Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: m/iD53rU3PzN9eQ0qcw4MSLPDSI5Ul2kfglQZatd4xg=
Subject key identifier: 66:EC:B0:48:C0:89:76:20:D4:72:3C:F1:FA:42:B7:4C:DA:48:88:4F
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0195903D2AC0E072D917ED8974F70DB86F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 16:01:22 +0000
Manifest this update: Thu 13 Mar 2025 16:01:22 +0000
Manifest next update: Fri 14 Mar 2025 16:01:22 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: IjW4z1YmqrUV9TX4bcIf+vYd7eTI6aPhOT1Ju5rvgsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:2a:c0:e0:72:d9:17:ed:89:74:f7:0d:b8:6f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Mar 13 16:01:22 2025 GMT
Not After : Mar 14 16:01:22 2025 GMT
Subject: CN=66ecb048c0897620d4723cf1fa42b74cda48884f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:96:1c:b2:c5:5e:da:73:ac:06:cb:ba:df:
33:29:51:43:6e:e1:f6:26:b3:b4:36:b3:22:44:4e:
69:f9:02:94:ff:3a:1e:95:11:9a:b0:85:c8:59:f9:
1b:11:9e:ec:a9:06:46:48:6d:31:c2:92:f5:c9:05:
c8:38:37:ad:8c:7b:17:00:a9:bc:30:a0:3e:75:2e:
c9:6d:64:41:2f:68:6f:2a:0d:9f:50:b1:dc:d3:16:
3a:d5:5b:02:02:c0:81:d8:22:73:b0:1e:37:4e:1f:
bd:e2:d6:a4:66:18:72:8b:cc:c8:18:6a:06:99:ef:
d7:6c:32:fb:56:54:94:51:bc:70:cf:35:9f:85:f2:
94:bb:dd:a4:ae:b6:31:c8:eb:12:f9:a7:86:64:75:
f4:e4:f2:ed:51:2b:92:32:27:d5:87:94:07:d8:9b:
07:46:69:cd:07:2f:41:f6:93:d3:94:e7:f4:5e:fc:
42:04:9f:42:2c:8c:16:c7:c4:c4:be:76:c0:c2:2f:
77:e3:c8:31:fc:f6:a6:db:ed:dc:23:e0:d5:7f:bc:
98:dd:bb:20:4a:b1:12:d9:6b:b4:cc:c2:a8:e6:9f:
e9:3f:04:b1:d5:b0:30:39:d3:bb:b7:15:35:15:f1:
cb:f7:b5:90:62:1f:30:65:ae:96:c4:a3:9a:8b:ba:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:B0:48:C0:89:76:20:D4:72:3C:F1:FA:42:B7:4C:DA:48:88:4F
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:06:f3:51:24:68:3a:c4:f3:68:ee:2a:21:d6:47:28:f9:59:
df:0d:e0:fd:c1:96:7d:d8:1d:15:d9:d5:ff:38:e9:02:08:b4:
66:15:e7:96:86:ec:81:34:ec:d1:ef:69:06:6a:b6:44:66:58:
2b:63:72:e2:b8:62:72:4b:28:47:a1:c2:57:15:3c:af:f4:98:
46:96:8e:f6:51:7a:22:db:71:8e:cf:40:9d:14:30:47:7e:24:
8f:53:25:76:8d:48:df:b9:d1:38:22:0e:eb:2c:e2:a5:1c:37:
93:7d:34:3f:ce:d1:80:89:4e:34:39:46:fe:a1:da:73:66:59:
e8:0d:47:5b:f9:97:65:85:e7:bc:fc:47:92:2f:03:de:c5:d0:
39:1c:d6:7a:7d:c7:f3:f3:13:49:e1:14:13:b2:33:b6:52:c8:
fb:f4:8b:27:43:b9:e1:b8:21:b3:9b:69:90:47:13:49:26:64:
e6:cc:30:75:b5:eb:a9:da:48:d3:97:87:ba:18:8b:9c:6a:ce:
3d:f7:36:16:5c:d4:57:4b:be:2b:4a:ed:ec:9c:8a:fe:5f:96:
35:d2:24:5e:54:8a:08:c6:5a:d9:39:b7:d8:25:e7:17:5d:de:
d9:2c:1b:b1:e6:1d:b0:70:94:e4:7e:e2:8c:6b:8f:f4:9e:e8:
6d:13:43:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPSrA4HLZF+2JdPcNuG9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj
NmFkNzcwHhcNMjUwMzEzMTYwMTIyWhcNMjUwMzE0MTYwMTIyWjAzMTEwLwYDVQQD
Eyg2NmVjYjA0OGMwODk3NjIwZDQ3MjNjZjFmYTQyYjc0Y2RhNDg4ODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aaWHLLFXtpzrAbLut8zKVFDbuH2
JrO0NrMiRE5p+QKU/zoelRGasIXIWfkbEZ7sqQZGSG0xwpL1yQXIODetjHsXAKm8
MKA+dS7JbWRBL2hvKg2fULHc0xY61VsCAsCB2CJzsB43Th+94takZhhyi8zIGGoG
me/XbDL7VlSUUbxwzzWfhfKUu92krrYxyOsS+aeGZHX05PLtUSuSMifVh5QH2JsH
RmnNBy9B9pPTlOf0XvxCBJ9CLIwWx8TEvnbAwi9348gx/Pam2+3cI+DVf7yY3bsg
SrES2Wu0zMKo5p/pPwSx1bAwOdO7txU1FfHL97WQYh8wZa6WxKOai7pjyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbssEjAiXYg1HI88fpCt0zaSIhPMB8GA1UdIwQY
MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt
Yjc1ZWY1NjM3MjBjLzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj
LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigbzUSRo
OsTzaO4qIdZHKPlZ3w3g/cGWfdgdFdnV/zjpAgi0ZhXnlobsgTTs0e9pBmq2RGZY
K2Ny4rhicksoR6HCVxU8r/SYRpaO9lF6Ittxjs9AnRQwR34kj1Mldo1I37nROCIO
6yzipRw3k300P87RgIlONDlG/qHac2ZZ6A1HW/mXZYXnvPxHki8D3sXQORzWen3H
8/MTSeEUE7IztlLI+/SLJ0O54bghs5tpkEcTSSZk5swwdbXrqdpI05eHuhiLnGrO
Pfc2FlzUV0u+K0rt7JyK/l+WNdIkXlSKCMZa2Tm32CXnF13e2SwbseYdsHCU5H7i
jGuP9J7obRND+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:24 2025 by rpki-client