Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier: 2ZVq8uTMDUHeiH4YNZkxuqfEBAEwlIYYWhxJBaHw5vk=
Subject key identifier: D7:F3:04:57:5B:B9:2D:93:2E:03:FB:F5:BC:C8:B8:24:14:4D:2E:BF
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 019578344E732745B37BCD1156BB6CFAD31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number: 111E
Signing time: Sun 09 Mar 2025 00:00:48 +0000
Manifest this update: Sun 09 Mar 2025 00:00:48 +0000
Manifest next update: Mon 10 Mar 2025 00:00:48 +0000
Files and hashes: 1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: EJXthc+S3hONXUfRJCGDQAjvFw1rZdKHinKDB4KDUJU=)
2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:34:4e:73:27:45:b3:7b:cd:11:56:bb:6c:fa:d3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Mar 9 00:00:48 2025 GMT
Not After : Mar 10 00:00:48 2025 GMT
Subject: CN=d7f304575bb92d932e03fbf5bcc8b824144d2ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:16:aa:f4:02:71:65:0d:9e:c9:a1:61:68:
b2:e8:10:b3:8b:bd:d0:ef:d7:0f:2e:27:03:da:95:
8c:0d:8a:cb:63:83:92:3f:b0:36:07:75:29:af:76:
38:00:f2:64:de:31:08:54:05:f6:b9:59:66:45:1a:
6e:58:85:30:56:75:c9:ca:e4:38:9c:76:6a:0e:18:
a9:56:e0:9e:9b:d4:79:da:40:e5:27:36:9b:df:b3:
cf:a5:0e:2d:87:4c:f9:86:18:e6:9e:c5:cb:ff:15:
b7:f1:b0:c4:49:fe:bd:49:6c:5d:0f:57:87:35:ba:
c5:b3:be:0f:20:e4:8a:64:4e:2d:23:db:f2:87:ab:
ad:5b:c2:ab:5c:dc:ca:7f:44:77:b4:b9:91:fc:f4:
9c:44:46:10:e3:21:aa:9b:f9:4c:2a:d2:67:ff:c1:
fe:49:20:38:19:f6:86:91:8a:0e:b8:15:fd:ec:3a:
71:3c:bf:96:48:15:ab:3d:db:16:c8:c9:8d:e2:88:
2c:f5:97:3e:11:26:ae:d0:e5:6b:f8:59:af:9b:8a:
90:24:67:20:27:3c:29:ee:c7:dd:74:22:06:36:04:
d9:34:6e:50:ef:3c:bd:7e:44:f5:8f:60:1c:b0:7f:
fa:59:d8:99:65:cf:0d:9d:57:7a:49:ed:56:99:71:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F3:04:57:5B:B9:2D:93:2E:03:FB:F5:BC:C8:B8:24:14:4D:2E:BF
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:d2:96:ed:6a:ca:fa:e1:f8:e0:93:35:aa:79:c0:05:b2:
86:53:f6:99:59:7d:8a:9b:d8:9d:53:ac:4a:4b:59:ea:6b:d9:
20:e1:96:54:fd:8d:92:67:04:08:62:0c:8a:67:55:47:7d:06:
6c:31:ab:01:a5:c0:c0:f7:75:4c:7f:72:cb:f0:4a:eb:3f:ab:
6f:9e:a6:12:1c:75:c4:a7:57:f3:72:7d:46:0e:db:3b:fa:38:
ec:3d:7e:7c:e4:ba:00:08:19:92:aa:d8:c6:7c:2e:1e:c6:97:
31:bc:29:d8:32:df:15:ce:c5:91:5c:85:c2:5e:2f:56:46:8d:
d2:0e:6f:3b:72:a4:60:2b:fb:e5:17:37:17:22:73:bd:a4:f8:
c9:a5:d5:0f:cb:f6:b9:3d:28:39:85:fa:95:27:eb:92:47:3a:
91:62:76:2a:06:b6:73:ec:0f:1b:9f:66:c0:18:d8:a2:86:32:
2d:c0:52:48:ab:b5:b0:f1:80:64:59:42:8c:6e:42:a8:cb:16:
68:29:ae:f6:97:b7:22:2b:06:0d:a5:88:ce:6b:88:4f:c0:43:
0c:0f:82:fe:6c:36:ee:3b:ec:46:3b:08:0a:82:6c:7d:d8:b7:
62:65:68:52:33:89:9b:73:51:d3:53:1b:6b:40:52:1b:51:4d:
43:83:5a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV4NE5zJ0Wze80RVrts+tMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYmU1MmJhZTRkNDhkZGRjOWNiZWMyMDc2YWJhOTFjOTUz
YWUxMmUwHhcNMjUwMzA5MDAwMDQ4WhcNMjUwMzEwMDAwMDQ4WjAzMTEwLwYDVQQD
EyhkN2YzMDQ1NzViYjkyZDkzMmUwM2ZiZjViY2M4YjgyNDE0NGQyZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNwWqvQCcWUNnsmhYWiy6BCzi73Q
79cPLicD2pWMDYrLY4OSP7A2B3Upr3Y4APJk3jEIVAX2uVlmRRpuWIUwVnXJyuQ4
nHZqDhipVuCem9R52kDlJzab37PPpQ4th0z5hhjmnsXL/xW38bDESf69SWxdD1eH
NbrFs74PIOSKZE4tI9vyh6utW8KrXNzKf0R3tLmR/PScREYQ4yGqm/lMKtJn/8H+
SSA4GfaGkYoOuBX97DpxPL+WSBWrPdsWyMmN4ogs9Zc+ESau0OVr+Fmvm4qQJGcg
Jzwp7sfddCIGNgTZNG5Q7zy9fkT1j2AcsH/6WdiZZc8NnVd6Se1WmXH6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfzBFdbuS2TLgP79bzIuCQUTS6/MB8GA1UdIwQY
MBaAFDC+Urrk1I3dycvsIHarqRyVOuEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgt
ZDgwZjVlYTYyZDQ0LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgtZDgwZjVlYTYyZDQ0
LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNDSlu1q
yvrh+OCTNap5wAWyhlP2mVl9ipvYnVOsSktZ6mvZIOGWVP2NkmcECGIMimdVR30G
bDGrAaXAwPd1TH9yy/BK6z+rb56mEhx1xKdX83J9Rg7bO/o47D1+fOS6AAgZkqrY
xnwuHsaXMbwp2DLfFc7FkVyFwl4vVkaN0g5vO3KkYCv75Rc3FyJzvaT4yaXVD8v2
uT0oOYX6lSfrkkc6kWJ2Kga2c+wPG59mwBjYooYyLcBSSKu1sPGAZFlCjG5CqMsW
aCmu9pe3IisGDaWIzmuIT8BDDA+C/mw27jvsRjsICoJsfdi3YmVoUjOJm3NR01Mb
a0BSG1FNQ4NamA==
-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:43 2025 by rpki-client