Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: 1l/7Jj3VLKqsBkbDNe6FgddP//HblpexXkH4JZtxQnQ=
Subject key identifier: 08:2E:67:4F:36:02:23:C9:49:35:1E:DF:73:6C:03:8A:A9:6F:50:2F
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 01964E230DBA33FB60E1019B9787BF16CF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 09E3
Signing time: Sat 19 Apr 2025 13:00:42 +0000
Manifest this update: Sat 19 Apr 2025 13:00:42 +0000
Manifest next update: Sun 20 Apr 2025 13:00:42 +0000
Files and hashes: 1: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: PERqB0qlJjPcVnjjOKm3Lu/leVixBn0Y/+M2IY0RfHI=)
2: SwDsrRhvfBw9F4XGJ9jQ9aLMXmM.roa (hash: 3d2l7JTHz6vbNzzhkSjJTHAcnYSSZFmoaOBcI2qRo/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:0d:ba:33:fb:60:e1:01:9b:97:87:bf:16:cf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Apr 19 13:00:42 2025 GMT
Not After : Apr 20 13:00:42 2025 GMT
Subject: CN=082e674f360223c949351edf736c038aa96f502f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:f6:03:99:6a:80:f6:90:1a:3f:1c:28:e8:
86:9c:fc:64:9d:c1:df:02:b3:de:87:b9:f6:88:46:
ad:7e:c1:83:c1:5b:a4:be:0b:db:ea:ad:94:d3:4c:
92:d1:7c:76:8b:73:85:21:97:ac:1f:e6:73:80:c2:
de:26:ea:61:ee:bc:70:ba:58:21:0b:e0:9b:a4:61:
f5:db:37:45:71:a1:ad:d3:c0:ca:f8:33:0e:27:48:
99:8e:e0:18:97:0c:cc:95:bc:ef:3e:ae:ed:fc:a4:
11:57:04:ab:82:01:4f:34:57:1c:38:ec:f1:4a:d1:
8c:5e:2b:ac:2f:0f:db:bd:49:6e:fe:3a:dc:5e:c2:
56:e3:42:9b:8c:34:d4:32:d8:66:f7:78:90:df:98:
d8:bb:78:1e:4c:44:ee:b9:b7:b1:0a:3f:f5:8f:b8:
11:5c:a3:1f:3b:6e:fd:84:b5:ee:75:f9:0a:14:99:
93:66:97:58:28:98:69:4c:35:a1:06:4c:c2:39:93:
d2:ae:32:0f:b4:ba:c1:51:23:53:cd:7e:24:7e:df:
a6:38:c6:67:0a:5c:5e:b7:fc:5d:9e:0c:10:5c:10:
42:26:56:bb:2b:2c:88:65:44:22:1e:87:3a:b2:64:
91:0d:47:7a:ed:be:f8:00:35:dd:52:3f:e9:be:74:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:67:4F:36:02:23:C9:49:35:1E:DF:73:6C:03:8A:A9:6F:50:2F
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:06:74:ac:a8:3a:a9:7e:b4:1d:07:b2:51:0b:9d:d4:f5:34:
9c:f1:79:95:ba:5c:e2:22:77:a8:53:5a:6b:47:fd:95:52:18:
c0:b9:4f:36:90:b7:33:4c:a2:4c:48:bd:8f:8c:ff:c7:66:1c:
0a:23:05:bd:ad:a4:49:df:41:18:90:11:99:14:0d:5f:03:4d:
82:ca:41:95:0c:45:0a:db:08:b4:c2:19:d0:08:68:56:41:01:
8c:65:93:85:eb:bd:7a:34:3d:96:20:a5:30:0d:18:43:53:df:
e7:3e:37:7c:e6:7b:d9:f6:e3:ab:ac:fc:00:78:73:6c:46:7b:
e2:38:e6:58:5d:76:0e:00:d5:63:c9:cb:2b:fb:36:b4:80:ea:
15:5b:fa:6a:26:5c:6a:80:fc:c3:ab:af:0f:34:08:52:b1:ca:
2e:52:34:88:cb:55:b6:12:2e:3a:68:5e:8d:a1:1d:66:05:dd:
de:6f:5a:3b:cf:5e:73:7c:9b:c8:06:c7:0a:20:93:5c:23:75:
c1:29:73:ca:33:0e:54:e5:6c:13:f5:5c:f6:5f:a6:7f:94:b3:
cb:c1:57:81:31:47:3f:e7:2f:f4:83:5f:fa:77:1c:70:d4:5a:
fa:fb:6d:bb:cf:f3:11:45:4b:4c:ac:b5:a0:95:85:b9:d1:85:
53:6b:ef:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOIw26M/tg4QGbl4e/Fs9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDM5NWM1N2RmZDMwYzBjZDJjMzBmNDIzMzhhZTRjMTRh
NzUwYTEwHhcNMjUwNDE5MTMwMDQyWhcNMjUwNDIwMTMwMDQyWjAzMTEwLwYDVQQD
EygwODJlNjc0ZjM2MDIyM2M5NDkzNTFlZGY3MzZjMDM4YWE5NmY1MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdb2A5lqgPaQGj8cKOiGnPxkncHf
ArPeh7n2iEatfsGDwVukvgvb6q2U00yS0Xx2i3OFIZesH+ZzgMLeJuph7rxwulgh
C+CbpGH12zdFcaGt08DK+DMOJ0iZjuAYlwzMlbzvPq7t/KQRVwSrggFPNFccOOzx
StGMXiusLw/bvUlu/jrcXsJW40KbjDTUMthm93iQ35jYu3geTETuubexCj/1j7gR
XKMfO279hLXudfkKFJmTZpdYKJhpTDWhBkzCOZPSrjIPtLrBUSNTzX4kft+mOMZn
Clxet/xdngwQXBBCJla7KyyIZUQiHoc6smSRDUd67b74ADXdUj/pvnSCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAguZ082AiPJSTUe33NsA4qpb1AvMB8GA1UdIwQY
MBaAFDLTlcV9/TDAzSww9CM4rkwUp1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRPVnhYMzlNTUROTEREMEl6aXVUQlNuVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNWI0OWItMDNhMy00MTAxLWEzZmUt
MWQ4ZTE5ZGY0YTYyLzEvTXRPVnhYMzlNTUROTEREMEl6aXVUQlNuVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zNWI0OWItMDNhMy00MTAxLWEzZmUtMWQ4ZTE5ZGY0YTYy
LzEvTXRPVnhYMzlNTUROTEREMEl6aXVUQlNuVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgZ0rKg6
qX60HQeyUQud1PU0nPF5lbpc4iJ3qFNaa0f9lVIYwLlPNpC3M0yiTEi9j4z/x2Yc
CiMFva2kSd9BGJARmRQNXwNNgspBlQxFCtsItMIZ0AhoVkEBjGWTheu9ejQ9liCl
MA0YQ1Pf5z43fOZ72fbjq6z8AHhzbEZ74jjmWF12DgDVY8nLK/s2tIDqFVv6aiZc
aoD8w6uvDzQIUrHKLlI0iMtVthIuOmhejaEdZgXd3m9aO89ec3ybyAbHCiCTXCN1
wSlzyjMOVOVsE/Vc9l+mf5Szy8FXgTFHP+cv9INf+ncccNRa+vttu8/zEUVLTKy1
oJWFudGFU2vvrw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:11:53 2025 by rpki-client