Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: njcMPL/9O0iPkx9zPsPNgCySFjVju3Ns7cuUqRuhuXU=
Subject key identifier: 74:E0:0B:52:01:B2:52:A7:EA:B5:B5:F5:7A:6D:5F:2F:E0:F4:81:41
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019748C303578A14A0F698162E69A5D541F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 12CB
Signing time: Sat 07 Jun 2025 05:00:29 +0000
Manifest this update: Sat 07 Jun 2025 05:00:29 +0000
Manifest next update: Sun 08 Jun 2025 05:00:29 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: B1jKz8sqaqxQqwYcqPPKB1hGv6Qc/o4UrBqm1E2t3ag=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:03:57:8a:14:a0:f6:98:16:2e:69:a5:d5:41:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jun 7 05:00:29 2025 GMT
Not After : Jun 8 05:00:29 2025 GMT
Subject: CN=74e00b5201b252a7eab5b5f57a6d5f2fe0f48141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:67:bc:f1:74:5f:d3:e1:7a:c4:b9:54:3c:
aa:b1:b8:84:65:ed:40:94:52:c6:fc:9a:43:7e:12:
87:f0:a4:b4:6f:a1:8f:db:81:4e:27:88:b3:10:e3:
f6:ac:25:36:bb:4f:58:1b:dc:91:20:f1:87:4e:c2:
6a:b2:f7:4b:d0:e2:69:51:a8:f3:ff:b7:03:91:4f:
2a:43:d9:ee:0a:99:42:4d:a0:dd:b6:0e:8d:50:77:
e6:2d:fb:a3:21:9c:7c:a5:b4:00:8c:70:9d:73:6e:
9a:b6:9c:a1:0e:e0:38:2d:84:19:3f:94:4b:92:52:
89:81:44:15:e5:0f:79:40:28:36:c1:cf:9e:72:e6:
1e:36:b9:19:8e:fa:de:f7:b9:e2:ff:1f:3e:be:ab:
22:c0:89:89:d4:68:43:24:92:45:9b:67:63:a6:3b:
68:aa:cd:5f:a9:ea:9e:ef:53:35:1d:a9:25:68:fc:
fa:cb:cf:b1:20:62:8c:cf:ca:69:35:85:c5:d0:11:
30:8e:e0:49:43:1e:65:ad:33:5b:0a:18:ad:50:ff:
30:53:e4:ba:5f:17:7d:14:61:98:7c:9b:d9:e7:ea:
f2:f3:e0:4d:30:f9:0b:74:68:10:86:8f:7e:f0:fe:
59:df:bd:f1:ec:05:6f:4f:23:7f:59:95:be:f4:4a:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:0B:52:01:B2:52:A7:EA:B5:B5:F5:7A:6D:5F:2F:E0:F4:81:41
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:93:4d:bc:3b:d4:e3:3e:1d:6e:9e:c4:64:9d:6a:39:9e:0b:
4b:d5:a2:87:bb:b1:c3:07:16:68:a6:53:08:d4:f6:db:32:c9:
e2:af:f7:92:3c:07:d7:1f:75:86:bd:9d:ca:7b:74:4f:9a:71:
d2:27:e4:43:4b:25:a6:ff:02:1a:84:2b:7c:30:59:3d:7b:6c:
15:3e:09:3c:0f:69:28:00:e3:fb:4d:9b:08:6e:75:f0:f0:b1:
c6:f1:81:fb:d0:6d:a8:d7:b1:1d:79:c6:6f:53:f8:67:e1:84:
f4:46:04:31:41:9b:1f:0a:ed:4f:45:d3:3d:73:e6:14:da:2e:
4d:c6:3e:9e:b1:36:fc:46:9d:c0:30:2f:d5:4e:ef:f4:c5:82:
99:82:cf:0c:f9:8d:93:89:e9:e4:66:b8:8d:7b:93:17:c9:15:
db:d9:c1:ca:e7:50:23:3c:05:82:25:67:ef:4f:8d:f5:4c:ca:
49:43:2a:ef:cb:5f:81:53:08:b8:04:66:80:10:47:e1:99:b9:
f1:80:50:9b:bd:07:d1:11:b1:cd:fc:40:97:e9:ad:b6:ba:94:
16:6b:5a:cb:d6:a9:85:bd:93:b1:6d:ed:ca:fd:4f:d3:d0:87:
f9:26:db:d9:a4:0d:fb:da:5d:b0:86:a5:db:17:89:1d:a8:6f:
46:9f:3c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwwNXihSg9pgWLmml1UH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5
OThiNGYwHhcNMjUwNjA3MDUwMDI5WhcNMjUwNjA4MDUwMDI5WjAzMTEwLwYDVQQD
Eyg3NGUwMGI1MjAxYjI1MmE3ZWFiNWI1ZjU3YTZkNWYyZmUwZjQ4MTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNnvPF0X9PhesS5VDyqsbiEZe1A
lFLG/JpDfhKH8KS0b6GP24FOJ4izEOP2rCU2u09YG9yRIPGHTsJqsvdL0OJpUajz
/7cDkU8qQ9nuCplCTaDdtg6NUHfmLfujIZx8pbQAjHCdc26atpyhDuA4LYQZP5RL
klKJgUQV5Q95QCg2wc+ecuYeNrkZjvre97ni/x8+vqsiwImJ1GhDJJJFm2djpjto
qs1fqeqe71M1HaklaPz6y8+xIGKMz8ppNYXF0BEwjuBJQx5lrTNbChitUP8wU+S6
Xxd9FGGYfJvZ5+ry8+BNMPkLdGgQho9+8P5Z373x7AVvTyN/WZW+9Epy9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTgC1IBslKn6rW19XptXy/g9IFBMB8GA1UdIwQY
MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt
OWU0ZTQ2ZjYwYTY4LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4
LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZNNvDvU
4z4dbp7EZJ1qOZ4LS9Wih7uxwwcWaKZTCNT22zLJ4q/3kjwH1x91hr2dynt0T5px
0ifkQ0slpv8CGoQrfDBZPXtsFT4JPA9pKADj+02bCG518PCxxvGB+9BtqNexHXnG
b1P4Z+GE9EYEMUGbHwrtT0XTPXPmFNouTcY+nrE2/EadwDAv1U7v9MWCmYLPDPmN
k4np5Ga4jXuTF8kV29nByudQIzwFgiVn70+N9UzKSUMq78tfgVMIuARmgBBH4Zm5
8YBQm70H0RGxzfxAl+mttrqUFmtay9aphb2TsW3tyv1P09CH+Sbb2aQN+9pdsIal
2xeJHahvRp88ew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:01 2025 by rpki-client