Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: 0Im88NlhkMzekgPTEUPnzf068OlcAVrj6m2ZVDkUCfA=
Subject key identifier: 64:4E:E7:88:57:2F:47:D1:A4:78:13:F3:28:41:33:7A:B4:1B:4E:D4
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 0196771ECA370FAC30BC1EC17B6C4C32F38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 13E5
Signing time: Sun 27 Apr 2025 12:00:28 +0000
Manifest this update: Sun 27 Apr 2025 12:00:28 +0000
Manifest next update: Mon 28 Apr 2025 12:00:28 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: 7tiHzPC3XKFJ4MmNDmT5bLnjDvCCC64U0ct2StqkzTM=)
2: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ca:37:0f:ac:30:bc:1e:c1:7b:6c:4c:32:f3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Apr 27 12:00:28 2025 GMT
Not After : Apr 28 12:00:28 2025 GMT
Subject: CN=644ee788572f47d1a47813f32841337ab41b4ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:01:ef:78:81:b2:38:26:a7:a4:52:97:8b:
b3:28:21:45:8d:29:85:d5:fc:5c:ea:c5:3c:17:8e:
c3:7f:90:44:89:77:55:8d:8e:77:66:66:d8:ef:e7:
33:84:4d:d9:d0:c1:5e:08:c4:d3:71:de:81:df:a4:
cd:ae:de:ee:1d:3c:30:2c:58:4a:44:be:d5:33:42:
f5:37:e8:97:c9:e8:2f:ae:24:96:fd:eb:66:07:ce:
e9:b7:b1:7c:28:11:12:9c:79:ea:97:f2:73:ac:af:
13:23:63:72:67:db:9d:df:dd:35:17:bc:55:e0:40:
0b:75:d7:27:9f:43:4c:cf:21:40:f0:85:c5:fb:9b:
fe:26:dc:47:45:1d:c1:07:8c:20:c4:16:a4:37:b2:
c7:cf:bc:a9:0f:46:e2:4f:1a:21:6f:4d:24:89:c1:
5e:cc:de:f6:70:4b:33:e2:91:ac:03:b7:b4:3d:bf:
67:15:1a:0e:44:37:db:fe:c2:d8:16:01:68:00:b6:
79:ac:e0:16:a4:f1:39:d4:66:cb:84:b0:43:03:7c:
e4:54:22:9b:a4:fd:57:9e:fe:b4:72:1e:a9:28:61:
e6:0b:a7:18:1b:b8:04:44:80:60:9d:3f:7d:46:72:
33:f2:1b:3c:34:5c:49:ce:43:8f:54:9d:ca:78:83:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:E7:88:57:2F:47:D1:A4:78:13:F3:28:41:33:7A:B4:1B:4E:D4
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:53:82:81:de:b6:1c:9d:29:dc:97:92:e0:d3:df:97:1b:30:
3c:18:6e:89:c6:77:0c:3e:f6:11:53:84:3c:16:2f:39:74:98:
d2:2a:3b:e8:37:ba:68:0f:a9:ca:5c:8c:78:c8:6a:6e:3d:00:
d4:bf:63:2d:7b:cf:f3:e9:86:e8:11:e6:27:27:26:f2:e0:1f:
a0:a6:c6:ff:dc:da:5e:0a:5c:32:4a:12:60:e6:2b:e5:c5:b9:
76:86:38:03:6e:dd:92:7b:40:94:78:15:3e:6b:76:68:91:a1:
c0:90:f8:8a:78:82:7e:b1:ee:71:c5:66:fd:be:2f:b1:e6:48:
3e:20:e4:ba:4b:ff:56:95:fb:49:0e:75:b1:02:1b:85:2e:b0:
8b:20:d8:4a:77:7e:19:60:2d:ec:3c:95:3f:c6:5b:92:70:0b:
bd:c2:73:da:2c:fb:56:30:6b:f3:d8:f0:3c:7b:a5:60:4d:74:
1e:9d:d8:c8:ee:0d:a3:41:50:10:05:67:8b:5c:a6:fc:db:62:
ad:77:0d:c3:1d:a2:89:97:ea:b8:b0:fd:d5:37:0c:d7:d7:4c:
c3:28:44:65:80:6f:bd:47:2b:1c:35:13:c5:41:2d:2d:3b:e5:
ee:6a:84:45:18:33:be:f3:e7:f2:d6:b0:e0:15:5e:a3:62:a5:
4e:aa:6c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Hso3D6wwvB7Be2xMMvOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDNjMGMxMTUzMjhjM2QyOGMwZjU3MjFiMDA5ODJiMmNk
NDIxNWUwHhcNMjUwNDI3MTIwMDI4WhcNMjUwNDI4MTIwMDI4WjAzMTEwLwYDVQQD
Eyg2NDRlZTc4ODU3MmY0N2QxYTQ3ODEzZjMyODQxMzM3YWI0MWI0ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRYB73iBsjgmp6RSl4uzKCFFjSmF
1fxc6sU8F47Df5BEiXdVjY53ZmbY7+czhE3Z0MFeCMTTcd6B36TNrt7uHTwwLFhK
RL7VM0L1N+iXyegvriSW/etmB87pt7F8KBESnHnql/JzrK8TI2NyZ9ud3901F7xV
4EALddcnn0NMzyFA8IXF+5v+JtxHRR3BB4wgxBakN7LHz7ypD0biTxohb00kicFe
zN72cEsz4pGsA7e0Pb9nFRoORDfb/sLYFgFoALZ5rOAWpPE51GbLhLBDA3zkVCKb
pP1Xnv60ch6pKGHmC6cYG7gERIBgnT99RnIz8hs8NFxJzkOPVJ3KeINkVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRO54hXL0fRpHgT8yhBM3q0G07UMB8GA1UdIwQY
MBaAFAfTwMEVMow9KMD1chsAmCss1CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDct
MmIxZDQzOWIyMjI3LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDctMmIxZDQzOWIyMjI3
LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFOCgd62
HJ0p3JeS4NPflxswPBhuicZ3DD72EVOEPBYvOXSY0io76De6aA+pylyMeMhqbj0A
1L9jLXvP8+mG6BHmJycm8uAfoKbG/9zaXgpcMkoSYOYr5cW5doY4A27dkntAlHgV
Pmt2aJGhwJD4iniCfrHuccVm/b4vseZIPiDkukv/VpX7SQ51sQIbhS6wiyDYSnd+
GWAt7DyVP8ZbknALvcJz2iz7VjBr89jwPHulYE10Hp3YyO4No0FQEAVni1ym/Nti
rXcNwx2iiZfquLD91TcM19dMwyhEZYBvvUcrHDUTxUEtLTvl7mqERRgzvvPn8taw
4BVeo2KlTqpsLw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:22:18 2025 by rpki-client