Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
File: MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft (raw, json)
Hash identifier: HIzncHLh8wVOofDE97pKdCxMCTXNqbI1SrgzX9GJUvA=
Subject key identifier: ED:91:A7:7B:86:F7:AC:7F:FB:40:22:2A:CC:A3:06:B8:49:8F:5E:82
Authority key identifier: 30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
Certificate issuer: /CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Certificate serial: 01964EC7B6B48511F68F25EAF87352E27B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
Manifest number: 02E5
Signing time: Sat 19 Apr 2025 16:00:33 +0000
Manifest this update: Sat 19 Apr 2025 16:00:33 +0000
Manifest next update: Sun 20 Apr 2025 16:00:33 +0000
Files and hashes: 1: MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl (hash: hBgH5DPJcYUUjud52P1D5Z9L7Q4S0KceLx66PlXMIXw=)
2: _Op4bSAp0gWDx4UfTJUc97va5qw.roa (hash: tJEKSC7Hrru5HEiTFvhI8vLaAa+FAs4tPlo2cnkUBAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:b6:b4:85:11:f6:8f:25:ea:f8:73:52:e2:7b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Validity
Not Before: Apr 19 16:00:33 2025 GMT
Not After : Apr 20 16:00:33 2025 GMT
Subject: CN=ed91a77b86f7ac7ffb40222acca306b8498f5e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:1a:7e:cf:ae:1d:fe:dc:2f:d0:82:b7:50:
cb:4f:2a:d1:8c:65:13:fd:37:b7:a7:39:b0:58:e6:
c8:2f:1e:c0:c1:ac:a2:4e:45:80:a7:5f:69:6c:43:
48:0b:9c:34:3f:17:7b:e1:f8:b2:75:9d:2e:b4:4a:
86:4f:63:fc:2f:c8:f8:3b:9a:20:45:88:ad:a1:a8:
25:e3:fc:85:a3:e8:b9:db:ba:29:74:6a:48:35:4c:
96:c3:f7:ed:6b:ae:ac:13:d6:a4:fb:36:14:61:13:
1d:58:2b:7c:63:4e:cc:0f:47:73:9f:96:70:af:37:
57:80:94:ab:82:ee:db:3f:f9:8b:bd:4b:e3:89:ac:
42:f9:28:91:09:eb:60:d7:bf:bc:6e:63:6e:c0:1c:
90:ab:9e:53:0c:b7:ee:ad:d3:63:35:ad:e4:3c:97:
98:e9:a1:dd:d2:de:78:5d:42:7a:5a:5f:dc:2c:7e:
de:8d:77:ac:13:9a:67:fb:e7:ea:6a:58:84:a9:47:
ae:80:26:4a:d8:ba:44:ae:bb:ab:35:e0:99:87:84:
d0:35:d5:ce:f1:8e:88:64:dd:d1:33:ad:ee:db:a5:
3e:58:e8:86:10:8f:4e:86:20:eb:a6:c3:b9:a5:ed:
2a:0f:2a:42:e3:34:96:da:30:05:9f:3b:6a:bc:0e:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:A7:7B:86:F7:AC:7F:FB:40:22:2A:CC:A3:06:B8:49:8F:5E:82
X509v3 Authority Key Identifier:
keyid:30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5c:32:ad:49:e5:16:82:bb:a0:bc:3e:45:9b:75:f4:8e:37:
88:7f:8f:48:58:c2:97:d9:29:a5:4c:8f:d0:cc:3f:e7:96:bc:
2f:7d:97:ab:e6:e9:43:d6:95:a4:0b:a3:14:9e:09:00:f9:5c:
78:e5:b5:4c:33:b6:62:16:ae:ea:54:96:ba:9d:39:e5:96:d8:
04:00:19:13:5f:4f:65:60:75:80:d4:ac:a6:81:1c:c1:6b:ca:
83:25:af:fa:66:f3:d2:04:10:25:40:5f:dd:55:38:2d:47:6d:
83:4d:89:6d:c7:7e:75:69:46:5d:d5:26:83:ff:a0:4a:b9:4e:
97:2a:2f:a3:4e:88:02:f3:5b:49:8d:00:af:41:cf:cc:73:9e:
e3:d9:ba:1e:4c:d4:bb:5c:aa:28:8a:1c:e5:27:f0:e3:a2:fd:
08:1d:a9:e5:b7:dd:0b:8c:24:5b:ec:a5:bc:e6:85:32:c2:d0:
75:85:ba:1d:53:e5:98:49:7c:7f:2a:5c:52:0a:e1:e9:38:4a:
5a:36:be:75:16:21:ad:9b:ce:e0:83:69:34:76:fa:c2:85:6a:
78:f0:79:11:da:a9:07:e2:b4:c8:1b:6f:52:56:72:09:15:6e:
e6:1c:cc:ad:63:36:a1:ac:d3:b4:c8:9e:c3:b8:84:5b:ba:fa:
41:fe:64:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx7a0hRH2jyXq+HNS4nsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzVkODdjMTk3YTBmYTA0ZGE4ZjIyNTM1OGQzZmFmNzg2
ZjdkMGIwHhcNMjUwNDE5MTYwMDMzWhcNMjUwNDIwMTYwMDMzWjAzMTEwLwYDVQQD
EyhlZDkxYTc3Yjg2ZjdhYzdmZmI0MDIyMmFjY2EzMDZiODQ5OGY1ZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLoafs+uHf7cL9CCt1DLTyrRjGUT
/Te3pzmwWObILx7AwayiTkWAp19pbENIC5w0Pxd74fiydZ0utEqGT2P8L8j4O5og
RYitoagl4/yFo+i527opdGpINUyWw/fta66sE9ak+zYUYRMdWCt8Y07MD0dzn5Zw
rzdXgJSrgu7bP/mLvUvjiaxC+SiRCetg17+8bmNuwByQq55TDLfurdNjNa3kPJeY
6aHd0t54XUJ6Wl/cLH7ejXesE5pn++fqaliEqUeugCZK2LpErrurNeCZh4TQNdXO
8Y6IZN3RM63u26U+WOiGEI9OhiDrpsO5pe0qDypC4zSW2jAFnztqvA7wsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2Rp3uG96x/+0AiKsyjBrhJj16CMB8GA1UdIwQY
MBaAFDB12HwZeg+gTajyJTWNP694b30LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEt
ODk5ODFjOGY5ZTdiLzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEtODk5ODFjOGY5ZTdi
LzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVwyrUnl
FoK7oLw+RZt19I43iH+PSFjCl9kppUyP0Mw/55a8L32Xq+bpQ9aVpAujFJ4JAPlc
eOW1TDO2Yhau6lSWup055ZbYBAAZE19PZWB1gNSspoEcwWvKgyWv+mbz0gQQJUBf
3VU4LUdtg02Jbcd+dWlGXdUmg/+gSrlOlyovo06IAvNbSY0Ar0HPzHOe49m6HkzU
u1yqKIoc5Sfw46L9CB2p5bfdC4wkW+ylvOaFMsLQdYW6HVPlmEl8fypcUgrh6ThK
Wja+dRYhrZvO4INpNHb6woVqePB5EdqpB+K0yBtvUlZyCRVu5hzMrWM2oazTtMie
w7iEW7r6Qf5kBA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:23 2025 by rpki-client