Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: sJ7uWu4R6w5BY/QOI9XlsXrrOvP+z8av8HbiSR4tdJE=
Subject key identifier: D5:A8:70:23:32:9C:C8:54:8E:65:BC:4A:13:D4:B4:16:90:05:20:9B
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 01951247632F121D5E9462C4FB80A1B290D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 05:00:23 +0000
Manifest this update: Mon 17 Feb 2025 05:00:23 +0000
Manifest next update: Tue 18 Feb 2025 05:00:23 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: 0EEcTS1i1ul68AKpJ3SXW5V4/2Hy7o+1lpP8rXjqw4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:63:2f:12:1d:5e:94:62:c4:fb:80:a1:b2:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Feb 17 05:00:23 2025 GMT
Not After : Feb 18 05:00:23 2025 GMT
Subject: CN=d5a87023329cc8548e65bc4a13d4b4169005209b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:a9:fe:cb:a9:20:da:98:eb:e0:f4:f6:6a:
60:60:4c:45:7b:5c:ef:4e:ba:0e:7a:bf:77:34:e5:
af:fe:28:90:c9:51:45:0f:d2:ca:e9:1e:79:05:bb:
74:63:7e:9c:16:4c:19:c8:32:96:b8:b8:0e:9f:ad:
e1:11:e1:ba:a9:6a:2f:71:af:37:c4:ec:2f:70:cf:
17:69:6a:ae:08:37:c7:ae:6a:39:4e:08:1a:3e:8a:
91:73:95:d3:7c:e7:fd:c3:08:9e:59:bc:7f:0d:ad:
20:f8:52:76:ec:21:8c:1b:cb:3c:3e:d5:ee:33:55:
d1:c5:70:aa:91:43:d0:48:e9:7b:c8:4f:c3:22:54:
9b:b1:a1:6b:0a:d2:b2:1b:33:4f:24:68:07:2f:42:
70:96:9b:ae:d3:9a:a5:9c:57:38:85:8d:be:cd:2d:
9c:ec:6f:45:1c:56:57:52:e7:6b:ef:b5:e4:2c:36:
ca:dc:e4:46:a8:b4:28:aa:26:ea:51:1e:7e:09:c7:
79:c5:a0:aa:4b:8a:29:9b:cc:7c:98:42:ab:02:17:
b7:6c:a7:e0:ca:e2:ab:93:e2:5b:16:37:09:f3:bf:
ab:20:d0:47:dc:6a:90:11:c5:75:ae:c7:5e:55:69:
ab:83:f5:89:11:49:b6:be:01:d7:cf:3b:2e:2b:a2:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:70:23:32:9C:C8:54:8E:65:BC:4A:13:D4:B4:16:90:05:20:9B
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e8:0b:d2:49:87:31:55:df:8c:3f:d4:dc:a1:54:d2:90:8b:
fb:69:71:43:7c:05:9c:ff:82:94:4e:df:0c:43:89:b9:a6:f1:
4b:24:a4:3e:c5:f0:1c:e7:26:64:bb:d2:60:ab:a4:05:0f:94:
de:81:0a:c6:bf:10:55:ec:20:de:8a:4e:1e:2d:eb:38:4d:40:
18:56:1e:3d:e2:24:fe:db:82:68:f4:f1:78:75:1c:c5:f0:6b:
76:45:82:e3:24:b5:88:36:7d:d1:f5:ee:13:cc:5d:e3:f8:74:
b2:c7:e9:7b:5c:42:24:66:ab:56:41:ca:7c:e2:f8:a9:8b:d0:
f9:b7:e6:15:06:20:a6:8c:dc:82:34:3f:e0:42:b5:25:97:a5:
58:52:fc:06:93:c2:10:e1:0a:66:4f:83:84:93:2e:7b:d5:6f:
ae:3e:4b:9e:19:8f:86:44:62:04:c8:00:33:34:27:75:eb:c4:
34:06:bd:3b:e1:42:73:fb:a7:47:05:37:eb:29:f3:a2:e4:4b:
a7:3c:b0:f4:15:95:b4:69:c2:28:8a:8e:d5:4c:23:0d:80:d1:
ff:7a:e7:df:99:f7:64:e5:92:65:76:57:8d:43:0e:2b:d4:82:
c0:e8:df:b5:c7:f2:c1:ff:1d:c3:a6:e4:99:53:60:fe:8e:78:
d5:34:0f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR2MvEh1elGLE+4ChspDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz
NGVhZTUwHhcNMjUwMjE3MDUwMDIzWhcNMjUwMjE4MDUwMDIzWjAzMTEwLwYDVQQD
EyhkNWE4NzAyMzMyOWNjODU0OGU2NWJjNGExM2Q0YjQxNjkwMDUyMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywWp/supINqY6+D09mpgYExFe1zv
TroOer93NOWv/iiQyVFFD9LK6R55Bbt0Y36cFkwZyDKWuLgOn63hEeG6qWovca83
xOwvcM8XaWquCDfHrmo5TggaPoqRc5XTfOf9wwieWbx/Da0g+FJ27CGMG8s8PtXu
M1XRxXCqkUPQSOl7yE/DIlSbsaFrCtKyGzNPJGgHL0Jwlpuu05qlnFc4hY2+zS2c
7G9FHFZXUudr77XkLDbK3ORGqLQoqibqUR5+Ccd5xaCqS4opm8x8mEKrAhe3bKfg
yuKrk+JbFjcJ87+rINBH3GqQEcV1rsdeVWmrg/WJEUm2vgHXzzsuK6KKswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWocCMynMhUjmW8ShPUtBaQBSCbMB8GA1UdIwQY
MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt
YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm
LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiegL0kmH
MVXfjD/U3KFU0pCL+2lxQ3wFnP+ClE7fDEOJuabxSySkPsXwHOcmZLvSYKukBQ+U
3oEKxr8QVewg3opOHi3rOE1AGFYePeIk/tuCaPTxeHUcxfBrdkWC4yS1iDZ90fXu
E8xd4/h0ssfpe1xCJGarVkHKfOL4qYvQ+bfmFQYgpozcgjQ/4EK1JZelWFL8BpPC
EOEKZk+DhJMue9Vvrj5LnhmPhkRiBMgAMzQndevENAa9O+FCc/unRwU36ynzouRL
pzyw9BWVtGnCKIqO1UwjDYDR/3rn35n3ZOWSZXZXjUMOK9SCwOjftcfywf8dw6bk
mVNg/o541TQP1Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:21 2025 by rpki-client