Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: swnjPMrBZm0FczJSTBlY/zvTEVT2SxuBvAJB/Ta/bLM=
Subject key identifier: E9:60:4B:AB:D6:55:1A:DD:EA:40:C1:CB:EB:45:9D:60:D5:2C:98:65
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019655DC975A011429695B2D8DD2F15BB32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1508
Signing time: Mon 21 Apr 2025 01:00:42 +0000
Manifest this update: Mon 21 Apr 2025 01:00:42 +0000
Manifest next update: Tue 22 Apr 2025 01:00:42 +0000
Files and hashes: 1: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
2: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: OjoZ8wai3FtmyL6VBjr1WvzIOphBEaEw/g5UF3QV4BM=)
3: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:97:5a:01:14:29:69:5b:2d:8d:d2:f1:5b:b3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Apr 21 01:00:42 2025 GMT
Not After : Apr 22 01:00:42 2025 GMT
Subject: CN=e9604babd6551addea40c1cbeb459d60d52c9865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:e3:b1:92:86:d4:4b:36:78:2c:8a:97:82:
ed:dc:1f:6a:79:92:49:9c:b7:0e:9b:42:db:c3:11:
81:76:fb:31:4d:2c:7c:83:c3:c0:1a:6c:e9:ff:6e:
ac:f6:7a:4b:02:fb:50:7b:b2:37:22:b8:45:d7:fa:
cf:7c:04:94:eb:b8:84:b6:d7:4d:8f:d3:9d:7b:38:
28:2c:58:da:fb:43:1f:76:55:73:dc:1a:96:10:e9:
cb:9b:bc:d7:0b:42:98:1e:b8:a7:e8:dc:c9:1e:78:
af:83:6f:d7:47:7e:97:f6:b8:40:20:d7:be:6f:fc:
0a:83:34:11:b8:d4:83:33:8f:e4:8e:89:e1:8d:0d:
47:52:5b:ec:3b:c3:6f:52:87:1b:47:72:91:88:0b:
ef:aa:c4:03:42:68:f8:ae:8a:53:48:66:df:9b:1c:
39:21:b5:96:98:68:16:fa:f3:b1:10:56:f0:c0:c1:
88:ae:34:09:ab:6c:5a:51:70:86:7e:b2:b6:77:7f:
84:d1:8f:43:ec:5c:d9:01:23:03:0a:7f:f8:52:22:
b9:73:ca:38:a2:a5:74:f1:c9:49:47:aa:1e:40:cc:
a6:68:56:4b:1e:f2:3e:db:77:4a:a9:84:45:57:86:
66:d0:e7:47:46:2e:ce:38:42:dc:ad:c3:43:01:9c:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:4B:AB:D6:55:1A:DD:EA:40:C1:CB:EB:45:9D:60:D5:2C:98:65
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d5:11:ed:38:5a:49:b8:e5:87:a7:7b:3d:8f:61:e4:56:7c:
da:ce:7f:f4:61:47:e0:7a:44:d7:55:ec:12:59:23:bd:3d:c1:
6d:74:35:7b:33:b6:b1:3c:7c:db:a6:8d:cb:88:93:29:0c:51:
db:78:86:dd:75:30:49:44:84:6a:0c:9d:be:e3:b0:0b:3c:6e:
7a:fc:6e:59:10:5e:24:ad:11:8a:53:c9:e4:28:b7:f5:ca:6b:
f1:13:fc:89:7b:ab:6f:e8:c4:30:8b:26:e9:40:17:a8:60:73:
9d:74:f3:61:01:02:57:e7:26:f1:4a:fe:63:98:92:35:4d:a2:
ea:75:f2:1f:33:09:7a:af:f3:f2:d5:a7:1f:6c:61:3c:c3:be:
77:ec:a0:a5:f0:29:d2:1b:d1:a8:db:2b:41:8b:9e:37:37:60:
38:70:35:1a:b9:e8:46:b2:45:44:6d:66:e2:8b:9e:f3:13:a8:
9c:ea:81:f6:f2:05:4b:9f:e6:51:84:0b:0f:6e:e0:55:57:0c:
7d:d4:f7:a9:2d:68:35:28:44:52:ec:e1:8e:0e:53:91:0e:f5:
98:86:c4:79:aa:cd:89:65:77:02:1d:59:28:3a:ed:51:9d:fe:
b8:7b:1d:3c:dd:6d:3f:ca:33:07:b9:14:11:63:db:40:6b:9a:
1a:f6:ea:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3JdaARQpaVstjdLxW7MuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm
ZTQ2OWMwHhcNMjUwNDIxMDEwMDQyWhcNMjUwNDIyMDEwMDQyWjAzMTEwLwYDVQQD
EyhlOTYwNGJhYmQ2NTUxYWRkZWE0MGMxY2JlYjQ1OWQ2MGQ1MmM5ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyLjsZKG1Es2eCyKl4Lt3B9qeZJJ
nLcOm0LbwxGBdvsxTSx8g8PAGmzp/26s9npLAvtQe7I3IrhF1/rPfASU67iEttdN
j9OdezgoLFja+0MfdlVz3BqWEOnLm7zXC0KYHrin6NzJHnivg2/XR36X9rhAINe+
b/wKgzQRuNSDM4/kjonhjQ1HUlvsO8NvUocbR3KRiAvvqsQDQmj4ropTSGbfmxw5
IbWWmGgW+vOxEFbwwMGIrjQJq2xaUXCGfrK2d3+E0Y9D7FzZASMDCn/4UiK5c8o4
oqV08clJR6oeQMymaFZLHvI+23dKqYRFV4Zm0OdHRi7OOELcrcNDAZw5dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlgS6vWVRrd6kDBy+tFnWDVLJhlMB8GA1UdIwQY
MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt
NDQ2OTJkYmNjYjMyLzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy
LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtUR7Tha
Sbjlh6d7PY9h5FZ82s5/9GFH4HpE11XsElkjvT3BbXQ1ezO2sTx826aNy4iTKQxR
23iG3XUwSUSEagydvuOwCzxuevxuWRBeJK0RilPJ5Ci39cpr8RP8iXurb+jEMIsm
6UAXqGBznXTzYQECV+cm8Ur+Y5iSNU2i6nXyHzMJeq/z8tWnH2xhPMO+d+ygpfAp
0hvRqNsrQYueNzdgOHA1GrnoRrJFRG1m4oue8xOonOqB9vIFS5/mUYQLD27gVVcM
fdT3qS1oNShEUuzhjg5TkQ71mIbEearNiWV3Ah1ZKDrtUZ3+uHsdPN1tP8ozB7kU
EWPbQGuaGvbqDA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:14 2025 by rpki-client