Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: 9FJovfXtG8zMVz2V4rhhABwPqdq5rqEU1WQLH/ZrKoY=
Subject key identifier: 73:04:DE:A3:0C:77:BA:A8:3F:ED:60:09:45:8F:A7:2B:84:00:00:30
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 019658022FBE08A20A74AD29B8973C086F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0BF6
Signing time: Mon 21 Apr 2025 11:01:00 +0000
Manifest this update: Mon 21 Apr 2025 11:01:00 +0000
Manifest next update: Tue 22 Apr 2025 11:01:00 +0000
Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: sz9TN/2MK+kfDgsCROIds1IJRVmrzY4b1RGC6qErP5w=)
2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:2f:be:08:a2:0a:74:ad:29:b8:97:3c:08:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Apr 21 11:01:00 2025 GMT
Not After : Apr 22 11:01:00 2025 GMT
Subject: CN=7304dea30c77baa83fed6009458fa72b84000030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:23:78:f6:3a:e8:5d:a1:c8:85:80:88:d9:
68:84:6e:35:26:0e:b6:89:84:0e:31:f8:f9:61:c7:
02:a4:03:51:a6:02:6f:7d:dc:dd:1c:d5:a6:f3:7a:
8e:59:05:c4:e0:88:bb:8c:72:80:49:82:d3:d0:bb:
28:ab:c9:ee:8f:38:39:83:81:51:db:fa:87:47:60:
5f:a6:53:c6:2d:18:8b:ad:ff:e0:1c:3e:23:2b:68:
cb:5c:8e:63:8b:1e:c1:f0:44:b7:63:0f:c9:04:44:
40:91:66:b2:91:c3:a4:43:66:85:a4:11:a3:55:28:
c8:1c:3c:6a:33:aa:c5:ee:38:dd:6d:07:61:9d:13:
03:17:bb:dd:6e:2d:1d:3d:6b:6d:4e:58:e5:d1:ed:
2a:91:f4:1a:76:49:9e:bf:b9:d2:27:8d:00:f7:ef:
4a:78:9d:24:3c:02:b9:d5:92:75:19:fc:0d:4f:27:
a3:19:cd:b6:70:34:e1:13:54:a7:13:2c:0b:22:18:
d8:f2:e6:0a:f5:ad:f8:3a:18:76:3d:6b:77:c8:1e:
8b:90:f1:32:b5:44:ac:f5:78:9d:ad:b1:e7:bc:a2:
f7:29:44:43:49:1e:91:24:f4:17:2f:9f:50:1e:a2:
07:8d:20:c4:e9:00:6c:0e:ec:15:f5:ea:7f:6f:8a:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:DE:A3:0C:77:BA:A8:3F:ED:60:09:45:8F:A7:2B:84:00:00:30
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:e5:9a:97:a5:40:75:2c:73:d4:0f:2a:1d:83:d3:7f:a6:
fb:24:cc:84:67:39:d6:54:ab:5b:0f:5b:a4:28:52:a9:2e:1f:
50:1b:9f:26:b5:23:59:64:e6:f2:2d:48:a1:00:8b:ef:f9:d3:
e5:7f:ba:a9:42:ab:40:e0:23:2d:a8:7e:1a:33:54:43:20:99:
e2:b7:b9:9c:9b:2a:79:96:00:3d:89:ee:cc:e7:14:e4:08:f9:
af:30:07:1a:f9:77:0f:76:58:a1:76:f8:b4:5b:85:76:dd:e4:
82:d7:03:c3:e9:a4:df:1e:59:f9:41:5a:0b:08:b0:6a:38:d3:
9f:a3:81:31:a2:46:85:6d:db:ac:eb:3f:ea:97:13:bc:57:f9:
28:ef:d2:15:2f:05:84:98:aa:bd:d5:ed:03:de:ac:a3:12:b6:
b0:40:16:cd:ca:d1:49:ee:18:80:e4:f8:4c:e3:e4:b5:80:d4:
9c:cb:41:80:5e:52:57:ae:ed:cc:30:db:0d:82:cb:52:2d:16:
a0:d2:bd:5d:41:e0:be:01:20:f3:cc:72:16:77:c0:78:ea:ca:
8b:bf:bd:ea:95:e5:49:58:65:99:83:63:6b:c2:e9:bc:1b:9a:
d6:f3:3f:97:f0:09:2a:ec:b0:5a:1e:30:07:59:3f:1c:f9:a7:
67:e0:02:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAi++CKIKdK0puJc8CG8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYWFkY2NhOTZmNDRhNDU3MzkyZDg5MDdjNmI5NjRiZTBm
Y2Y5MjEwHhcNMjUwNDIxMTEwMTAwWhcNMjUwNDIyMTEwMTAwWjAzMTEwLwYDVQQD
Eyg3MzA0ZGVhMzBjNzdiYWE4M2ZlZDYwMDk0NThmYTcyYjg0MDAwMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk8jePY66F2hyIWAiNlohG41Jg62
iYQOMfj5YccCpANRpgJvfdzdHNWm83qOWQXE4Ii7jHKASYLT0Lsoq8nujzg5g4FR
2/qHR2BfplPGLRiLrf/gHD4jK2jLXI5jix7B8ES3Yw/JBERAkWaykcOkQ2aFpBGj
VSjIHDxqM6rF7jjdbQdhnRMDF7vdbi0dPWttTljl0e0qkfQadkmev7nSJ40A9+9K
eJ0kPAK51ZJ1GfwNTyejGc22cDThE1SnEywLIhjY8uYK9a34Ohh2PWt3yB6LkPEy
tUSs9XidrbHnvKL3KURDSR6RJPQXL59QHqIHjSDE6QBsDuwV9ep/b4rEFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHME3qMMd7qoP+1gCUWPpyuEAAAwMB8GA1UdIwQY
MBaAFDGq3MqW9EpFc5LYkHxrlkvg/PkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAt
OGY3ZmQzZGMxNWZlLzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAtOGY3ZmQzZGMxNWZl
LzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzvlmpel
QHUsc9QPKh2D03+m+yTMhGc51lSrWw9bpChSqS4fUBufJrUjWWTm8i1IoQCL7/nT
5X+6qUKrQOAjLah+GjNUQyCZ4re5nJsqeZYAPYnuzOcU5Aj5rzAHGvl3D3ZYoXb4
tFuFdt3kgtcDw+mk3x5Z+UFaCwiwajjTn6OBMaJGhW3brOs/6pcTvFf5KO/SFS8F
hJiqvdXtA96soxK2sEAWzcrRSe4YgOT4TOPktYDUnMtBgF5SV67tzDDbDYLLUi0W
oNK9XUHgvgEg88xyFnfAeOrKi7+96pXlSVhlmYNja8LpvBua1vM/l/AJKuywWh4w
B1k/HPmnZ+ACLQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:26 2025 by rpki-client