Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier: DFNCVJfDPm5Qhp26E19TDl3bUkSOxe72jd6Jdb/7hmQ=
Subject key identifier: F2:3F:AF:D7:C6:81:D0:57:24:8A:78:21:26:A8:1D:EF:CA:40:F3:FE
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer: /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial: 0196591568E91DA082A758A0AF1C85F294DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number: 01E0
Signing time: Mon 21 Apr 2025 16:01:37 +0000
Manifest this update: Mon 21 Apr 2025 16:01:37 +0000
Manifest next update: Tue 22 Apr 2025 16:01:37 +0000
Files and hashes: 1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: F1pDotavcLbxP0PwE/iLb1rK/vT9FmhoRGu+iudJ9Pk=)
2: ZyPIESuaSWPIuQmq_le4sKOKISE.roa (hash: ZskQdIcp36rlr+2ORbgrG1PrwisAu9ueRcvHTkIY4YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:68:e9:1d:a0:82:a7:58:a0:af:1c:85:f2:94:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Validity
Not Before: Apr 21 16:01:37 2025 GMT
Not After : Apr 22 16:01:37 2025 GMT
Subject: CN=f23fafd7c681d057248a782126a81defca40f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:81:d0:cb:da:83:88:54:5d:2b:a6:a9:0c:
bb:e5:fc:ca:a8:b3:64:0a:8f:1b:e5:38:6b:a0:e7:
b0:e1:7c:a6:fb:5a:f8:38:36:0d:3d:54:3e:63:86:
29:31:07:7d:01:66:4f:90:dc:a6:8b:b8:55:0d:0e:
a2:ca:67:f4:94:37:c2:55:f5:db:53:f6:7b:3b:51:
18:ea:a6:7e:1e:03:9e:b1:20:3b:c6:b7:84:df:1f:
e2:75:f4:31:3d:95:4a:ca:c4:57:59:81:26:db:f6:
f5:9b:41:b3:d1:53:6a:a9:78:62:bd:b0:64:df:d2:
9f:60:5a:2a:cf:d0:69:93:34:e9:e6:b3:7a:a9:fc:
24:42:17:90:93:5a:1f:ae:29:a7:1e:b8:4c:02:2d:
10:6d:3b:9f:c4:b4:d6:48:aa:12:17:35:41:30:7b:
1e:9f:ab:10:e2:07:46:50:92:67:7e:b8:51:30:81:
b1:1d:cb:41:dd:05:95:55:6e:c5:0a:e1:4c:22:3f:
93:b4:cf:5d:b0:b6:92:e0:88:bf:12:a6:8b:ff:a4:
4f:e0:88:54:9c:65:66:af:ec:18:6e:b4:62:68:2b:
1f:50:34:cc:40:51:e5:89:22:82:0e:88:82:21:3f:
96:eb:e1:af:6a:c8:20:19:7f:24:33:5b:36:0e:e5:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:AF:D7:C6:81:D0:57:24:8A:78:21:26:A8:1D:EF:CA:40:F3:FE
X509v3 Authority Key Identifier:
keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:53:e3:00:b6:8b:53:8f:bb:eb:2a:06:bb:ef:f2:01:97:c9:
45:a6:42:30:a1:02:fd:fd:62:67:1a:27:fb:2d:47:a3:1d:5c:
a8:0e:80:95:63:38:0d:bc:c0:61:c2:19:ff:bf:23:33:67:76:
0b:2a:06:14:38:e2:b7:e2:58:47:4a:30:28:20:2a:db:4d:07:
29:f3:8f:44:51:29:95:38:19:3d:56:e0:15:a6:be:0c:5b:62:
ba:bb:50:01:80:33:01:29:75:09:6f:10:26:69:25:0f:1c:5a:
75:f4:eb:52:48:cb:fc:fb:2e:f9:4e:78:47:72:74:1e:38:06:
33:99:76:f4:e1:4f:5a:8f:d9:11:34:b9:f7:ee:af:83:7f:17:
d8:74:70:b2:42:65:ac:47:b8:70:1c:97:e6:41:36:d1:44:f1:
da:29:e6:2f:8b:f8:96:e7:cd:a2:46:71:ba:bd:34:c6:07:6b:
a9:eb:f5:f2:f8:ce:96:7f:f1:cf:9f:52:88:4d:b7:ce:8a:6c:
de:f9:94:b1:06:54:18:76:4c:73:37:e2:63:66:46:c0:5b:96:
89:91:58:f0:34:be:09:00:5d:56:4b:6f:54:72:53:9b:ad:09:
3d:2e:a0:f1:22:36:6a:29:8f:58:b3:ae:7f:81:89:45:16:3f:
3d:15:ca:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFWjpHaCCp1igrxyF8pTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOWRiYjQ2YTRlYjc2NDVkOTk0YTBlNGI5ODRmY2RhYzIw
NGE0ODQwHhcNMjUwNDIxMTYwMTM3WhcNMjUwNDIyMTYwMTM3WjAzMTEwLwYDVQQD
EyhmMjNmYWZkN2M2ODFkMDU3MjQ4YTc4MjEyNmE4MWRlZmNhNDBmM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m6B0Mvag4hUXSumqQy75fzKqLNk
Co8b5ThroOew4Xym+1r4ODYNPVQ+Y4YpMQd9AWZPkNymi7hVDQ6iymf0lDfCVfXb
U/Z7O1EY6qZ+HgOesSA7xreE3x/idfQxPZVKysRXWYEm2/b1m0Gz0VNqqXhivbBk
39KfYFoqz9BpkzTp5rN6qfwkQheQk1ofrimnHrhMAi0QbTufxLTWSKoSFzVBMHse
n6sQ4gdGUJJnfrhRMIGxHctB3QWVVW7FCuFMIj+TtM9dsLaS4Ii/EqaL/6RP4IhU
nGVmr+wYbrRiaCsfUDTMQFHliSKCDoiCIT+W6+GvasggGX8kM1s2DuW6IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPI/r9fGgdBXJIp4ISaoHe/KQPP+MB8GA1UdIwQY
MBaAFDKdu0ak63ZF2ZSg5LmE/NrCBKSEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXAyN1JxVHJka1habEtEa3VZVDgyc0lFcElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMTcxYmUtOTY1My00MWQ4LWEzNDQt
ZmVjMTVhYjg0MTM1LzEvTXAyN1JxVHJka1habEtEa3VZVDgyc0lFcElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMTcxYmUtOTY1My00MWQ4LWEzNDQtZmVjMTVhYjg0MTM1
LzEvTXAyN1JxVHJka1habEtEa3VZVDgyc0lFcElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVPjALaL
U4+76yoGu+/yAZfJRaZCMKEC/f1iZxon+y1Hox1cqA6AlWM4DbzAYcIZ/78jM2d2
CyoGFDjit+JYR0owKCAq200HKfOPRFEplTgZPVbgFaa+DFtiurtQAYAzASl1CW8Q
JmklDxxadfTrUkjL/Psu+U54R3J0HjgGM5l29OFPWo/ZETS59+6vg38X2HRwskJl
rEe4cByX5kE20UTx2inmL4v4lufNokZxur00xgdrqev18vjOln/xz59SiE23zops
3vmUsQZUGHZMczfiY2ZGwFuWiZFY8DS+CQBdVktvVHJTm60JPS6g8SI2aimPWLOu
f4GJRRY/PRXKfw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:36 2025 by rpki-client