Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier: fVCgsl4zseuh6bqMVePveCSnGip2l7vUlpeshuYhz6w=
Subject key identifier: 39:60:5D:5E:2E:2F:4F:1A:49:34:74:BE:15:26:CB:A5:7F:A3:F5:9E
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 019653B6F2CDA637FD6914D58663E69BC64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number: 07B4
Signing time: Sun 20 Apr 2025 15:00:20 +0000
Manifest this update: Sun 20 Apr 2025 15:00:20 +0000
Manifest next update: Mon 21 Apr 2025 15:00:20 +0000
Files and hashes: 1: 7qi71OAs6leux75HGJJKxd48zLc.roa (hash: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=)
2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: xcGQV8/NkEa4ypOhFePZEfVoOa68lv072Y84NSdSYMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:f2:cd:a6:37:fd:69:14:d5:86:63:e6:9b:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Apr 20 15:00:20 2025 GMT
Not After : Apr 21 15:00:20 2025 GMT
Subject: CN=39605d5e2e2f4f1a493474be1526cba57fa3f59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:f5:f1:45:95:30:75:64:cf:3d:51:61:0a:
43:87:36:73:89:51:7a:7a:18:5d:e9:f9:1e:8d:27:
b1:61:31:b8:10:8b:70:31:28:59:28:9a:d7:2d:c1:
bb:6b:5a:a0:5d:61:3f:11:5c:6a:f0:cb:cb:98:59:
7d:0b:18:c5:ed:e0:4d:30:9a:a3:73:11:38:a5:aa:
a8:9e:74:b3:d3:44:95:e1:7a:4f:6c:5f:c9:71:c6:
c4:89:cf:5b:f1:67:ed:04:7a:e5:92:d6:8e:ca:19:
7e:8a:d0:9e:b8:e2:4d:26:5a:88:4c:20:4b:25:87:
43:47:40:18:23:69:79:49:c9:ee:90:83:0e:05:d9:
7c:6b:96:cf:b7:fb:d1:b9:d7:72:52:84:ae:d4:48:
1a:21:bf:d3:2b:ed:1b:c1:cb:d1:9d:6e:68:0e:d1:
2d:65:b9:6c:f4:c4:44:e5:11:d0:83:08:5c:ac:54:
e1:20:d9:10:70:ab:50:36:53:6f:3a:72:70:6b:2f:
04:27:a7:98:98:7c:af:3d:6d:ab:56:93:3f:a4:3d:
5f:62:70:6b:61:e6:32:3e:bf:8e:34:9b:88:15:66:
5e:05:e1:a0:cd:0f:4f:7e:95:d5:1e:f3:f1:a0:ec:
c0:60:b9:bc:33:68:13:e5:28:51:81:88:b6:d0:65:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:5D:5E:2E:2F:4F:1A:49:34:74:BE:15:26:CB:A5:7F:A3:F5:9E
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3b:bc:78:bb:89:97:53:a1:8b:b3:80:df:68:12:15:6d:db:
74:e8:30:69:44:dc:c8:43:81:51:f5:79:66:0b:7e:81:06:36:
f0:33:83:6b:d7:7c:3c:68:2b:91:12:ca:be:fd:52:ce:26:3a:
13:6b:d2:ad:88:12:52:0e:39:5e:00:ad:d0:77:0f:34:7c:b0:
b6:88:63:44:7b:98:17:66:c6:a7:40:42:32:b2:3c:9a:a2:4d:
ba:64:e7:51:37:85:fe:83:56:7c:e9:3c:e1:68:d7:71:8e:61:
35:8b:d8:20:f1:d3:3d:d2:cb:e1:f0:39:26:0e:03:ef:c1:99:
ae:79:e6:73:97:77:7b:9e:45:a4:e6:34:d6:40:3d:03:47:de:
a9:33:cd:c4:b2:34:80:f7:3e:5e:b2:69:f2:d9:6a:38:f2:fb:
09:52:b7:75:29:79:58:c4:55:cf:fa:9b:0b:c0:ea:ec:1b:d1:
12:c9:8b:c7:6a:85:7a:f0:db:db:c1:1a:1b:41:45:72:bd:d5:
e7:c9:53:d0:d2:12:b4:1b:7c:f1:f2:01:99:22:c0:d8:43:60:
19:b7:f0:2c:ad:51:93:5b:b4:a3:57:8f:5b:6e:04:f5:8c:d3:
c6:cb:80:86:4f:8a:5d:01:7a:4c:d9:68:0a:c9:33:ea:86:e2:
65:6f:81:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtvLNpjf9aRTVhmPmm8ZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjUyZmY3ZjRkY2Y2MjIzNGQyMmY4NmExMTM1YjM0NDky
M2RhYWIwHhcNMjUwNDIwMTUwMDIwWhcNMjUwNDIxMTUwMDIwWjAzMTEwLwYDVQQD
EygzOTYwNWQ1ZTJlMmY0ZjFhNDkzNDc0YmUxNTI2Y2JhNTdmYTNmNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4/18UWVMHVkzz1RYQpDhzZziVF6
ehhd6fkejSexYTG4EItwMShZKJrXLcG7a1qgXWE/EVxq8MvLmFl9CxjF7eBNMJqj
cxE4paqonnSz00SV4XpPbF/JccbEic9b8WftBHrlktaOyhl+itCeuOJNJlqITCBL
JYdDR0AYI2l5ScnukIMOBdl8a5bPt/vRuddyUoSu1EgaIb/TK+0bwcvRnW5oDtEt
Zbls9MRE5RHQgwhcrFThINkQcKtQNlNvOnJway8EJ6eYmHyvPW2rVpM/pD1fYnBr
YeYyPr+ONJuIFWZeBeGgzQ9PfpXVHvPxoOzAYLm8M2gT5ShRgYi20GXpnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlgXV4uL08aSTR0vhUmy6V/o/WeMB8GA1UdIwQY
MBaAFJklL/f03PYiNNIvhqETWzRJI9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEt
YWIwNjY0ZTYzZmI2LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEtYWIwNjY0ZTYzZmI2
LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszu8eLuJ
l1Ohi7OA32gSFW3bdOgwaUTcyEOBUfV5Zgt+gQY28DODa9d8PGgrkRLKvv1SziY6
E2vSrYgSUg45XgCt0HcPNHywtohjRHuYF2bGp0BCMrI8mqJNumTnUTeF/oNWfOk8
4WjXcY5hNYvYIPHTPdLL4fA5Jg4D78GZrnnmc5d3e55FpOY01kA9A0feqTPNxLI0
gPc+XrJp8tlqOPL7CVK3dSl5WMRVz/qbC8Dq7BvREsmLx2qFevDb28EaG0FFcr3V
58lT0NIStBt88fIBmSLA2ENgGbfwLK1Rk1u0o1ePW24E9YzTxsuAhk+KXQF6TNlo
Cskz6obiZW+BGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:24:08 2025 by rpki-client