Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: jNtrO9+t4RdTuPSoTCNn0j7waVxnoSEe2SiAhc4N6xs=
Subject key identifier: 15:60:28:F1:A1:E8:B6:CB:0A:C0:27:C2:C7:94:F9:63:D5:D2:A5:CD
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 0196760D192541EF3B6A89BD1FB2629BF122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0576
Signing time: Sun 27 Apr 2025 07:01:31 +0000
Manifest this update: Sun 27 Apr 2025 07:01:31 +0000
Manifest next update: Mon 28 Apr 2025 07:01:31 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: poe+NNAoDsofk5zGAgVGKbOssY3eXv/IB1feGuLsozU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:19:25:41:ef:3b:6a:89:bd:1f:b2:62:9b:f1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Apr 27 07:01:31 2025 GMT
Not After : Apr 28 07:01:31 2025 GMT
Subject: CN=156028f1a1e8b6cb0ac027c2c794f963d5d2a5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:cf:14:b7:46:25:42:da:80:c5:b9:bb:af:
56:ae:6e:9d:16:10:ae:4f:01:f9:ab:ec:f6:5a:ac:
45:a8:0f:88:0f:d5:c8:3c:be:90:79:21:36:7e:1b:
b6:e9:45:7d:6b:8e:df:3f:13:6d:a7:f2:cc:8a:91:
7e:c3:e7:09:0f:5c:97:59:4f:ed:57:20:84:cc:9e:
7f:7e:bf:04:1a:31:5e:bd:11:54:aa:e2:49:05:68:
b4:ae:6d:64:60:1b:5e:36:85:1e:02:00:c8:c0:83:
3b:69:0e:eb:bd:93:fc:35:3d:6e:2f:43:90:9e:28:
5f:ec:05:41:56:b3:b4:93:08:09:31:72:29:eb:38:
53:d4:45:c8:f8:5c:ff:63:0f:28:0e:42:2a:35:a1:
30:42:b6:80:c9:fe:90:27:ba:3b:4f:a2:52:97:34:
2c:bf:bf:2d:52:e7:22:54:34:32:c3:d2:0d:18:f1:
56:7a:8a:e6:26:94:59:67:10:5e:fa:19:cf:46:8a:
4b:48:89:96:f4:95:0b:af:ab:65:8c:2e:68:ab:12:
cf:57:6a:ff:47:cf:0e:7c:29:c2:1e:86:2e:53:01:
28:9a:d9:83:10:7c:44:ce:01:43:2e:e7:ed:2c:ed:
2a:f4:ab:91:41:c2:d1:71:0d:20:fb:dc:81:53:08:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:28:F1:A1:E8:B6:CB:0A:C0:27:C2:C7:94:F9:63:D5:D2:A5:CD
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:67:89:da:c5:ce:de:1e:de:e0:ef:98:f2:58:51:fc:d8:1a:
2c:11:6e:1e:46:b3:2c:ea:82:c6:5e:d2:d0:2d:46:20:0d:03:
b2:2c:f0:7a:4a:86:f1:20:2f:1a:9b:a4:8b:b9:f2:36:f3:42:
cb:9f:95:15:81:8a:1b:2d:ba:8e:fb:dc:51:be:41:48:94:64:
b0:a4:02:0f:d7:6d:52:2e:65:50:0e:50:05:33:ff:1d:ce:01:
37:4d:41:b4:19:2e:8d:d4:e1:ec:d3:63:1d:fe:41:9d:cc:c4:
85:5b:50:5b:f3:22:10:54:fb:b3:68:67:69:94:58:26:d4:da:
8c:70:a4:c4:60:22:3e:b1:69:f7:40:9e:43:02:62:c2:58:c7:
4b:99:ae:cf:d1:84:91:0a:ba:cf:2a:44:cb:59:2f:4a:68:e8:
bb:fa:87:46:0e:d8:c2:9b:3f:e5:6f:73:2b:c0:42:5c:16:cc:
96:ed:ec:b4:48:3e:63:3b:06:d9:be:e5:8e:d7:cd:52:04:05:
50:d7:77:3e:20:02:ff:6f:aa:1f:82:48:b6:88:a5:8e:dd:a8:
ac:80:86:ca:e3:53:e5:d3:40:b0:c4:27:f2:06:9f:47:32:90:
5c:64:fc:73:b1:8b:0e:32:61:0e:64:80:59:96:bb:e8:af:41:
ca:00:27:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DRklQe87aom9H7Jim/EiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4
NWU3MGMwHhcNMjUwNDI3MDcwMTMxWhcNMjUwNDI4MDcwMTMxWjAzMTEwLwYDVQQD
EygxNTYwMjhmMWExZThiNmNiMGFjMDI3YzJjNzk0Zjk2M2Q1ZDJhNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RPPFLdGJULagMW5u69Wrm6dFhCu
TwH5q+z2WqxFqA+ID9XIPL6QeSE2fhu26UV9a47fPxNtp/LMipF+w+cJD1yXWU/t
VyCEzJ5/fr8EGjFevRFUquJJBWi0rm1kYBteNoUeAgDIwIM7aQ7rvZP8NT1uL0OQ
nihf7AVBVrO0kwgJMXIp6zhT1EXI+Fz/Yw8oDkIqNaEwQraAyf6QJ7o7T6JSlzQs
v78tUuciVDQyw9INGPFWeormJpRZZxBe+hnPRopLSImW9JULr6tljC5oqxLPV2r/
R88OfCnCHoYuUwEomtmDEHxEzgFDLuftLO0q9KuRQcLRcQ0g+9yBUwgvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVgKPGh6LbLCsAnwseU+WPV0qXNMB8GA1UdIwQY
MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt
ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw
LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2eJ2sXO
3h7e4O+Y8lhR/NgaLBFuHkazLOqCxl7S0C1GIA0DsizwekqG8SAvGpuki7nyNvNC
y5+VFYGKGy26jvvcUb5BSJRksKQCD9dtUi5lUA5QBTP/Hc4BN01BtBkujdTh7NNj
Hf5BnczEhVtQW/MiEFT7s2hnaZRYJtTajHCkxGAiPrFp90CeQwJiwljHS5muz9GE
kQq6zypEy1kvSmjou/qHRg7Ywps/5W9zK8BCXBbMlu3stEg+YzsG2b7ljtfNUgQF
UNd3PiAC/2+qH4JItoiljt2orICGyuNT5dNAsMQn8gafRzKQXGT8c7GLDjJhDmSA
WZa76K9BygAnGA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:16 2025 by rpki-client