Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: 5j9wu5v7BbMQO8vyoAmHu8rKspcgeuRpylDwQGnRsyU=
Subject key identifier: A4:BE:68:D1:DD:58:86:1A:CD:8B:0C:A9:F9:A6:B1:86:41:82:5F:04
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 01967AFBECF71EA869BCE1BF7430C6318D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 08F1
Signing time: Mon 28 Apr 2025 06:00:52 +0000
Manifest this update: Mon 28 Apr 2025 06:00:52 +0000
Manifest next update: Tue 29 Apr 2025 06:00:52 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: DaO2jMEAq2ZJBynmfbszel6LcjiO4Ea7c459DcC3rg4=)
2: oArMezXxnppYeQKqa4Fni7TfbMc.roa (hash: qlkimcr4G31oui8MrYfktlDJ5C4NmKprfu244lU2XRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ec:f7:1e:a8:69:bc:e1:bf:74:30:c6:31:8d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Apr 28 06:00:52 2025 GMT
Not After : Apr 29 06:00:52 2025 GMT
Subject: CN=a4be68d1dd58861acd8b0ca9f9a6b18641825f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:e1:b8:96:9c:11:d4:fd:e3:68:43:91:e6:
1e:3a:55:a7:6f:bc:ab:d2:7c:b2:e8:6d:87:88:3b:
91:41:e3:66:b0:f6:d1:a8:19:ae:a3:28:0e:aa:96:
10:aa:a2:40:01:04:c0:6e:78:54:b9:2d:ad:5a:57:
b8:91:29:81:ad:af:2c:60:6c:20:7e:d9:86:b8:a2:
87:1d:94:3f:56:c2:35:71:ea:07:89:8f:f4:3c:f5:
48:6b:6e:d7:38:d5:3f:b0:83:98:8e:49:4f:d5:0b:
c0:84:f5:0e:a6:8b:c7:77:33:d5:68:57:c0:c2:a6:
e4:31:3e:93:16:ce:43:a5:a8:15:b8:fe:c0:bd:73:
d8:32:31:92:0e:56:59:43:cb:fb:1e:3b:30:bf:e4:
08:6e:af:be:25:20:14:06:96:62:89:ee:c5:74:72:
d1:7a:00:e4:b3:02:2f:87:ca:97:05:08:4f:3f:da:
4f:4d:0b:47:77:f5:74:ba:7c:16:47:ac:63:3e:30:
0f:dc:cc:c9:ee:42:91:74:6b:3d:9d:16:5c:99:d4:
9d:01:6c:ba:55:d0:9c:8f:11:84:ca:7b:bf:0f:3f:
02:d6:f2:f3:e3:2c:e2:82:12:bd:d4:0e:ae:47:9c:
15:4a:4a:29:03:8d:5e:13:3c:25:96:2c:ee:ff:46:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:68:D1:DD:58:86:1A:CD:8B:0C:A9:F9:A6:B1:86:41:82:5F:04
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:43:e5:77:5a:7a:81:28:7d:65:b3:0a:27:91:8b:2d:bc:
5e:7b:09:97:a4:63:2f:de:60:2b:1e:c6:a7:f8:93:12:cc:22:
b4:39:07:95:de:25:a7:28:d8:c2:d1:96:a5:a9:79:0c:9b:66:
85:6e:13:84:a9:fc:3a:c7:9d:ca:09:fd:f7:30:3d:17:85:81:
ab:af:20:93:36:aa:ec:d4:1b:42:ee:e3:26:b4:f6:49:e1:fa:
d6:28:03:49:7b:89:05:d3:9f:f4:d2:89:38:6c:7a:66:b3:49:
8f:b1:52:4c:a6:b9:0b:5e:54:99:ad:f7:e8:1d:76:1e:5f:fc:
57:79:a8:c1:20:ab:b7:ed:d2:56:eb:0b:68:ed:94:c1:55:ca:
ec:4f:9e:4d:68:bc:ba:bd:27:3d:46:ce:57:0c:a5:6a:61:f4:
ca:f1:5d:f2:2c:9c:13:df:13:13:d6:48:eb:4d:d6:c2:9f:63:
6b:e5:91:fc:f3:29:fb:31:5a:db:c4:f2:1d:59:4f:6e:36:24:
26:73:53:5d:e4:94:e2:6e:f7:46:82:3e:43:e4:ad:95:8d:b3:
df:73:fe:57:59:b6:b9:dc:82:db:a6:cb:73:be:83:cf:e6:a3:
2c:fa:fb:0d:8b:03:b6:b8:b9:c6:a5:86:1b:39:a4:8b:b5:db:
55:5f:e6:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6++z3HqhpvOG/dDDGMY1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz
NzBkMWQwHhcNMjUwNDI4MDYwMDUyWhcNMjUwNDI5MDYwMDUyWjAzMTEwLwYDVQQD
EyhhNGJlNjhkMWRkNTg4NjFhY2Q4YjBjYTlmOWE2YjE4NjQxODI1ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE3huJacEdT942hDkeYeOlWnb7yr
0nyy6G2HiDuRQeNmsPbRqBmuoygOqpYQqqJAAQTAbnhUuS2tWle4kSmBra8sYGwg
ftmGuKKHHZQ/VsI1ceoHiY/0PPVIa27XONU/sIOYjklP1QvAhPUOpovHdzPVaFfA
wqbkMT6TFs5DpagVuP7AvXPYMjGSDlZZQ8v7Hjswv+QIbq++JSAUBpZiie7FdHLR
egDkswIvh8qXBQhPP9pPTQtHd/V0unwWR6xjPjAP3MzJ7kKRdGs9nRZcmdSdAWy6
VdCcjxGEynu/Dz8C1vLz4yzighK91A6uR5wVSkopA41eEzwllizu/0aBtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS+aNHdWIYazYsMqfmmsYZBgl8EMB8GA1UdIwQY
MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt
N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy
LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzRD5Xda
eoEofWWzCieRiy28XnsJl6RjL95gKx7Gp/iTEswitDkHld4lpyjYwtGWpal5DJtm
hW4ThKn8Osedygn99zA9F4WBq68gkzaq7NQbQu7jJrT2SeH61igDSXuJBdOf9NKJ
OGx6ZrNJj7FSTKa5C15Uma336B12Hl/8V3mowSCrt+3SVusLaO2UwVXK7E+eTWi8
ur0nPUbOVwylamH0yvFd8iycE98TE9ZI603Wwp9ja+WR/PMp+zFa28TyHVlPbjYk
JnNTXeSU4m73RoI+Q+StlY2z33P+V1m2udyC26bLc76Dz+ajLPr7DYsDtri5xqWG
Gzmki7XbVV/mwQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:26:14 2025 by rpki-client