Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: dMBmUbcZLgIjKcw36biLYPLoXzlIlyLBwsT9c5POncM=
Subject key identifier: 3B:E2:D2:A3:96:5C:56:71:45:95:22:E2:A4:DD:59:91:89:49:14:99
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 019651C8D40677E9788A7EAAF705EA024EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 10CE
Signing time: Sun 20 Apr 2025 06:00:37 +0000
Manifest this update: Sun 20 Apr 2025 06:00:37 +0000
Manifest next update: Mon 21 Apr 2025 06:00:37 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: 1TVL2WEK1J0dRgLeFT/z+zM3upgvNIRBtpqbD1v0keg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:d4:06:77:e9:78:8a:7e:aa:f7:05:ea:02:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Apr 20 06:00:37 2025 GMT
Not After : Apr 21 06:00:37 2025 GMT
Subject: CN=3be2d2a3965c5671459522e2a4dd599189491499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:0d:93:02:81:64:3a:bc:2b:ad:38:bf:04:
e9:59:c4:5c:5f:14:5c:40:0f:42:c6:af:8e:71:6f:
dd:ea:df:c3:fd:2c:94:58:29:e9:ac:c7:c1:a4:ed:
ce:3e:b0:78:d6:42:a7:88:cd:31:1d:e4:d6:4e:1e:
de:3a:c8:96:9b:b5:10:fa:2b:ec:9d:61:2b:6f:0c:
e0:3f:a9:76:46:06:24:76:fb:88:5e:d2:53:20:0f:
8e:7f:2d:7b:1a:5c:e6:33:61:dc:2b:4f:8d:c8:81:
54:39:e9:bc:e0:42:5a:fa:31:69:e2:b3:a1:7a:da:
96:a9:94:68:0c:f6:84:d5:33:f5:e4:4e:35:e6:fb:
96:a6:29:02:5d:ee:9f:17:09:bd:00:1b:9b:57:35:
7e:d3:19:dd:4c:b0:54:ef:ca:7d:1f:03:7b:b4:a7:
b0:cc:46:11:1f:37:06:d5:87:8c:6c:e3:53:13:4a:
bd:a6:f5:58:ab:a7:77:f0:5a:51:6f:99:30:c0:14:
6a:84:50:a6:f6:88:ec:38:d0:00:28:32:b3:f1:64:
31:39:99:9a:f8:66:15:1b:4a:51:b0:60:60:30:d4:
b0:0c:35:00:7e:cc:e9:62:69:29:95:5d:a0:be:ed:
fe:f9:16:d7:cb:29:05:9d:49:6a:c9:16:99:24:1f:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:D2:A3:96:5C:56:71:45:95:22:E2:A4:DD:59:91:89:49:14:99
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e9:b7:25:76:09:2d:66:16:23:66:8d:69:b1:98:71:96:9e:
64:9e:96:fe:5a:54:8b:28:72:25:7d:8c:f7:9c:28:dd:8c:6d:
9b:7c:9c:3d:a9:83:2a:4f:7e:21:e5:e4:fa:51:9c:aa:a6:a5:
58:47:12:2e:22:56:f1:1e:b9:cc:17:cb:ea:03:55:5f:62:33:
9a:c9:0c:5c:71:86:dc:81:9e:02:4f:34:dd:d2:2c:e1:5b:0f:
3d:f6:a8:97:15:c6:86:c0:74:79:c2:62:38:3d:96:ff:0d:0f:
6b:ab:cc:b9:c5:6b:67:8b:7f:14:17:75:d2:0d:b2:d7:a2:e2:
4d:32:e6:51:da:33:a6:a5:ac:54:89:51:32:48:56:b3:44:98:
36:c4:5e:b8:e8:11:fa:a3:0a:ff:22:7c:de:f2:8d:1a:1e:72:
58:40:11:d2:f2:c0:93:ab:46:13:b6:0f:55:1f:f9:f8:fe:06:
3b:3a:6d:66:46:06:b8:1d:b1:d8:86:9b:46:18:07:c1:b2:3e:
49:c7:e4:65:52:27:b8:22:18:7c:55:0b:68:6f:86:4c:d8:73:
72:a5:08:23:43:63:26:51:8f:ad:f4:3b:ff:bb:4d:a1:2d:b2:
0f:f7:d8:fa:24:d1:3f:e4:e6:e4:ca:2c:54:3a:3d:2b:3a:68:
77:95:4e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyNQGd+l4in6q9wXqAk6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj
ZmMxOTkwHhcNMjUwNDIwMDYwMDM3WhcNMjUwNDIxMDYwMDM3WjAzMTEwLwYDVQQD
EygzYmUyZDJhMzk2NWM1NjcxNDU5NTIyZTJhNGRkNTk5MTg5NDkxNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbgNkwKBZDq8K604vwTpWcRcXxRc
QA9Cxq+OcW/d6t/D/SyUWCnprMfBpO3OPrB41kKniM0xHeTWTh7eOsiWm7UQ+ivs
nWErbwzgP6l2RgYkdvuIXtJTIA+Ofy17GlzmM2HcK0+NyIFUOem84EJa+jFp4rOh
etqWqZRoDPaE1TP15E415vuWpikCXe6fFwm9ABubVzV+0xndTLBU78p9HwN7tKew
zEYRHzcG1YeMbONTE0q9pvVYq6d38FpRb5kwwBRqhFCm9ojsONAAKDKz8WQxOZma
+GYVG0pRsGBgMNSwDDUAfszpYmkplV2gvu3++RbXyykFnUlqyRaZJB+UtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvi0qOWXFZxRZUi4qTdWZGJSRSZMB8GA1UdIwQY
MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt
ZWRjMzE2MjIyNjQ0LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0
LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+m3JXYJ
LWYWI2aNabGYcZaeZJ6W/lpUiyhyJX2M95wo3Yxtm3ycPamDKk9+IeXk+lGcqqal
WEcSLiJW8R65zBfL6gNVX2IzmskMXHGG3IGeAk803dIs4VsPPfaolxXGhsB0ecJi
OD2W/w0Pa6vMucVrZ4t/FBd10g2y16LiTTLmUdozpqWsVIlRMkhWs0SYNsReuOgR
+qMK/yJ83vKNGh5yWEAR0vLAk6tGE7YPVR/5+P4GOzptZkYGuB2x2IabRhgHwbI+
ScfkZVInuCIYfFULaG+GTNhzcqUII0NjJlGPrfQ7/7tNoS2yD/fY+iTRP+Tm5Mos
VDo9Kzpod5VOkQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:40:47 2025 by rpki-client