Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: nQ+g2rX40drHF4zk3gEDpY6Ivn0C1PU3DFl87YK86As=
Subject key identifier: 39:82:6A:AB:10:9C:0B:C0:63:8B:D5:9D:56:69:80:16:88:FC:D1:97
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 0196127CC4F8F792FF1950BA4FF47D014E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 23:01:28 +0000
Manifest this update: Mon 07 Apr 2025 23:01:28 +0000
Manifest next update: Tue 08 Apr 2025 23:01:28 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: PKbwQ16O13MgO57OzcKyN7o+6bHUAhfeLfwiF2rQkRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7c:c4:f8:f7:92:ff:19:50:ba:4f:f4:7d:01:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Apr 7 23:01:28 2025 GMT
Not After : Apr 8 23:01:28 2025 GMT
Subject: CN=39826aab109c0bc0638bd59d5669801688fcd197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:a3:12:52:39:ab:ec:04:2a:09:63:b3:bf:
28:a7:3c:2e:0d:4c:e3:b3:ff:6e:24:f8:43:83:4b:
a4:e1:da:e6:1e:cc:1a:f4:44:fb:22:f7:d4:6f:87:
8a:78:95:ea:3a:6a:53:23:1b:68:7e:ce:5d:d1:d7:
d4:42:da:8c:6b:fc:6a:2a:20:52:7e:54:72:93:34:
41:16:b8:90:45:ed:fa:a8:fb:f4:65:ae:14:85:13:
9f:db:c0:1f:11:d3:50:55:37:d1:35:a5:70:ef:9f:
07:dc:83:79:0c:e4:8f:ea:50:bf:aa:df:66:17:5d:
e4:69:76:b7:60:c1:36:ed:93:61:3b:33:86:00:2d:
8f:af:a4:4c:b9:35:ac:24:47:64:26:cb:f0:03:65:
63:80:67:f8:64:d8:1d:7f:e8:4e:78:ae:7c:c0:50:
a3:ea:5c:56:df:5c:15:27:fd:cc:56:90:55:b1:d2:
3b:15:a9:8f:bb:d9:94:db:b3:13:ed:76:eb:e9:ed:
53:29:a0:dc:bb:8a:64:d5:1b:6c:59:86:57:94:f9:
20:69:38:9b:3f:61:ec:f0:e5:d6:ce:0f:85:8e:ef:
b1:84:d8:7d:da:4f:51:dc:c1:7a:88:01:5f:16:82:
f4:85:cc:7b:42:fd:11:d9:f8:cc:a0:17:bb:7d:e7:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:6A:AB:10:9C:0B:C0:63:8B:D5:9D:56:69:80:16:88:FC:D1:97
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0b:c4:78:fb:bc:05:99:b7:5f:dd:8e:46:cc:4b:d7:81:82:
a1:16:28:25:50:58:0c:7c:bd:91:24:0f:a1:7a:af:85:f0:47:
f0:99:14:35:33:c3:36:26:3d:fd:97:a1:57:01:de:2c:79:c0:
aa:cc:af:37:fc:cc:5f:a0:a7:ab:8b:5e:a2:17:e3:bd:4b:9f:
42:b3:93:68:8a:69:e2:6e:b9:72:0b:df:b2:8a:1b:6b:76:e9:
5d:af:d8:20:00:b5:94:ca:0c:8c:49:2c:9f:63:bc:5c:4a:1f:
3d:54:e0:ea:56:fe:ba:01:80:a6:6e:e7:76:58:b9:f8:87:16:
fb:53:e8:aa:00:53:f8:82:48:5f:d2:cb:77:e9:a9:90:f9:42:
e2:12:d8:d4:e5:19:5f:26:57:d3:67:51:bc:29:c8:2e:0a:71:
06:f6:9a:b3:f0:28:4f:f6:df:82:8d:ce:43:ef:83:0f:30:b8:
94:7b:68:e8:f7:0d:07:ba:5f:2c:2d:04:f0:24:85:0e:0c:08:
a9:b5:18:ec:fe:0b:70:b1:05:5d:25:17:4d:d4:9d:6d:9e:94:
7d:89:44:41:56:a7:21:75:1b:e4:a2:0e:4c:2a:6e:ef:47:ed:
af:bb:f7:4f:71:80:95:75:43:3d:ea:d1:5c:68:8e:8e:85:6e:
fe:c0:d8:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSfMT495L/GVC6T/R9AU4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4
MzRlMGYwHhcNMjUwNDA3MjMwMTI4WhcNMjUwNDA4MjMwMTI4WjAzMTEwLwYDVQQD
EygzOTgyNmFhYjEwOWMwYmMwNjM4YmQ1OWQ1NjY5ODAxNjg4ZmNkMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ujElI5q+wEKgljs78opzwuDUzj
s/9uJPhDg0uk4drmHswa9ET7IvfUb4eKeJXqOmpTIxtofs5d0dfUQtqMa/xqKiBS
flRykzRBFriQRe36qPv0Za4UhROf28AfEdNQVTfRNaVw758H3IN5DOSP6lC/qt9m
F13kaXa3YME27ZNhOzOGAC2Pr6RMuTWsJEdkJsvwA2VjgGf4ZNgdf+hOeK58wFCj
6lxW31wVJ/3MVpBVsdI7FamPu9mU27MT7Xbr6e1TKaDcu4pk1RtsWYZXlPkgaTib
P2Hs8OXWzg+Fju+xhNh92k9R3MF6iAFfFoL0hcx7Qv0R2fjMoBe7feeO6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmCaqsQnAvAY4vVnVZpgBaI/NGXMB8GA1UdIwQY
MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct
ZGVjY2ZhM2VhNjM1LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1
LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAvEePu8
BZm3X92ORsxL14GCoRYoJVBYDHy9kSQPoXqvhfBH8JkUNTPDNiY9/ZehVwHeLHnA
qsyvN/zMX6Cnq4teohfjvUufQrOTaIpp4m65cgvfsooba3bpXa/YIAC1lMoMjEks
n2O8XEofPVTg6lb+ugGApm7ndli5+IcW+1PoqgBT+IJIX9LLd+mpkPlC4hLY1OUZ
XyZX02dRvCnILgpxBvaas/AoT/bfgo3OQ++DDzC4lHto6PcNB7pfLC0E8CSFDgwI
qbUY7P4LcLEFXSUXTdSdbZ6UfYlEQVanIXUb5KIOTCpu70ftr7v3T3GAlXVDPerR
XGiOjoVu/sDYzw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:11 2025 by rpki-client