Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json)
Hash identifier: IbcuwVQf9WjVkEclnU+9QyWjhW/ssX0o8zmtlq9/FTk=
Subject key identifier: DD:D2:CC:27:DE:5F:10:79:C5:B8:D2:2D:45:08:F0:86:E8:E7:97:B3
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 019659156601615C49A7CD45E49D79C223F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 16:01:36 +0000
Manifest this update: Mon 21 Apr 2025 16:01:36 +0000
Manifest next update: Tue 22 Apr 2025 16:01:36 +0000
Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: PDev64fg3JX9lNBdWX89XQsUPM1if9SRvHQY9YISA0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:66:01:61:5c:49:a7:cd:45:e4:9d:79:c2:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Apr 21 16:01:36 2025 GMT
Not After : Apr 22 16:01:36 2025 GMT
Subject: CN=ddd2cc27de5f1079c5b8d22d4508f086e8e797b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:ab:27:a4:15:be:49:3c:05:e5:40:fe:1b:
8c:f1:39:63:7d:ea:3e:13:04:1d:28:55:d7:f6:22:
75:f7:07:29:fb:3c:49:a9:ce:f4:13:35:16:a0:8d:
cf:5d:77:82:cb:b7:e0:5b:45:a6:02:77:b8:9a:c5:
70:f0:52:3f:c0:8f:94:43:3c:7b:aa:cd:61:da:dd:
0f:4d:d7:12:6e:10:19:d6:ce:bb:a6:5a:4c:06:55:
9e:1b:ca:98:59:e3:ef:c4:d9:b1:8a:52:0f:88:eb:
c9:89:8d:80:0a:1c:1b:9e:46:37:e4:72:d5:f7:9f:
d3:7a:78:f9:3d:7a:d6:8e:39:47:a6:27:00:ce:60:
0e:5a:e5:7a:28:fa:8e:c4:7c:d4:45:28:5e:58:69:
e7:34:66:97:dc:d8:aa:d9:68:39:ce:82:48:5e:ff:
d2:51:3a:66:6f:55:2d:35:2e:28:87:85:33:29:e7:
72:dd:9a:02:16:48:67:c9:f7:53:7f:15:55:3c:b3:
7e:a8:c3:29:98:28:c9:fc:d0:65:6a:20:0b:25:86:
23:72:e1:fa:6e:55:49:46:54:00:aa:3e:68:ad:ba:
05:7f:46:e0:73:0e:c8:98:2e:27:d5:e8:9d:de:9d:
71:d4:42:ca:1a:8b:66:8f:dd:a8:32:33:fd:d0:d2:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:CC:27:DE:5F:10:79:C5:B8:D2:2D:45:08:F0:86:E8:E7:97:B3
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5c:83:c7:48:26:5a:96:bb:64:a2:65:cd:9a:0b:f0:b5:a6:
af:19:7f:cf:f6:0f:2f:07:df:7b:21:5c:ad:be:50:81:40:24:
f5:b2:f6:9b:41:8a:6b:c8:4f:9d:ef:bb:ed:e5:d1:14:c6:80:
41:8a:07:4e:f4:31:20:6b:75:9d:a4:26:c7:26:77:44:a3:b2:
8a:03:7f:24:fa:5e:c0:67:63:7a:10:97:98:ab:15:18:83:05:
60:5c:14:39:1a:2c:f7:30:70:d3:d3:3a:29:a4:df:d7:11:b2:
f1:37:cd:d7:17:50:77:7b:d2:d5:c2:97:b6:89:d4:34:1d:9a:
bd:5e:45:ed:0c:23:8e:f0:99:4b:81:2f:48:25:db:04:be:d2:
17:34:48:5e:6c:b8:42:f4:ab:b7:40:f6:66:66:d7:4e:25:d7:
8a:97:c8:14:d2:b5:f1:5a:ea:b8:0b:52:d6:d6:eb:dc:db:c5:
f6:71:a1:b3:3e:8f:26:fa:40:a3:13:45:85:14:eb:9a:4c:3f:
34:4b:11:4a:f5:d1:36:fd:b2:0b:46:93:f7:d5:be:05:b3:b5:
72:68:ac:3b:b7:27:6e:97:ec:fa:8e:0b:87:12:5b:de:7e:dc:
39:a3:75:a5:d1:88:62:61:ed:16:fc:07:c3:f0:1a:77:83:f0:
96:dc:1f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFWYBYVxJp81F5J15wiP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDg0MmRiMDgzN2RhZjMxMWEzMzRiNzIyMzE4ZTcwYjU4
OGIwMDkwHhcNMjUwNDIxMTYwMTM2WhcNMjUwNDIyMTYwMTM2WjAzMTEwLwYDVQQD
EyhkZGQyY2MyN2RlNWYxMDc5YzViOGQyMmQ0NTA4ZjA4NmU4ZTc5N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEurJ6QVvkk8BeVA/huM8Tljfeo+
EwQdKFXX9iJ19wcp+zxJqc70EzUWoI3PXXeCy7fgW0WmAne4msVw8FI/wI+UQzx7
qs1h2t0PTdcSbhAZ1s67plpMBlWeG8qYWePvxNmxilIPiOvJiY2AChwbnkY35HLV
95/Tenj5PXrWjjlHpicAzmAOWuV6KPqOxHzURSheWGnnNGaX3Niq2Wg5zoJIXv/S
UTpmb1UtNS4oh4UzKedy3ZoCFkhnyfdTfxVVPLN+qMMpmCjJ/NBlaiALJYYjcuH6
blVJRlQAqj5orboFf0bgcw7ImC4n1eid3p1x1ELKGotmj92oMjP90NJMqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3SzCfeXxB5xbjSLUUI8Ibo55ezMB8GA1UdIwQY
MBaAFDAIQtsIN9rzEaM0tyIxjnC1iLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMt
NTMxMmExMzNiOTRlLzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMtNTMxMmExMzNiOTRl
LzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVyDx0gm
Wpa7ZKJlzZoL8LWmrxl/z/YPLwffeyFcrb5QgUAk9bL2m0GKa8hPne+77eXRFMaA
QYoHTvQxIGt1naQmxyZ3RKOyigN/JPpewGdjehCXmKsVGIMFYFwUORos9zBw09M6
KaTf1xGy8TfN1xdQd3vS1cKXtonUNB2avV5F7QwjjvCZS4EvSCXbBL7SFzRIXmy4
QvSrt0D2ZmbXTiXXipfIFNK18VrquAtS1tbr3NvF9nGhsz6PJvpAoxNFhRTrmkw/
NEsRSvXRNv2yC0aT99W+BbO1cmisO7cnbpfs+o4LhxJb3n7cOaN1pdGIYmHtFvwH
w/Aad4PwltwfBA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:42 2025 by rpki-client