
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: l958w6j9D3GQchztCmn7usL4ONFNqL6c0uEGCGUSuwk=
Subject key identifier: 5B:B5:63:F6:2E:42:47:C3:49:B0:C6:BE:EB:CE:35:47:A1:DD:69:F7
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 0196756735DD5A059FA61DAD70FE0E528D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 09B0
Signing time: Sun 27 Apr 2025 04:00:20 +0000
Manifest this update: Sun 27 Apr 2025 04:00:20 +0000
Manifest next update: Mon 28 Apr 2025 04:00:20 +0000
Files and hashes: 1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: em+gJ+Cey7EwTt3lmMCEqz+QBbwH+rMhomGYdrBDnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:35:dd:5a:05:9f:a6:1d:ad:70:fe:0e:52:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Apr 27 04:00:20 2025 GMT
Not After : Apr 28 04:00:20 2025 GMT
Subject: CN=5bb563f62e4247c349b0c6beebce3547a1dd69f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:8e:8a:9e:4c:02:59:08:c4:46:f1:8b:ab:
59:f5:d8:17:82:10:82:f6:6f:55:8d:d7:d0:3c:bf:
a8:67:90:a8:91:b2:4d:83:38:33:79:e2:5c:35:4d:
ca:80:04:56:14:9f:25:fd:b4:49:e2:f4:7c:5f:29:
2f:eb:54:66:fe:48:8f:8a:5d:70:9d:fd:a6:51:fc:
ed:bb:c9:bc:92:74:c0:9f:0e:ba:8d:a2:c9:47:38:
ad:11:74:23:46:61:ce:d7:93:a2:cc:3c:e3:b3:a7:
0a:e4:d6:75:77:99:fd:40:94:3c:67:eb:c0:48:1e:
f9:a8:55:18:aa:74:cc:91:d2:74:ae:56:f9:2a:af:
6a:98:e0:ce:a6:6f:d4:3c:be:26:21:9c:c4:23:24:
90:4f:ee:82:72:c0:08:c8:cf:df:9b:6a:43:79:5a:
c9:b4:c7:1d:46:5f:1d:ef:2a:66:79:6f:87:9a:70:
03:a3:67:ba:5c:7a:db:0c:98:a9:62:b2:d8:5d:15:
0f:e1:93:39:0d:35:a6:23:c8:a0:0e:85:fc:1e:ed:
a6:0a:99:ff:23:41:3f:98:d5:b9:1d:3b:f2:ff:ea:
b4:df:3d:39:ff:db:79:9a:fc:4a:28:08:01:fb:68:
bd:c7:20:52:5f:f1:75:b8:fb:8a:b3:40:66:a9:59:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:63:F6:2E:42:47:C3:49:B0:C6:BE:EB:CE:35:47:A1:DD:69:F7
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c1:cb:6c:77:05:0a:ae:69:f9:25:78:b8:78:37:c0:f9:eb:
20:78:d3:cc:0d:e5:9d:33:c8:dd:42:a4:eb:ec:ff:10:9c:b5:
d7:c2:93:4d:19:48:a8:df:9f:b6:ab:ac:40:4f:2f:2c:e5:78:
a4:b7:4b:96:11:3d:2a:23:5d:ea:a3:a9:e8:c4:74:9c:d2:52:
a8:18:2c:65:5e:a7:d1:5c:6e:84:1b:60:f8:d1:49:30:ad:79:
34:75:c7:fc:0c:7d:a2:86:f0:ff:f0:ff:3e:fc:b5:20:e9:a8:
b3:80:50:79:11:76:83:4f:d5:a2:ef:53:65:03:de:69:0e:a3:
27:9e:e2:ae:3f:2b:8d:2b:6b:ef:6e:3b:dd:2a:85:c6:60:c1:
f2:d8:05:96:22:60:4f:a6:55:65:e5:90:69:1e:63:9c:86:a3:
22:63:19:43:1c:2f:66:b2:8a:6f:9c:ca:02:66:58:e6:18:79:
83:f6:d2:52:6a:7a:e4:f6:07:71:e6:35:36:62:b4:19:ed:67:
97:c6:67:a4:6b:76:88:58:30:eb:1e:33:a4:86:b4:b6:ea:87:
f4:d8:f8:39:7d:9d:41:82:d2:a2:94:ed:cd:e8:43:07:5e:f1:
61:f2:9e:bf:1d:a1:73:95:95:c6:9f:cd:ec:d8:7b:27:d6:58:
95:d3:d1:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1ZzXdWgWfph2tcP4OUo1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjUwNDI3MDQwMDIwWhcNMjUwNDI4MDQwMDIwWjAzMTEwLwYDVQQD
Eyg1YmI1NjNmNjJlNDI0N2MzNDliMGM2YmVlYmNlMzU0N2ExZGQ2OWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvguOip5MAlkIxEbxi6tZ9dgXghCC
9m9VjdfQPL+oZ5CokbJNgzgzeeJcNU3KgARWFJ8l/bRJ4vR8Xykv61Rm/kiPil1w
nf2mUfztu8m8knTAnw66jaLJRzitEXQjRmHO15OizDzjs6cK5NZ1d5n9QJQ8Z+vA
SB75qFUYqnTMkdJ0rlb5Kq9qmODOpm/UPL4mIZzEIySQT+6CcsAIyM/fm2pDeVrJ
tMcdRl8d7ypmeW+HmnADo2e6XHrbDJipYrLYXRUP4ZM5DTWmI8igDoX8Hu2mCpn/
I0E/mNW5HTvy/+q03z05/9t5mvxKKAgB+2i9xyBSX/F1uPuKs0BmqVl+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu1Y/YuQkfDSbDGvuvONUeh3Wn3MB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMHLbHcF
Cq5p+SV4uHg3wPnrIHjTzA3lnTPI3UKk6+z/EJy118KTTRlIqN+ftqusQE8vLOV4
pLdLlhE9KiNd6qOp6MR0nNJSqBgsZV6n0VxuhBtg+NFJMK15NHXH/Ax9oobw//D/
Pvy1IOmos4BQeRF2g0/Vou9TZQPeaQ6jJ57irj8rjStr72473SqFxmDB8tgFliJg
T6ZVZeWQaR5jnIajImMZQxwvZrKKb5zKAmZY5hh5g/bSUmp65PYHceY1NmK0Ge1n
l8ZnpGt2iFgw6x4zpIa0tuqH9Nj4OX2dQYLSopTtzehDB17xYfKevx2hc5WVxp/N
7Nh7J9ZYldPRvQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:34 2025 by rpki-client