Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier: a70J3l1i46CH/Cu8f5DOa9w39OHFRxi4OlYz2cVlNAU=
Subject key identifier: 63:73:D2:78:23:3D:72:DE:1C:65:F4:A5:AB:FA:E3:66:7A:93:74:7F
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial: 019658DD858ED51C0B49476667272FE95649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number: 0BE6
Signing time: Mon 21 Apr 2025 15:00:34 +0000
Manifest this update: Mon 21 Apr 2025 15:00:34 +0000
Manifest next update: Tue 22 Apr 2025 15:00:34 +0000
Files and hashes: 1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=)
2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: 0KBx7AJaisS/rq4+Wv7liAoWCn0PnitEiRbjJceBHkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:85:8e:d5:1c:0b:49:47:66:67:27:2f:e9:56:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
Validity
Not Before: Apr 21 15:00:34 2025 GMT
Not After : Apr 22 15:00:34 2025 GMT
Subject: CN=6373d278233d72de1c65f4a5abfae3667a93747f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:c7:ea:bc:dc:7f:0d:83:f0:c2:c5:71:34:
7e:b0:55:0a:07:2e:84:84:73:2e:17:53:6c:c8:c2:
3c:5e:92:17:d4:c3:ac:b2:2e:f8:09:b6:d5:a9:97:
8c:78:23:0c:aa:4a:86:0e:c3:3b:1f:be:3a:07:8d:
c0:25:50:45:70:09:59:7a:73:69:1e:fd:27:f9:5a:
18:5c:ba:e3:1a:e1:17:d5:1b:2e:a1:f5:4b:17:d5:
72:33:7a:2f:84:e8:94:06:39:29:5b:7f:83:31:bf:
8e:c9:26:0e:cb:da:37:7b:c3:ac:ec:0c:fe:70:c2:
6f:88:96:51:90:84:a9:cb:9c:37:4c:79:2c:96:5a:
e3:dd:92:3d:9a:0b:28:1f:2e:f2:4c:4e:d9:69:92:
0d:81:2e:c7:ff:49:d6:03:17:33:32:6f:44:97:99:
1d:b3:46:9d:e2:68:28:95:72:37:50:93:2b:01:7a:
19:8c:66:fa:42:13:76:63:ef:a0:dc:2e:13:fb:3b:
8e:b2:9d:e7:1c:f4:d8:fc:3e:e7:14:a2:bd:97:8a:
c3:6c:1b:ef:e2:4c:df:bb:3b:f7:cd:21:15:d3:92:
c5:0f:88:10:59:03:bf:be:a6:f1:c8:22:b2:1a:26:
51:87:30:69:e8:e0:74:7f:d3:c2:0d:a6:b1:22:a4:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:D2:78:23:3D:72:DE:1C:65:F4:A5:AB:FA:E3:66:7A:93:74:7F
X509v3 Authority Key Identifier:
keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:9b:4f:31:d5:b1:e5:dd:00:40:68:9d:bd:50:96:b6:50:
67:da:1a:e5:5e:46:9d:bf:77:57:71:82:f9:34:75:7d:fb:45:
e2:aa:e9:24:12:e1:6b:ce:e4:9a:e9:aa:15:52:bf:b6:53:c3:
3e:93:55:1b:ca:16:55:d6:f8:8d:70:d7:b8:50:c3:27:18:14:
d2:14:cd:3f:13:7e:8b:65:8f:89:fa:c0:d2:11:21:8e:e0:10:
54:96:59:92:d3:d9:ae:13:ac:69:6f:ef:7a:cf:a0:c4:54:d6:
e8:b3:0c:a5:5b:cf:e8:1f:c4:22:96:54:c3:32:aa:62:47:77:
d7:b9:4d:d0:eb:dd:73:03:aa:0a:c3:38:ad:dd:4f:1b:1b:64:
97:9e:d5:08:7c:28:cc:0f:b0:ae:d5:6c:2a:e8:3d:3b:b2:7d:
8a:fe:93:52:31:89:1e:c2:8e:27:72:b0:9e:d4:c9:79:1c:a5:
dd:fc:7d:6e:53:92:6d:71:87:16:7e:a3:8a:cb:24:f7:17:e1:
e1:32:b9:68:d0:af:46:f5:ff:08:1e:e1:0b:aa:b5:10:bb:12:
dd:9d:de:e4:b0:03:78:c9:a2:cc:c4:06:36:05:8c:5e:a3:d7:
67:b5:9d:63:64:b1:c8:22:52:a2:d5:6a:76:af:5d:40:79:0d:
81:f0:19:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3YWO1RwLSUdmZycv6VZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTA3ODA2ZGRhY2I0ODQzMGJkZDAyNTQ4OTgwMTllNDEz
YTJiZGUwHhcNMjUwNDIxMTUwMDM0WhcNMjUwNDIyMTUwMDM0WjAzMTEwLwYDVQQD
Eyg2MzczZDI3ODIzM2Q3MmRlMWM2NWY0YTVhYmZhZTM2NjdhOTM3NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZvH6rzcfw2D8MLFcTR+sFUKBy6E
hHMuF1NsyMI8XpIX1MOssi74CbbVqZeMeCMMqkqGDsM7H746B43AJVBFcAlZenNp
Hv0n+VoYXLrjGuEX1RsuofVLF9VyM3ovhOiUBjkpW3+DMb+OySYOy9o3e8Os7Az+
cMJviJZRkISpy5w3THksllrj3ZI9mgsoHy7yTE7ZaZINgS7H/0nWAxczMm9El5kd
s0ad4mgolXI3UJMrAXoZjGb6QhN2Y++g3C4T+zuOsp3nHPTY/D7nFKK9l4rDbBvv
4kzfuzv3zSEV05LFD4gQWQO/vqbxyCKyGiZRhzBp6OB0f9PCDaaxIqTmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNz0ngjPXLeHGX0pav642Z6k3R/MB8GA1UdIwQY
MBaAFJiQeAbdrLSEML3QJUiYAZ5BOiveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMt
MTI2NzRlNjYxZTEzLzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMtMTI2NzRlNjYxZTEz
LzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWybTzHV
seXdAEBonb1QlrZQZ9oa5V5Gnb93V3GC+TR1fftF4qrpJBLha87kmumqFVK/tlPD
PpNVG8oWVdb4jXDXuFDDJxgU0hTNPxN+i2WPifrA0hEhjuAQVJZZktPZrhOsaW/v
es+gxFTW6LMMpVvP6B/EIpZUwzKqYkd317lN0OvdcwOqCsM4rd1PGxtkl57VCHwo
zA+wrtVsKug9O7J9iv6TUjGJHsKOJ3KwntTJeRyl3fx9blOSbXGHFn6jissk9xfh
4TK5aNCvRvX/CB7hC6q1ELsS3Z3e5LADeMmizMQGNgWMXqPXZ7WdY2SxyCJSotVq
dq9dQHkNgfAZDw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:19:26 2025 by rpki-client