Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: MSKJLrnhFCdzHiz5VH3nfb/dKrZ19/V0lNGhtohRXio=
Subject key identifier: F0:D0:98:21:71:64:D7:74:20:F2:57:9B:99:6A:C6:9F:10:A0:76:A5
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 0196572650DEFF345932BC17FDB7005817E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0B00
Signing time: Mon 21 Apr 2025 07:00:50 +0000
Manifest this update: Mon 21 Apr 2025 07:00:50 +0000
Manifest next update: Tue 22 Apr 2025 07:00:50 +0000
Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: WX9UH3/sVQPvSC7RAHKs3cJibeCAThbuodVwkfvLC1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:50:de:ff:34:59:32:bc:17:fd:b7:00:58:17:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Apr 21 07:00:50 2025 GMT
Not After : Apr 22 07:00:50 2025 GMT
Subject: CN=f0d098217164d77420f2579b996ac69f10a076a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:50:c2:d5:6d:01:b2:6e:5e:0d:6b:a9:d4:
19:dc:e2:7b:d3:be:8f:16:b1:f0:b7:f5:0e:25:5e:
81:17:fb:b4:fb:84:4b:31:98:48:0e:14:74:26:c9:
5a:5c:b8:94:3c:cb:75:28:3f:b0:c6:90:db:c5:a3:
4c:27:69:4b:ce:cd:79:de:4f:63:28:34:47:a5:72:
38:93:0a:73:0e:92:dd:86:ed:1b:97:bc:a8:2a:62:
44:3a:ff:fa:e7:7f:b8:05:dd:fe:26:3d:cf:c8:63:
dd:40:20:f1:08:6e:d2:3a:d8:26:3f:c9:d4:ae:f8:
71:c3:4d:10:24:f7:df:46:41:99:0e:e9:c3:e9:e2:
f3:fa:ab:dd:27:d0:ff:e7:77:0b:65:98:d2:b6:eb:
a7:76:76:40:95:c6:93:2b:36:03:99:d0:3b:06:76:
97:c9:7e:70:04:10:9b:54:b0:7c:3b:82:35:f0:96:
8a:64:09:26:73:a5:0e:ac:3e:28:01:b8:24:21:4f:
ea:9c:bf:67:5d:a9:fb:b3:79:55:a2:42:d3:ce:5f:
77:bb:f2:46:28:fc:be:c3:86:c6:51:b3:38:47:a1:
d0:b0:a7:92:f9:9c:46:5d:72:ef:54:ea:c2:2b:cf:
7e:06:f7:aa:8b:06:b5:cb:43:3d:d8:56:65:62:bc:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D0:98:21:71:64:D7:74:20:F2:57:9B:99:6A:C6:9F:10:A0:76:A5
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:47:0d:92:d6:a6:de:f8:92:da:20:43:61:30:23:28:12:
4b:36:c9:85:2c:fd:20:b0:62:a9:82:6b:f5:c4:6d:a6:d0:24:
f4:49:42:72:e3:32:e3:7e:eb:c4:5a:f5:ac:59:be:9a:08:58:
a2:11:05:9a:8a:e4:86:08:d8:7c:23:0c:cf:72:3e:23:9e:70:
a3:5c:49:97:ea:04:0a:2d:ba:e5:37:61:f4:74:b8:82:5d:99:
4c:bb:43:f1:1c:bf:1c:4e:17:02:98:02:a0:9b:bb:d0:b0:d2:
ee:02:f1:44:8c:4f:d9:e1:9c:87:41:42:46:13:9b:88:50:e3:
34:b2:45:8b:7d:23:9f:4b:c0:1b:cd:64:69:29:25:2e:39:34:
0b:86:de:fb:11:c6:b6:81:ce:e8:7d:6e:71:0b:ff:e9:84:d9:
f3:32:4b:62:23:98:44:87:84:47:21:31:64:d4:7f:ac:40:00:
5c:af:bd:fa:96:cd:6a:3c:47:0f:97:8f:0b:79:38:33:a7:9e:
a7:31:1e:61:3f:e9:b5:09:f6:cc:26:e5:ea:8b:50:1b:6e:44:
43:0f:51:7b:c8:f7:16:ed:10:22:75:13:e3:ea:17:fe:f4:ef:
b1:f4:a1:83:d8:bd:b2:43:4b:c0:b5:21:38:62:b8:2f:c2:5f:
e5:5c:2a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJlDe/zRZMrwX/bcAWBfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0
NTUwNzIwHhcNMjUwNDIxMDcwMDUwWhcNMjUwNDIyMDcwMDUwWjAzMTEwLwYDVQQD
EyhmMGQwOTgyMTcxNjRkNzc0MjBmMjU3OWI5OTZhYzY5ZjEwYTA3NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmNQwtVtAbJuXg1rqdQZ3OJ7076P
FrHwt/UOJV6BF/u0+4RLMZhIDhR0JslaXLiUPMt1KD+wxpDbxaNMJ2lLzs153k9j
KDRHpXI4kwpzDpLdhu0bl7yoKmJEOv/653+4Bd3+Jj3PyGPdQCDxCG7SOtgmP8nU
rvhxw00QJPffRkGZDunD6eLz+qvdJ9D/53cLZZjStuundnZAlcaTKzYDmdA7BnaX
yX5wBBCbVLB8O4I18JaKZAkmc6UOrD4oAbgkIU/qnL9nXan7s3lVokLTzl93u/JG
KPy+w4bGUbM4R6HQsKeS+ZxGXXLvVOrCK89+Bveqiwa1y0M92FZlYrzHFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDQmCFxZNd0IPJXm5lqxp8QoHalMB8GA1UdIwQY
MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt
MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx
LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1FHDZLW
pt74ktogQ2EwIygSSzbJhSz9ILBiqYJr9cRtptAk9ElCcuMy437rxFr1rFm+mghY
ohEFmorkhgjYfCMMz3I+I55wo1xJl+oECi265Tdh9HS4gl2ZTLtD8Ry/HE4XApgC
oJu70LDS7gLxRIxP2eGch0FCRhObiFDjNLJFi30jn0vAG81kaSklLjk0C4be+xHG
toHO6H1ucQv/6YTZ8zJLYiOYRIeERyExZNR/rEAAXK+9+pbNajxHD5ePC3k4M6ee
pzEeYT/ptQn2zCbl6otQG25EQw9Re8j3Fu0QInUT4+oX/vTvsfShg9i9skNLwLUh
OGK4L8Jf5Vwqog==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:11 2025 by rpki-client