Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: WPrjnwtQGHO4gMM+d7yNV8Lq+GQQKqh9yEtdddFwCk0=
Subject key identifier: 02:78:FE:D3:57:6A:E7:40:FF:A3:66:FB:9D:89:23:A5:60:32:B9:FD
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 0195903CABCC2EE87DC81D5319D311FAAAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 16:00:49 +0000
Manifest this update: Thu 13 Mar 2025 16:00:49 +0000
Manifest next update: Fri 14 Mar 2025 16:00:49 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: kkBnl0pD2bJPnLYtGFVvnr7J8pTpE3joMB+FKJTaHVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:ab:cc:2e:e8:7d:c8:1d:53:19:d3:11:fa:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Mar 13 16:00:49 2025 GMT
Not After : Mar 14 16:00:49 2025 GMT
Subject: CN=0278fed3576ae740ffa366fb9d8923a56032b9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b6:04:80:ea:80:0c:b6:55:02:c9:7f:9f:24:
51:bc:07:b6:25:5b:5e:37:7d:0d:85:5a:e9:c7:3e:
ba:31:0d:79:43:c6:5f:85:8a:ef:be:b9:44:1d:b3:
f2:e8:b2:83:1f:10:eb:74:8b:2e:d1:c9:94:6e:41:
fa:f0:b0:32:36:5b:5c:cc:8b:79:0e:66:53:bf:72:
cd:72:33:01:81:94:a0:8d:ea:1e:47:b1:13:c6:cd:
cd:28:df:43:f5:da:2f:d9:e0:8a:b7:9c:7a:d8:ca:
4e:da:48:93:55:3b:60:2b:fa:b0:18:48:31:44:19:
db:1f:78:6b:55:9a:22:68:9f:12:4e:85:2f:bb:47:
50:54:f4:bd:44:7b:96:b4:9c:91:b0:37:09:4f:2c:
ff:19:30:21:38:df:a6:b8:6b:cb:48:b8:23:b7:f5:
09:50:48:91:ca:83:82:51:d5:3f:58:c8:f9:1b:f5:
05:4a:67:6c:8e:d1:20:33:6b:7b:cb:13:34:9f:cb:
77:d8:5d:7b:33:2e:71:5a:65:0f:e9:46:e4:e1:57:
30:b3:01:98:0e:f4:6f:cc:e0:e4:ce:f5:30:5e:c6:
ae:87:23:12:93:07:dd:2e:d7:17:16:e8:cb:91:51:
8d:85:d2:94:05:66:dd:2c:70:5f:58:97:24:84:6a:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:78:FE:D3:57:6A:E7:40:FF:A3:66:FB:9D:89:23:A5:60:32:B9:FD
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:2e:2d:7d:0e:ca:94:b5:e1:28:0f:86:16:7a:22:59:b3:
b2:04:c8:40:60:51:a5:f3:7e:2a:fc:6d:55:15:75:76:91:b2:
8f:3f:bd:a6:2b:f5:d3:0f:c8:2a:d5:a0:34:bd:fc:5d:a6:4d:
98:55:e5:13:97:a0:b9:b3:ef:01:92:94:ef:0d:ea:97:de:9b:
e5:56:5a:89:3f:86:79:95:1c:53:2c:05:05:7d:e1:68:50:05:
ba:eb:09:31:3f:6f:39:83:18:16:ce:87:6a:06:f9:8e:75:db:
86:a9:59:a6:02:8d:de:b1:b0:26:7a:d5:23:6b:cb:e6:ee:c2:
ff:8e:61:be:de:93:1c:61:fd:65:dc:8a:2e:40:61:68:c8:61:
3a:66:bc:4c:40:46:47:be:9a:54:d3:3e:81:40:8d:fd:00:6c:
18:63:4f:87:26:9e:68:0f:0c:a4:7a:74:e1:58:6b:56:ca:4c:
1a:cd:a8:bc:2f:d3:29:dc:2b:96:dd:b0:d5:13:d3:b7:19:cc:
32:f8:8c:22:19:82:02:c7:b4:a1:30:64:98:a1:e1:be:e7:b2:
9c:63:dc:06:c6:10:dc:93:b6:f5:bb:09:6c:9f:d4:6b:0a:14:
8b:95:fd:8d:4a:ea:88:5b:ff:59:c7:d5:72:6b:91:9e:9c:81:
be:17:d9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPKvMLuh9yB1TGdMR+qqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2ZiNWJhMzFkNmM0MGM0ZjJlMjMyMzNlNjA3NWVlYWYy
ZDUzMDcwHhcNMjUwMzEzMTYwMDQ5WhcNMjUwMzE0MTYwMDQ5WjAzMTEwLwYDVQQD
EygwMjc4ZmVkMzU3NmFlNzQwZmZhMzY2ZmI5ZDg5MjNhNTYwMzJiOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rYEgOqADLZVAsl/nyRRvAe2JVte
N30NhVrpxz66MQ15Q8ZfhYrvvrlEHbPy6LKDHxDrdIsu0cmUbkH68LAyNltczIt5
DmZTv3LNcjMBgZSgjeoeR7ETxs3NKN9D9dov2eCKt5x62MpO2kiTVTtgK/qwGEgx
RBnbH3hrVZoiaJ8SToUvu0dQVPS9RHuWtJyRsDcJTyz/GTAhON+muGvLSLgjt/UJ
UEiRyoOCUdU/WMj5G/UFSmdsjtEgM2t7yxM0n8t32F17My5xWmUP6Ubk4VcwswGY
DvRvzODkzvUwXsauhyMSkwfdLtcXFujLkVGNhdKUBWbdLHBfWJckhGrxQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ4/tNXaudA/6Nm+52JI6VgMrn9MB8GA1UdIwQY
MBaAFDB/tbox1sQMTy4jIz5gde6vLVMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQt
YWUzZjA1MmZmYWFkLzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQtYWUzZjA1MmZmYWFk
LzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchQuLX0O
ypS14SgPhhZ6IlmzsgTIQGBRpfN+KvxtVRV1dpGyjz+9piv10w/IKtWgNL38XaZN
mFXlE5egubPvAZKU7w3ql96b5VZaiT+GeZUcUywFBX3haFAFuusJMT9vOYMYFs6H
agb5jnXbhqlZpgKN3rGwJnrVI2vL5u7C/45hvt6THGH9ZdyKLkBhaMhhOma8TEBG
R76aVNM+gUCN/QBsGGNPhyaeaA8MpHp04VhrVspMGs2ovC/TKdwrlt2w1RPTtxnM
MviMIhmCAse0oTBkmKHhvueynGPcBsYQ3JO29bsJbJ/UawoUi5X9jUrqiFv/WcfV
cmuRnpyBvhfZ6g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:43 2025 by rpki-client