Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: FZnQjOcbbf6lCuGP5bmSJ3WQ2i3wOrQ6Iz9/GX1wiyQ=
Subject key identifier: AB:BC:6C:F3:F1:9F:E8:F8:31:BE:C7:BD:61:6F:67:AB:E3:BF:DF:48
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019647E9C188BBFB2F02F45A9BE174E87097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 08:00:23 +0000
Manifest this update: Fri 18 Apr 2025 08:00:23 +0000
Manifest next update: Sat 19 Apr 2025 08:00:23 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: YaHVrQG7HnM8UDmV1n0Y2UDARr3P54X+OfMJoTWxE/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:e9:c1:88:bb:fb:2f:02:f4:5a:9b:e1:74:e8:70:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Apr 18 08:00:23 2025 GMT
Not After : Apr 19 08:00:23 2025 GMT
Subject: CN=abbc6cf3f19fe8f831bec7bd616f67abe3bfdf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:0e:0a:d9:ef:93:8a:ee:8f:21:3a:b3:bb:
ca:3b:2c:d4:d3:5c:96:07:39:7d:14:52:ae:7c:0c:
db:f5:b2:f4:80:dc:b7:72:ee:b6:04:d6:f3:33:52:
01:ca:2f:58:11:b9:f3:d2:8b:98:e4:c4:1c:12:37:
09:d7:18:e8:f2:a4:01:f0:47:0d:79:09:92:ec:3b:
a1:5c:7c:fb:0c:58:72:48:73:fc:9e:6a:29:4e:96:
15:b5:e3:05:b2:0d:ea:52:f0:5f:0b:e7:e7:52:75:
e9:fd:e6:29:ed:82:7a:20:bc:07:51:e6:ad:ae:cb:
ab:8b:a1:62:b0:4e:a1:96:b5:f2:ca:11:bc:53:90:
94:ac:73:7b:16:1c:56:96:20:cb:4c:76:f7:25:58:
1d:e9:e9:81:92:fe:2c:eb:14:65:d8:a6:b0:d6:58:
d1:2a:bf:6e:9a:a0:b7:d0:62:69:fc:bb:76:74:13:
a0:be:0f:ca:73:8b:70:88:a1:a2:ea:2d:53:e1:a0:
2e:fc:60:b4:5e:ca:a5:30:a0:c1:1c:c6:a4:73:b5:
bc:5f:7b:2e:40:ec:a9:6a:cc:56:62:48:a6:91:dd:
bc:e5:96:4b:a5:60:3f:85:f7:25:4a:a3:6a:c9:26:
69:6b:85:bf:65:fa:7c:b7:9c:eb:2d:dc:3d:4c:09:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:6C:F3:F1:9F:E8:F8:31:BE:C7:BD:61:6F:67:AB:E3:BF:DF:48
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:be:c2:5b:52:e9:c6:e5:0f:cb:59:f8:ad:de:00:69:55:ce:
88:6c:41:54:8a:3b:63:74:55:46:be:51:0a:65:d2:d8:d4:9a:
b9:6a:3d:9e:e1:d9:4a:31:41:21:52:0c:ac:79:0a:e0:b0:ef:
44:5a:a2:b8:5d:91:6d:1d:27:37:84:9b:05:8a:9a:1c:d6:8b:
32:53:a3:8b:79:fd:f0:92:cc:d0:dd:02:cc:2b:54:15:88:40:
d4:3b:08:00:e8:88:73:da:e7:4c:e1:94:a3:39:6e:37:f8:7b:
ad:91:c7:e9:55:01:38:8e:77:e6:55:8c:6b:3d:df:0a:20:e6:
d3:46:ef:92:cf:bb:65:b3:ea:92:a7:cd:a4:b3:9c:1b:2d:9a:
e0:ee:33:9b:c7:36:d6:dd:c9:22:7e:c0:ef:01:65:f2:c6:3c:
0c:74:42:f8:80:92:14:a9:db:32:94:7e:81:50:03:58:81:d9:
be:68:4e:f7:cd:8b:e1:15:8b:53:e9:d0:26:a3:4e:75:b4:c9:
b6:d0:8b:1a:ca:d2:80:3c:56:29:c8:a0:0f:3c:8a:4a:22:ff:
84:48:83:4a:14:8b:f3:b5:e4:05:c2:80:c6:f4:44:e7:74:9b:
80:11:87:0d:a3:0f:7e:3a:0d:d8:4b:c7:60:a0:1a:93:29:2f:
ad:b7:7a:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZH6cGIu/svAvRam+F06HCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj
MDUxNGUwHhcNMjUwNDE4MDgwMDIzWhcNMjUwNDE5MDgwMDIzWjAzMTEwLwYDVQQD
EyhhYmJjNmNmM2YxOWZlOGY4MzFiZWM3YmQ2MTZmNjdhYmUzYmZkZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEUOCtnvk4rujyE6s7vKOyzU01yW
Bzl9FFKufAzb9bL0gNy3cu62BNbzM1IByi9YEbnz0ouY5MQcEjcJ1xjo8qQB8EcN
eQmS7DuhXHz7DFhySHP8nmopTpYVteMFsg3qUvBfC+fnUnXp/eYp7YJ6ILwHUeat
rsuri6FisE6hlrXyyhG8U5CUrHN7FhxWliDLTHb3JVgd6emBkv4s6xRl2Kaw1ljR
Kr9umqC30GJp/Lt2dBOgvg/Kc4twiKGi6i1T4aAu/GC0XsqlMKDBHMakc7W8X3su
QOypasxWYkimkd285ZZLpWA/hfclSqNqySZpa4W/Zfp8t5zrLdw9TAnxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu8bPPxn+j4Mb7HvWFvZ6vjv99IMB8GA1UdIwQY
MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt
NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl
LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANb7CW1Lp
xuUPy1n4rd4AaVXOiGxBVIo7Y3RVRr5RCmXS2NSauWo9nuHZSjFBIVIMrHkK4LDv
RFqiuF2RbR0nN4SbBYqaHNaLMlOji3n98JLM0N0CzCtUFYhA1DsIAOiIc9rnTOGU
ozluN/h7rZHH6VUBOI535lWMaz3fCiDm00bvks+7ZbPqkqfNpLOcGy2a4O4zm8c2
1t3JIn7A7wFl8sY8DHRC+ICSFKnbMpR+gVADWIHZvmhO982L4RWLU+nQJqNOdbTJ
ttCLGsrSgDxWKcigDzyKSiL/hEiDShSL87XkBcKAxvRE53SbgBGHDaMPfjoN2EvH
YKAakykvrbd6AQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:04 2025 by rpki-client