Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: Y22cVpWi8H/etySBK6uIbsPA7bR7Qhgc/CDi+4C2ZOg=
Subject key identifier: CA:3F:D0:A9:43:41:12:8E:BC:18:F0:96:B2:16:89:D6:BB:1A:4F:07
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 0196556E68B44B83191A5D2726C16400D673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 074C
Signing time: Sun 20 Apr 2025 23:00:21 +0000
Manifest this update: Sun 20 Apr 2025 23:00:21 +0000
Manifest next update: Mon 21 Apr 2025 23:00:21 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: 3rXMe6VLGuslXUcelkhKiXloPwDf0PhDuiQGDk13v+g=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:68:b4:4b:83:19:1a:5d:27:26:c1:64:00:d6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Apr 20 23:00:21 2025 GMT
Not After : Apr 21 23:00:21 2025 GMT
Subject: CN=ca3fd0a94341128ebc18f096b21689d6bb1a4f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:52:67:e9:b2:1a:00:ef:4d:44:c5:cd:37:
84:6e:18:8c:22:9c:55:f9:b1:d9:66:ea:42:a8:0e:
a3:dc:3b:dc:d9:3a:7d:88:ce:01:56:f2:99:82:0e:
c8:e8:2a:3d:d7:a9:c6:44:23:ab:1e:81:d1:e6:90:
fc:21:26:be:07:37:57:32:42:96:a6:8e:74:03:f7:
fb:32:6b:80:b9:5a:5e:56:e5:91:24:71:60:9f:e6:
da:96:67:5a:8d:5c:94:dd:5f:57:67:bb:c7:b4:bd:
58:01:89:ac:06:f4:2d:19:a6:f8:60:43:97:09:e7:
98:06:09:0a:07:78:20:39:a5:cb:3a:2e:ab:f6:4c:
a9:f0:a9:47:e6:19:dc:48:02:2a:21:f0:00:41:bb:
e2:f7:db:98:47:94:b0:f6:12:e2:5a:2a:b1:c2:94:
5d:9f:de:81:5f:64:4b:30:fc:ec:e3:77:03:06:07:
3b:37:ac:d9:4f:ac:ff:01:2c:d4:c7:26:e4:8c:aa:
85:44:5d:06:21:5c:7c:51:11:44:34:34:7c:83:bf:
d2:b4:ee:49:e2:df:66:53:f8:1c:2f:dc:46:ce:4d:
dd:6e:70:55:10:97:bc:a4:97:fd:6a:1a:61:07:3b:
b4:fe:50:ad:8a:e0:6b:4d:f3:a9:fa:b6:40:25:e5:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:D0:A9:43:41:12:8E:BC:18:F0:96:B2:16:89:D6:BB:1A:4F:07
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:7b:8c:f4:0d:c6:5d:28:36:c9:2d:b5:71:73:7b:89:b4:
87:17:7c:65:51:b7:9c:95:bb:57:21:45:93:09:89:88:27:95:
22:f2:71:82:47:8e:89:6b:bc:e6:35:47:09:6a:7c:8e:95:3f:
0b:e2:f1:3c:9b:56:10:ba:aa:11:15:bf:71:ae:8e:56:45:61:
1a:a5:49:f4:a1:a2:62:78:00:64:50:ad:88:5d:05:f7:aa:17:
d4:ee:7a:ff:5a:dc:65:56:ab:06:07:a8:59:fa:61:74:73:59:
ab:5f:d3:06:8d:ba:93:56:c1:16:67:46:2d:1f:d4:f1:7d:2f:
a5:6c:a9:75:f0:b4:9e:1f:be:79:39:00:c6:22:38:c1:c5:29:
25:c3:42:28:fe:66:f9:d7:d8:0e:28:98:d0:15:b1:67:29:e4:
b9:a2:99:4d:90:c3:9c:6c:18:a6:b4:11:6d:9a:fd:e4:bc:7b:
d8:02:4c:34:ec:e3:c2:ed:8c:a2:33:b4:99:3c:f6:90:a0:60:
39:d4:f2:af:0d:6c:9a:c7:48:b1:9f:80:37:98:a6:af:63:85:
e8:55:22:9f:56:72:89:81:1b:0e:32:5c:79:c4:c0:83:e1:15:
f5:33:17:ed:32:7d:22:fd:36:d6:10:44:2a:62:7a:bc:6f:66:
a2:12:ce:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbmi0S4MZGl0nJsFkANZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1
NjJmZDIwHhcNMjUwNDIwMjMwMDIxWhcNMjUwNDIxMjMwMDIxWjAzMTEwLwYDVQQD
EyhjYTNmZDBhOTQzNDExMjhlYmMxOGYwOTZiMjE2ODlkNmJiMWE0ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBJSZ+myGgDvTUTFzTeEbhiMIpxV
+bHZZupCqA6j3Dvc2Tp9iM4BVvKZgg7I6Co916nGRCOrHoHR5pD8ISa+BzdXMkKW
po50A/f7MmuAuVpeVuWRJHFgn+balmdajVyU3V9XZ7vHtL1YAYmsBvQtGab4YEOX
CeeYBgkKB3ggOaXLOi6r9kyp8KlH5hncSAIqIfAAQbvi99uYR5Sw9hLiWiqxwpRd
n96BX2RLMPzs43cDBgc7N6zZT6z/ASzUxybkjKqFRF0GIVx8URFENDR8g7/StO5J
4t9mU/gcL9xGzk3dbnBVEJe8pJf9ahphBzu0/lCtiuBrTfOp+rZAJeVVjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo/0KlDQRKOvBjwlrIWida7Gk8HMB8GA1UdIwQY
MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt
NGE1NjZhZGQ1NGIyLzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy
LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMp7jPQN
xl0oNskttXFze4m0hxd8ZVG3nJW7VyFFkwmJiCeVIvJxgkeOiWu85jVHCWp8jpU/
C+LxPJtWELqqERW/ca6OVkVhGqVJ9KGiYngAZFCtiF0F96oX1O56/1rcZVarBgeo
WfphdHNZq1/TBo26k1bBFmdGLR/U8X0vpWypdfC0nh++eTkAxiI4wcUpJcNCKP5m
+dfYDiiY0BWxZynkuaKZTZDDnGwYprQRbZr95Lx72AJMNOzjwu2MojO0mTz2kKBg
OdTyrw1smsdIsZ+AN5imr2OF6FUin1ZyiYEbDjJcecTAg+EV9TMX7TJ9Iv021hBE
KmJ6vG9mohLOhA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:30 2025 by rpki-client