Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: FBc5Z6RwSwMVuEp9VBEOiVrK49apuPi6jONAfzu9ZNI=
Subject key identifier: 7D:EF:8F:67:24:F4:D9:69:ED:12:7F:54:E0:C7:22:8F:09:51:4B:42
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 01964D7DD942E7FEE0804B4B799691A95F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0B17
Signing time: Sat 19 Apr 2025 10:00:15 +0000
Manifest this update: Sat 19 Apr 2025 10:00:15 +0000
Manifest next update: Sun 20 Apr 2025 10:00:15 +0000
Files and hashes: 1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: vpg/B/o//hknHQ6A8tgKPFENxyjJuBhJlSZoRf9HPas=)
3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:d9:42:e7:fe:e0:80:4b:4b:79:96:91:a9:5f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Apr 19 10:00:15 2025 GMT
Not After : Apr 20 10:00:15 2025 GMT
Subject: CN=7def8f6724f4d969ed127f54e0c7228f09514b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:e7:63:81:9c:48:24:68:d8:3d:87:3d:75:
97:bc:90:79:32:45:e1:d4:4d:0b:38:ce:f2:f0:37:
52:26:65:f3:ec:6e:7b:6b:ea:75:07:c7:dc:5d:2e:
fd:c2:b8:8f:f9:47:4b:fc:e2:60:bb:c3:8a:87:1a:
f2:6d:ec:60:39:fb:f7:06:bd:0e:b0:05:66:b5:82:
07:e9:8f:5c:f4:c2:99:93:ae:99:fa:ef:84:63:68:
4d:b1:aa:d2:db:0f:02:b6:04:ea:82:bd:5c:c1:50:
97:15:b2:8f:95:b6:0f:1e:18:17:cf:eb:3a:3d:eb:
35:36:45:01:0a:a8:7f:0e:f3:4b:f7:42:a3:26:05:
ae:c2:d8:ca:c5:49:0e:60:e6:82:43:1f:a8:19:6f:
bc:b6:bc:ca:49:36:4b:bd:a2:e6:b7:95:29:16:1a:
8d:70:49:c7:f0:8c:25:7c:e2:22:01:2d:a9:ce:ed:
ca:bf:7b:c6:14:42:f0:c7:be:27:e8:52:8f:b9:e4:
11:57:d5:73:8b:a4:c8:c9:c5:8a:0e:5d:6c:e7:14:
a0:24:fd:ea:d8:bc:62:23:80:6e:0f:c4:11:d4:7e:
24:44:ff:42:a3:fa:51:da:23:70:4d:65:9e:bd:ac:
31:4d:92:41:03:b4:0e:b3:7c:e5:77:7b:1b:39:d7:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:8F:67:24:F4:D9:69:ED:12:7F:54:E0:C7:22:8F:09:51:4B:42
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fd:78:2e:42:cf:69:b3:a5:fb:d7:aa:fc:81:5f:a9:63:cd:
bf:be:a2:ed:a1:92:55:46:53:07:51:7b:1c:1b:c7:29:37:eb:
fb:6f:1a:d5:91:7f:91:46:cf:24:3b:37:d1:3f:99:98:2a:71:
9e:36:4c:6f:e0:8f:99:a6:a7:fa:c8:2e:82:f3:d5:d4:0d:a0:
c7:f0:2a:31:1d:33:f3:82:61:92:b1:23:42:b3:ec:08:70:e5:
b8:8c:02:14:19:5f:35:50:a9:4a:5f:7f:48:fe:e3:cd:e3:e1:
df:3a:e5:c0:e8:b9:a0:4f:50:66:50:8a:d7:04:1e:44:ac:90:
c3:b8:9c:3f:c2:57:c7:fa:ba:9e:32:02:e0:31:89:1d:3f:3c:
a4:13:0a:69:06:60:c2:30:fb:53:85:84:c1:d0:97:23:23:ed:
f8:e4:5a:4c:6c:6d:9c:ad:a1:36:c0:ca:6e:4e:07:07:a5:c8:
b8:b6:19:f5:c3:71:e4:8b:c3:ff:9c:47:1d:65:9b:49:09:c5:
01:70:57:dd:f0:88:37:93:81:51:7c:52:24:ef:b5:21:81:25:
dd:1f:87:74:02:93:d0:48:25:d9:1f:bb:56:95:c9:8b:c3:c4:
32:58:f4:b5:f4:20:fd:3a:e2:29:76:db:c4:33:31:2f:e9:da:
bb:eb:29:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfdlC5/7ggEtLeZaRqV9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj
NDQ5YWYwHhcNMjUwNDE5MTAwMDE1WhcNMjUwNDIwMTAwMDE1WjAzMTEwLwYDVQQD
Eyg3ZGVmOGY2NzI0ZjRkOTY5ZWQxMjdmNTRlMGM3MjI4ZjA5NTE0YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTTnY4GcSCRo2D2HPXWXvJB5MkXh
1E0LOM7y8DdSJmXz7G57a+p1B8fcXS79wriP+UdL/OJgu8OKhxrybexgOfv3Br0O
sAVmtYIH6Y9c9MKZk66Z+u+EY2hNsarS2w8CtgTqgr1cwVCXFbKPlbYPHhgXz+s6
Pes1NkUBCqh/DvNL90KjJgWuwtjKxUkOYOaCQx+oGW+8trzKSTZLvaLmt5UpFhqN
cEnH8IwlfOIiAS2pzu3Kv3vGFELwx74n6FKPueQRV9Vzi6TIycWKDl1s5xSgJP3q
2LxiI4BuD8QR1H4kRP9Co/pR2iNwTWWevawxTZJBA7QOs3zld3sbOdfvOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3vj2ck9Nlp7RJ/VODHIo8JUUtCMB8GA1UdIwQY
MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt
YTViMmQwOWUwNWNmLzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm
LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARv14LkLP
abOl+9eq/IFfqWPNv76i7aGSVUZTB1F7HBvHKTfr+28a1ZF/kUbPJDs30T+ZmCpx
njZMb+CPmaan+sgugvPV1A2gx/AqMR0z84JhkrEjQrPsCHDluIwCFBlfNVCpSl9/
SP7jzePh3zrlwOi5oE9QZlCK1wQeRKyQw7icP8JXx/q6njIC4DGJHT88pBMKaQZg
wjD7U4WEwdCXIyPt+ORaTGxtnK2hNsDKbk4HB6XIuLYZ9cNx5IvD/5xHHWWbSQnF
AXBX3fCIN5OBUXxSJO+1IYEl3R+HdAKT0Egl2R+7VpXJi8PEMlj0tfQg/TriKXbb
xDMxL+nau+sp7g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:07 2025 by rpki-client