:ea:
55:4a:46:ae:64:fa:80:89:67:23:32:72:f3:a6:e9:
be:d3:15:5e:b7:62:e1:56:81:28:a1:0a:de:f0:83:
5b:e9:c7:74:c8:b7:32:67:5a:58:94:d1:86:91:9e:
76:3a:09:84:ce:7a:f2:c0:75:05:37:d8:2f:28:ce:
f6:16:92:b1:fb:ec:2a:31:fb:55:ef:5d:c5:10:21:
6f:1e:30:2f:3d:f3:13:ae:65:21:5d:c9:0f:3b:eb:
7d:1d:c6:49:5e:26:f9:48:b3:de:ee:ec:2f:8a:5c:
22:9d:75:4c:df:b6:13:ba:e6:ea:49:35:b0:21:6a:
e2:fc:3a:2c:64:38:b6:81:1d:fe:d8:2d:a0:b2:d3:
f0:92:57:34:a2:b5:b2:16:5e:88:8b:64:7d:07:b9:
bf:f2:54:b0:a8:c8:4a:46:94:dd:ad:7a:c1:98:94:
ac:80:be:db:67:29:95:2f:23:3a:5d:17:3d:89:d9:
e7:b8:70:af:ba:1f:2f:7b:32:e1:1a:cc:a9:cf:b7:
3b:3d:e7:66:3a:0e:a8:65:19:33:40:96:07:83:a3:
d2:26:5c:fe:66:5c:2d:a2:4f:d6:bc:ce:1a:98:8f:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:66:A7:F5:38:AC:F8:D7:C6:40:77:48:28:26:36:23:36:BA:7C
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:da:26:92:84:08:aa:15:bb:de:5f:fb:13:1b:07:93:17:af:
70:92:4f:4f:0d:3b:d3:ae:57:c8:57:7b:a3:dc:9f:9b:9d:a3:
57:c4:6f:3f:c2:f7:b9:67:78:ef:8a:9a:6f:ef:b4:b3:3f:6e:
62:8d:cf:36:ed:dd:0e:19:c6:6d:16:36:5a:8b:c5:40:c4:88:
6d:cb:ad:1e:52:56:4b:ed:d3:2c:55:e9:d6:a8:e7:ed:44:f5:
90:65:44:94:12:73:74:69:09:4e:e0:9e:91:fe:95:30:bf:82:
74:a4:b2:2a:52:e0:57:83:b0:bf:9f:f1:41:15:62:ad:c7:32:
fc:ea:9e:78:25:3b:6e:4e:ed:57:ca:db:69:fa:03:48:21:36:
18:63:c2:ef:fb:14:94:0e:ab:d8:3a:95:05:2e:07:1a:74:9a:
c2:86:bd:f3:35:de:31:94:8d:44:7b:34:24:c0:ea:db:0f:38:
b8:4c:57:36:0e:f4:dd:16:f8:aa:78:05:2c:01:f8:4c:06:89:
0c:06:be:59:57:18:07:90:01:59:21:44:7a:65:3b:dd:9a:74:
6d:4f:3a:8d:9d:b4:47:ec:df:ad:f3:3a:42:c1:63:18:ff:a3:
d5:e9:02:a5:96:c7:9f:2d:10:68:e0:2c:bb:e8:2d:f8:05:8f:
66:4d:c9:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HohIlax/maE+656VqKJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzIzMjVkMmQyMTk3NDY2OWM0ODhmOWViYWE2YmJiOTJj
ZDVmZWQwHhcNMjUwNDI2MjIwMTIwWhcNMjUwNDI3MjIwMTIwWjAzMTEwLwYDVQQD
EyhkMWQ2NjZhN2Y1MzhhY2Y4ZDdjNjQwNzc0ODI4MjYzNjIzMzZiYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+E8377XmjKnRH1h71r0/fA3grTj
6HQ+n9qH+upVSkauZPqAiWcjMnLzpum+0xVet2LhVoEooQre8INb6cd0yLcyZ1pY
lNGGkZ52OgmEznrywHUFN9gvKM72FpKx++wqMftV713FECFvHjAvPfMTrmUhXckP
O+t9HcZJXib5SLPe7uwvilwinXVM37YTuubqSTWwIWri/DosZDi2gR3+2C2gstPw
klc0orWyFl6Ii2R9B7m/8lSwqMhKRpTdrXrBmJSsgL7bZymVLyM6XRc9idnnuHCv
uh8vezLhGsypz7c7PedmOg6oZRkzQJYHg6PSJlz+Zlwtok/WvM4amI/c1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHWZqf1OKz418ZAd0goJjYjNrp8MB8GA1UdIwQY
MBaAFPVyMl0tIZdGacSI+euqa7uSzV/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEt
M2U2MmU5ZTc4OTA2LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEtM2U2MmU5ZTc4OTA2
LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9omkoQI
qhW73l/7ExsHkxevcJJPTw07065XyFd7o9yfm52jV8RvP8L3uWd474qab++0sz9u
Yo3PNu3dDhnGbRY2WovFQMSIbcutHlJWS+3TLFXp1qjn7UT1kGVElBJzdGkJTuCe
kf6VML+CdKSyKlLgV4Owv5/xQRVirccy/OqeeCU7bk7tV8rbafoDSCE2GGPC7/sU
lA6r2DqVBS4HGnSawoa98zXeMZSNRHs0JMDq2w84uExXNg703Rb4qngFLAH4TAaJ
DAa+WVcYB5ABWSFEemU73Zp0bU86jZ20R+zfrfM6QsFjGP+j1ekCpZbHny0QaOAs
u+gt+AWPZk3JRw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:52 2025 by rpki-client