Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: xxu+BcmqpI3pzlSRnRwTltHZXhQf8Z+SYu1izStkPhg=
Subject key identifier: 72:A4:79:11:71:98:45:B9:26:B3:02:5B:3D:34:E7:C7:1D:D5:15:E8
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 019631631A01A39EBF837DDB9634F2052A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 23:01:40 +0000
Manifest this update: Sun 13 Apr 2025 23:01:40 +0000
Manifest next update: Mon 14 Apr 2025 23:01:40 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: HAAZQ33djaocYovvhvavIIdnV1QrI1O1P6GrFlofMMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:31:63:1a:01:a3:9e:bf:83:7d:db:96:34:f2:05:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Apr 13 23:01:40 2025 GMT
Not After : Apr 14 23:01:40 2025 GMT
Subject: CN=72a47911719845b926b3025b3d34e7c71dd515e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:d7:78:96:0f:d4:12:41:da:21:dc:e1:9c:
c7:ea:6a:a5:a0:7f:00:78:c4:12:5f:e7:d3:21:1c:
15:bb:f1:c5:87:36:77:a2:f3:95:30:5f:81:63:35:
ee:32:bd:c3:2b:af:13:dd:5a:66:fa:45:34:43:26:
2c:6e:53:7c:3c:06:c3:0f:97:b8:10:60:5e:87:c8:
d4:52:91:96:17:90:3f:ed:07:1a:4e:07:0a:f5:93:
8c:a9:90:8f:04:c3:8b:dc:bd:b5:f6:a2:7e:14:6c:
fc:36:9f:fb:fe:fa:d7:24:8d:0f:d2:10:04:67:9f:
2c:4c:28:c8:bc:ca:a4:00:22:b1:39:d8:65:37:1b:
a5:c8:25:53:74:8b:ea:e3:6e:d1:43:85:62:97:5b:
47:18:22:c1:66:b1:82:30:28:13:73:e4:79:f6:e9:
b8:a5:fe:f2:c4:26:89:e8:a3:ff:84:5d:6e:ae:90:
1d:70:fd:3d:c3:0e:0f:42:8c:63:61:ca:93:e7:6f:
61:f3:2f:cb:f2:3a:34:d1:01:56:65:ef:96:da:a4:
68:8f:e7:9d:52:a0:ac:e2:71:32:d7:08:80:1b:27:
ef:52:4e:6d:5a:d8:dd:db:5b:e4:0e:3f:7a:34:cc:
d0:89:65:72:b3:d8:34:80:2f:9c:6e:19:85:45:bd:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A4:79:11:71:98:45:B9:26:B3:02:5B:3D:34:E7:C7:1D:D5:15:E8
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e6:60:2b:47:4a:75:e9:23:aa:b2:79:c2:14:35:8a:17:3b:
89:88:3e:e2:3f:d2:9e:02:f7:03:79:43:f7:e1:a3:6a:b0:80:
97:d5:8c:12:b2:2e:58:64:a0:60:83:75:b1:a5:86:74:fa:15:
93:66:2a:de:cc:c7:8a:46:7a:1c:97:7d:8b:7f:17:4b:d8:3b:
f6:ae:7b:12:7e:79:e0:99:3c:a8:2d:46:1b:48:9e:33:04:c3:
2b:76:2e:86:4c:9b:aa:6e:d8:c9:e0:93:7d:7f:12:cd:1c:ae:
c5:3d:6b:3e:03:77:f9:bc:7f:0f:2d:60:6f:07:83:28:f5:69:
c7:1c:dc:4d:34:1b:2c:68:63:fa:53:bd:d5:ce:be:76:6d:9c:
4a:ec:5f:98:7e:58:f6:65:39:cc:dc:96:b0:2e:f7:ff:b2:ba:
7d:6f:75:a5:5b:c5:a8:c0:73:1c:88:6b:bd:14:a5:f6:6c:b2:
9e:b9:63:1a:60:74:8d:3b:42:48:4e:ff:e8:4c:1a:b7:d1:e8:
3d:7d:55:37:e9:5e:fe:86:62:19:23:46:69:7f:78:bd:87:b5:
00:c6:9b:63:1f:04:7f:06:56:a9:f0:13:59:08:dd:c6:b9:7a:
43:4c:26:7d:bc:31:76:0a:a6:cf:4e:15:b2:23:b7:25:37:6b:
a4:d9:61:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYxYxoBo56/g33bljTyBSpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDdjN2I4OTY1NmRkMzM5Y2I5OGZiN2MyYjAzNzFjNTky
NmE2NDEwHhcNMjUwNDEzMjMwMTQwWhcNMjUwNDE0MjMwMTQwWjAzMTEwLwYDVQQD
Eyg3MmE0NzkxMTcxOTg0NWI5MjZiMzAyNWIzZDM0ZTdjNzFkZDUxNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8bXeJYP1BJB2iHc4ZzH6mqloH8A
eMQSX+fTIRwVu/HFhzZ3ovOVMF+BYzXuMr3DK68T3Vpm+kU0QyYsblN8PAbDD5e4
EGBeh8jUUpGWF5A/7QcaTgcK9ZOMqZCPBMOL3L219qJ+FGz8Np/7/vrXJI0P0hAE
Z58sTCjIvMqkACKxOdhlNxulyCVTdIvq427RQ4Vil1tHGCLBZrGCMCgTc+R59um4
pf7yxCaJ6KP/hF1urpAdcP09ww4PQoxjYcqT529h8y/L8jo00QFWZe+W2qRoj+ed
UqCs4nEy1wiAGyfvUk5tWtjd21vkDj96NMzQiWVys9g0gC+cbhmFRb3mfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKkeRFxmEW5JrMCWz0058cd1RXoMB8GA1UdIwQY
MBaAFJkHx7iWVt0znLmPt8KwNxxZJqZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMt
OTNkZWM3MzVmNzE3LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMtOTNkZWM3MzVmNzE3
LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOZgK0dK
dekjqrJ5whQ1ihc7iYg+4j/SngL3A3lD9+GjarCAl9WMErIuWGSgYIN1saWGdPoV
k2Yq3szHikZ6HJd9i38XS9g79q57En554Jk8qC1GG0ieMwTDK3Yuhkybqm7YyeCT
fX8SzRyuxT1rPgN3+bx/Dy1gbweDKPVpxxzcTTQbLGhj+lO91c6+dm2cSuxfmH5Y
9mU5zNyWsC73/7K6fW91pVvFqMBzHIhrvRSl9myynrljGmB0jTtCSE7/6Ewat9Ho
PX1VN+le/oZiGSNGaX94vYe1AMabYx8EfwZWqfATWQjdxrl6Q0wmfbwxdgqmz04V
siO3JTdrpNlhtw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:12:17 2025 by rpki-client