Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier: kyRj8nK92K2t20w+67PmELEkGNw/KcH3ONj4FJ2gA6U=
Subject key identifier: B8:55:47:A8:57:2D:03:E1:36:67:60:CF:51:F9:E4:CF:89:62:20:9A
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial: 0196564A4C91DDDA11400DAA8181B5C70C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number: 0101
Signing time: Mon 21 Apr 2025 03:00:31 +0000
Manifest this update: Mon 21 Apr 2025 03:00:31 +0000
Manifest next update: Tue 22 Apr 2025 03:00:31 +0000
Files and hashes: 1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: XP+o7rnxK8QyoqHYyVOYMtdUaYdmuhKo72l1KsYJnOE=)
2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:4c:91:dd:da:11:40:0d:aa:81:81:b5:c7:0c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Validity
Not Before: Apr 21 03:00:31 2025 GMT
Not After : Apr 22 03:00:31 2025 GMT
Subject: CN=b85547a8572d03e1366760cf51f9e4cf8962209a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:76:25:34:73:a0:6f:98:42:8b:83:c2:a8:
c9:d3:9c:96:72:00:a8:8f:35:40:08:91:cb:ec:f6:
e9:ad:59:73:f0:b0:97:f0:5c:cd:73:3f:b3:9b:15:
6b:71:54:3a:c4:fb:ac:1a:b1:77:36:8b:5c:90:78:
ef:40:bf:ee:32:c7:03:86:55:5e:0d:0d:4a:b3:91:
f4:32:22:40:ac:b1:23:9c:c3:6c:92:9e:e8:6c:d7:
55:dd:38:87:99:cc:bd:44:4b:8d:5d:50:9a:47:49:
df:52:26:35:b7:4c:fd:c5:f9:50:8e:a5:83:6b:48:
47:30:12:35:8d:96:3d:ee:d1:c4:b0:fe:53:60:d7:
0a:ae:4f:50:81:7c:24:a5:03:b8:2d:c1:17:38:63:
bc:13:f4:60:86:45:a9:9c:15:88:d4:2c:3c:ec:15:
ad:25:1f:fb:8c:2e:eb:9b:06:bd:26:08:32:1e:f8:
9f:43:d4:1f:69:06:b3:ef:ba:b9:c2:df:02:dc:71:
d1:24:d2:35:70:49:19:ac:b5:33:8b:26:f3:9d:cf:
cc:10:dc:77:29:58:e8:21:43:7a:15:00:bf:26:4c:
2f:19:9e:47:48:fd:d1:cc:40:49:f2:c5:1a:85:22:
5b:80:b2:13:c1:aa:94:74:3b:fb:76:50:5f:5c:bc:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:47:A8:57:2D:03:E1:36:67:60:CF:51:F9:E4:CF:89:62:20:9A
X509v3 Authority Key Identifier:
keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:34:6a:d9:fa:1e:c9:eb:c0:9f:01:dc:4e:33:c8:03:a7:17:
ac:18:ba:14:db:9b:43:61:21:ae:3a:b8:71:94:9e:77:8a:6d:
8c:26:5a:52:c1:f6:c7:00:cc:e0:f0:94:f4:28:35:8e:fa:6c:
75:80:9f:8c:49:c9:9c:5b:5f:ac:d6:8b:86:95:e5:33:51:2f:
19:bd:da:37:a8:0d:f2:8d:67:93:e0:ab:64:32:4d:f4:e4:2b:
fd:bf:f4:2b:d5:43:10:4f:28:af:2d:c0:28:39:ea:f9:b9:84:
f7:1b:69:16:aa:a1:97:ec:3c:f2:92:60:3e:86:c2:99:3b:15:
4d:d4:8b:0c:d4:8c:a8:15:de:a7:ca:db:6e:75:ee:7a:29:0a:
2f:ac:d3:cd:3a:a0:0e:89:72:0b:f3:a7:dc:d4:cd:78:5f:6a:
7b:85:ba:4a:a3:57:01:a4:8b:d7:a1:c6:84:bc:45:a7:96:c0:
e6:4e:91:da:60:ee:b8:51:44:61:62:41:61:59:3b:e4:3a:89:
62:d2:a5:11:ff:c8:e3:cd:0f:34:0c:0a:ce:a2:98:aa:4f:74:
48:a2:01:69:9b:aa:f3:1c:f1:55:62:c8:6b:c3:9b:87:c8:b9:
05:0c:7b:2f:ad:6f:86:3c:1c:80:7f:eb:8b:3a:99:7a:02:6c:
fc:84:1f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSkyR3doRQA2qgYG1xwwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMDYzYmQ5NWI4OTFiZjMzMTE1NTdjODRkZmU4N2VjZjQy
YjE5MDYwHhcNMjUwNDIxMDMwMDMxWhcNMjUwNDIyMDMwMDMxWjAzMTEwLwYDVQQD
EyhiODU1NDdhODU3MmQwM2UxMzY2NzYwY2Y1MWY5ZTRjZjg5NjIyMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6N2JTRzoG+YQouDwqjJ05yWcgCo
jzVACJHL7PbprVlz8LCX8FzNcz+zmxVrcVQ6xPusGrF3NotckHjvQL/uMscDhlVe
DQ1Ks5H0MiJArLEjnMNskp7obNdV3TiHmcy9REuNXVCaR0nfUiY1t0z9xflQjqWD
a0hHMBI1jZY97tHEsP5TYNcKrk9QgXwkpQO4LcEXOGO8E/RghkWpnBWI1Cw87BWt
JR/7jC7rmwa9JggyHvifQ9QfaQaz77q5wt8C3HHRJNI1cEkZrLUziybznc/MENx3
KVjoIUN6FQC/JkwvGZ5HSP3RzEBJ8sUahSJbgLITwaqUdDv7dlBfXLy79QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhVR6hXLQPhNmdgz1H55M+JYiCaMB8GA1UdIwQY
MBaAFDMGO9lbiRvzMRVXyE3+h+z0KxkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQt
ZDk5YmE0NGRiNTk1LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQtZDk5YmE0NGRiNTk1
LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTRq2foe
yevAnwHcTjPIA6cXrBi6FNubQ2Ehrjq4cZSed4ptjCZaUsH2xwDM4PCU9Cg1jvps
dYCfjEnJnFtfrNaLhpXlM1EvGb3aN6gN8o1nk+CrZDJN9OQr/b/0K9VDEE8ory3A
KDnq+bmE9xtpFqqhl+w88pJgPobCmTsVTdSLDNSMqBXep8rbbnXueikKL6zTzTqg
DolyC/On3NTNeF9qe4W6SqNXAaSL16HGhLxFp5bA5k6R2mDuuFFEYWJBYVk75DqJ
YtKlEf/I480PNAwKzqKYqk90SKIBaZuq8xzxVWLIa8Obh8i5BQx7L61vhjwcgH/r
izqZegJs/IQfFw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:47 2025 by rpki-client