Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: Q5VxQacxV53G/T/Eb9Ztv6iGyuGxdtL99BOM1xbV0iU=
Subject key identifier: 0D:60:14:74:B0:42:48:84:60:CA:D1:F1:8A:79:03:1D:33:A1:47:50
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 01965613DD4CF2B0EC75C11327DEB055EDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 13FD
Signing time: Mon 21 Apr 2025 02:01:04 +0000
Manifest this update: Mon 21 Apr 2025 02:01:04 +0000
Manifest next update: Tue 22 Apr 2025 02:01:04 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: MUIvcqCV9q7WZPhIsr2lfH/qJrvs9gx4DpYZPXxvNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:dd:4c:f2:b0:ec:75:c1:13:27:de:b0:55:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Apr 21 02:01:04 2025 GMT
Not After : Apr 22 02:01:04 2025 GMT
Subject: CN=0d601474b042488460cad1f18a79031d33a14750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:a4:12:89:d7:4e:2e:30:67:1c:ad:ff:ee:
f2:4b:12:57:03:6c:cd:40:98:f6:bd:66:f9:21:eb:
50:43:f9:c9:4a:f1:4f:a8:43:0e:40:0e:7a:1c:c1:
39:09:80:6d:48:96:50:d1:e5:c9:b3:e7:04:e0:99:
27:db:37:09:c7:f7:9e:9d:69:83:43:e4:0f:5a:b8:
2b:10:61:50:ba:9b:ad:db:fa:46:98:21:27:31:34:
03:21:68:1a:f4:66:06:f9:71:50:7f:bb:16:cc:91:
21:06:81:e8:eb:d7:a8:9e:ac:8d:4a:35:95:20:fe:
c2:eb:e8:55:d0:5c:c0:46:75:32:c2:b3:7c:1a:00:
9f:49:df:7e:d4:93:b0:5e:4d:77:0b:5e:ab:d0:ea:
ea:cc:26:90:cf:8c:2e:39:c4:e2:49:73:8a:54:88:
f1:06:6c:27:60:41:c2:07:47:c8:a1:19:43:a3:29:
87:8f:6b:c6:74:85:1f:07:36:af:56:f6:d7:1c:bd:
96:de:d8:54:cc:3b:42:dc:ca:a2:df:5a:6e:97:c7:
f9:c1:a9:95:6a:15:f8:b2:7d:8e:ee:1c:08:0d:da:
d3:4c:c5:65:ce:58:72:44:13:35:02:15:1c:3f:fb:
60:93:81:3b:2f:0e:5b:6b:20:f1:a4:4e:e9:10:a3:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:14:74:B0:42:48:84:60:CA:D1:F1:8A:79:03:1D:33:A1:47:50
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:66:63:cb:b7:88:29:2a:3c:b9:b2:48:52:4c:b8:5f:43:2e:
43:43:3d:a5:20:bb:89:8d:9e:fd:92:e4:17:8e:e0:73:5e:67:
15:b3:75:6f:1f:8a:d2:0e:6b:a1:19:5c:c3:13:6a:7b:5e:73:
7b:56:af:57:1a:b1:d9:80:d2:12:69:71:15:60:48:96:18:ee:
ae:9d:cc:19:ce:bb:b3:74:33:88:83:84:37:20:e3:71:ac:41:
55:4f:54:35:3c:7d:71:23:e9:65:04:fb:b6:c9:98:7d:d9:3a:
89:90:88:5f:21:e4:b4:32:6b:02:6a:22:57:9c:b5:fb:a0:21:
f8:c3:73:2f:6d:ea:f4:fa:21:19:db:73:50:89:e9:a7:1c:44:
ca:0a:52:15:e7:ce:ff:c9:54:20:92:43:f6:93:05:f1:cc:f4:
4f:8f:b8:59:e6:82:a8:07:f3:d9:be:66:c0:10:7c:95:ec:09:
12:b5:05:d2:15:2a:f2:2d:a7:ac:05:d3:b2:a7:8d:4b:c2:b5:
f3:4e:f8:79:05:ba:a0:a0:4f:bd:66:01:95:46:6d:af:e2:6c:
b2:2f:e3:70:95:43:68:1b:6d:eb:97:f2:b7:0d:34:a7:b3:e0:
d3:9f:ff:83:cf:15:1b:3e:90:73:e0:71:2b:67:cd:7f:1e:a1:
bf:1c:f2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE91M8rDsdcETJ96wVe3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4
NzgzYWIwHhcNMjUwNDIxMDIwMTA0WhcNMjUwNDIyMDIwMTA0WjAzMTEwLwYDVQQD
EygwZDYwMTQ3NGIwNDI0ODg0NjBjYWQxZjE4YTc5MDMxZDMzYTE0NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBukEonXTi4wZxyt/+7ySxJXA2zN
QJj2vWb5IetQQ/nJSvFPqEMOQA56HME5CYBtSJZQ0eXJs+cE4Jkn2zcJx/eenWmD
Q+QPWrgrEGFQuput2/pGmCEnMTQDIWga9GYG+XFQf7sWzJEhBoHo69eonqyNSjWV
IP7C6+hV0FzARnUywrN8GgCfSd9+1JOwXk13C16r0OrqzCaQz4wuOcTiSXOKVIjx
BmwnYEHCB0fIoRlDoymHj2vGdIUfBzavVvbXHL2W3thUzDtC3Mqi31pul8f5wamV
ahX4sn2O7hwIDdrTTMVlzlhyRBM1AhUcP/tgk4E7Lw5bayDxpE7pEKOcywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1gFHSwQkiEYMrR8Yp5Ax0zoUdQMB8GA1UdIwQY
MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt
N2UxMmI4N2QwNmMyLzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy
LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmZjy7eI
KSo8ubJIUky4X0MuQ0M9pSC7iY2e/ZLkF47gc15nFbN1bx+K0g5roRlcwxNqe15z
e1avVxqx2YDSEmlxFWBIlhjurp3MGc67s3QziIOENyDjcaxBVU9UNTx9cSPpZQT7
tsmYfdk6iZCIXyHktDJrAmoiV5y1+6Ah+MNzL23q9PohGdtzUInppxxEygpSFefO
/8lUIJJD9pMF8cz0T4+4WeaCqAfz2b5mwBB8lewJErUF0hUq8i2nrAXTsqeNS8K1
8074eQW6oKBPvWYBlUZtr+Jssi/jcJVDaBtt65fytw00p7Pg05//g88VGz6Qc+Bx
K2fNfx6hvxzyHw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:48 2025 by rpki-client