Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: 47C3abNYOvros0bLXLajXiEFQ+8jzDR1O6Di7hbu1jU=
Subject key identifier: 77:CC:21:60:15:0A:D9:96:B3:21:23:D9:68:6A:52:02:A3:91:E6:36
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 0196594B34ED218613E46C0A94EA0F6E539B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 17:00:22 +0000
Manifest this update: Mon 21 Apr 2025 17:00:22 +0000
Manifest next update: Tue 22 Apr 2025 17:00:22 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: 7J87M5YuACA/yVeIR98/6ZdfO1DAH0fYSl6U3149aww=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:34:ed:21:86:13:e4:6c:0a:94:ea:0f:6e:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Apr 21 17:00:22 2025 GMT
Not After : Apr 22 17:00:22 2025 GMT
Subject: CN=77cc2160150ad996b32123d9686a5202a391e636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:37:a6:56:72:1d:28:b3:4b:bb:6b:4c:69:
aa:d3:10:29:83:38:47:15:08:ee:59:76:5c:49:32:
fd:47:c8:12:30:10:8d:be:ff:fe:3c:e2:5a:55:93:
98:27:ce:ae:5b:65:a4:30:8a:0f:84:8a:10:53:b5:
64:d4:99:6d:6b:c4:8a:68:16:d2:8e:25:4f:05:8b:
82:27:d2:32:2f:f2:04:e8:57:9b:5f:30:ae:e8:37:
d6:bc:e8:15:10:a9:c3:2e:a6:37:a3:a2:e9:fb:1a:
a3:68:51:32:7c:da:c6:e9:79:01:d2:cc:97:81:a7:
b3:50:dd:e6:f9:20:06:43:8f:d7:42:88:ad:b7:4d:
20:c8:e9:a6:bd:50:55:8e:e1:44:8f:ea:de:d4:da:
b9:41:6b:00:66:c0:d1:a2:ab:99:88:9c:94:ba:43:
7a:c7:bc:4a:db:be:65:ff:64:56:ad:f8:93:5d:ee:
71:62:99:15:5d:35:4d:d2:77:8e:db:60:48:6e:74:
08:23:ff:ce:34:12:3e:2e:e2:e6:62:61:63:45:a9:
68:38:86:db:d9:e0:e0:0b:4e:67:9d:be:18:44:65:
d1:d3:b2:7d:da:51:72:31:2b:19:4f:7b:58:7e:d0:
ef:1e:18:75:43:9b:85:0f:55:20:81:ac:32:f7:1e:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:21:60:15:0A:D9:96:B3:21:23:D9:68:6A:52:02:A3:91:E6:36
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b6:fc:03:be:0e:04:c0:38:dc:31:44:2d:70:f0:70:4e:24:
15:df:04:28:8c:44:f7:65:61:1c:68:df:40:49:cb:11:4d:41:
1d:cc:f3:a3:c1:a2:e5:20:2a:3a:52:06:7a:b0:ae:58:d1:18:
90:e6:50:8c:7f:28:f4:ac:b5:d1:f5:a3:dd:25:30:95:22:2d:
ad:f7:2d:5b:cc:12:92:e3:d4:b4:bb:99:32:9e:2f:d1:20:44:
7e:15:7c:c8:aa:92:ea:91:77:5c:e6:37:78:3e:30:74:ee:f8:
68:7a:7d:ab:26:d3:34:6f:af:e7:88:68:02:10:44:1b:66:4f:
53:88:0e:ad:5f:68:4b:03:9d:c0:80:3c:64:c0:91:85:dd:f8:
bc:7c:25:6e:1a:a5:04:1d:95:7a:e8:63:b2:6e:2d:75:17:d1:
99:62:ce:bf:d0:86:0b:ac:ea:87:0a:fc:fc:b5:89:14:a4:62:
0f:89:69:e9:ec:ad:e5:4c:40:82:cb:13:48:a2:90:36:8b:4f:
5d:7f:f7:97:e7:b8:64:c8:6f:d9:f6:8e:52:2f:d6:bc:d7:1e:
4e:8f:a2:d8:f0:91:24:65:f2:4c:be:65:5b:a8:8a:c0:f8:fc:
b5:6c:1f:c4:f7:13:f9:88:9b:6d:33:09:51:85:a2:71:7f:04:
b3:c9:5d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZSzTtIYYT5GwKlOoPblObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1M2Y4Y2E2ODQwMzdjNTQzM2E0YjQ0MDYyMTFiMzFkNzZl
MTNlYWIwHhcNMjUwNDIxMTcwMDIyWhcNMjUwNDIyMTcwMDIyWjAzMTEwLwYDVQQD
Eyg3N2NjMjE2MDE1MGFkOTk2YjMyMTIzZDk2ODZhNTIwMmEzOTFlNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ43plZyHSizS7trTGmq0xApgzhH
FQjuWXZcSTL9R8gSMBCNvv/+POJaVZOYJ86uW2WkMIoPhIoQU7Vk1Jlta8SKaBbS
jiVPBYuCJ9IyL/IE6FebXzCu6DfWvOgVEKnDLqY3o6Lp+xqjaFEyfNrG6XkB0syX
gaezUN3m+SAGQ4/XQoitt00gyOmmvVBVjuFEj+re1Nq5QWsAZsDRoquZiJyUukN6
x7xK275l/2RWrfiTXe5xYpkVXTVN0neO22BIbnQII//ONBI+LuLmYmFjRaloOIbb
2eDgC05nnb4YRGXR07J92lFyMSsZT3tYftDvHhh1Q5uFD1Uggawy9x6kDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfMIWAVCtmWsyEj2WhqUgKjkeY2MB8GA1UdIwQY
MBaAFEU/jKaEA3xUM6S0QGIRsx124T6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlQtTXBvUURmRlF6cExSQVloR3pIWGJoUHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yZGMyMDgtNjkxMi00YTEyLThkYmIt
ZGJiNjlmMjg0ZjIzLzEvUlQtTXBvUURmRlF6cExSQVloR3pIWGJoUHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yZGMyMDgtNjkxMi00YTEyLThkYmItZGJiNjlmMjg0ZjIz
LzEvUlQtTXBvUURmRlF6cExSQVloR3pIWGJoUHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7b8A74O
BMA43DFELXDwcE4kFd8EKIxE92VhHGjfQEnLEU1BHczzo8Gi5SAqOlIGerCuWNEY
kOZQjH8o9Ky10fWj3SUwlSItrfctW8wSkuPUtLuZMp4v0SBEfhV8yKqS6pF3XOY3
eD4wdO74aHp9qybTNG+v54hoAhBEG2ZPU4gOrV9oSwOdwIA8ZMCRhd34vHwlbhql
BB2Veuhjsm4tdRfRmWLOv9CGC6zqhwr8/LWJFKRiD4lp6eyt5UxAgssTSKKQNotP
XX/3l+e4ZMhv2faOUi/WvNceTo+i2PCRJGXyTL5lW6iKwPj8tWwfxPcT+YibbTMJ
UYWicX8Es8lduA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:51 2025 by rpki-client