Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: itmJBNani2IFZKNYVrL9r+zDmVmlAO9EA4uL/RXN5rg=
Subject key identifier: 62:D9:66:37:B2:AF:CC:F9:48:89:88:FB:B1:FC:A3:F3:B5:74:80:2D
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 0196458D54577C08FD037BDCD5416E836F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 11F3
Signing time: Thu 17 Apr 2025 21:00:12 +0000
Manifest this update: Thu 17 Apr 2025 21:00:12 +0000
Manifest next update: Fri 18 Apr 2025 21:00:12 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: E3wkLvSYvUbZDSw5dRlKkQfETmjGKCqFcvXZmCYmb38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:54:57:7c:08:fd:03:7b:dc:d5:41:6e:83:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Apr 17 21:00:12 2025 GMT
Not After : Apr 18 21:00:12 2025 GMT
Subject: CN=62d96637b2afccf9488988fbb1fca3f3b574802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:5d:a3:bb:d0:90:7d:62:d4:16:0b:b0:4d:
0d:1c:9b:b2:b4:de:ad:c2:ad:21:0a:19:ab:9f:87:
74:e8:f4:7f:57:18:ec:ed:47:0c:2d:b7:79:c1:51:
30:98:b7:6a:6f:1c:cf:49:3c:2a:34:37:d0:90:dd:
64:1e:7a:d7:b2:a9:4f:53:eb:4d:59:aa:c5:58:48:
03:2f:61:d5:99:7b:f0:e8:29:cf:b2:c4:55:19:bb:
36:e7:22:cc:49:58:98:1d:4f:04:22:ce:f4:f9:58:
13:8a:1d:9c:56:ee:de:78:35:52:99:21:f9:09:f8:
c8:66:2a:0f:7f:77:88:cb:60:e7:b5:a2:b8:e7:9f:
51:bd:cd:3e:af:24:5d:a3:3b:68:6f:9a:b5:0a:e4:
fa:c6:a9:1b:54:66:eb:3f:8d:e3:d5:2a:bb:39:23:
11:b5:01:96:25:97:58:bb:8a:99:42:b5:bc:0f:ca:
fd:5c:2d:8a:d4:79:69:50:3e:13:35:48:dc:5c:e8:
3f:f4:98:cb:0a:48:b1:03:1d:8f:b0:34:b6:30:9a:
93:07:eb:2c:ce:d1:ad:42:ae:a4:b2:f8:4e:68:64:
e9:47:54:aa:d7:b2:29:59:bc:e7:7a:44:67:ed:0d:
78:5a:e5:a2:6a:17:f2:59:bc:fb:c2:e4:59:50:a7:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:66:37:B2:AF:CC:F9:48:89:88:FB:B1:FC:A3:F3:B5:74:80:2D
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:ca:f6:16:51:ef:fc:13:4f:d7:ae:83:97:7e:a7:92:c1:
f6:ad:d0:86:90:6a:b7:e2:a5:62:6c:4a:59:30:6b:83:12:1c:
d5:dc:87:d0:e6:43:57:ae:35:1a:0e:ae:7c:bd:c7:a0:eb:7c:
89:62:a4:d1:8e:c7:15:84:1a:4a:90:60:f1:33:d6:dc:4c:08:
80:60:6a:c4:a1:9c:b4:d3:92:87:e2:39:e3:b1:bd:a8:4a:89:
f3:38:87:84:d6:fc:eb:c3:38:7b:9c:76:1d:29:33:cf:21:51:
3e:20:3a:d9:79:cf:92:93:db:d1:7f:ce:9c:39:a5:04:d8:5e:
46:7c:61:64:c9:3c:f2:29:18:9d:60:a5:c8:74:d4:c3:5d:2c:
fa:fc:0b:81:92:b5:49:40:cf:f8:8b:f3:04:c0:9d:0a:29:eb:
58:7a:a4:4d:17:2a:54:18:81:24:d4:50:df:66:32:2e:ea:99:
87:f2:ae:30:34:03:52:6b:81:60:42:6c:80:32:cb:0d:ee:01:
df:f9:d1:95:a2:dc:6d:67:07:3b:00:33:ff:ee:e4:df:63:71:
14:b9:5c:06:38:c5:09:48:45:e1:e5:d4:53:a1:d5:f4:06:fa:
b0:1e:57:05:71:66:75:14:36:92:66:ea:a5:ef:a7:56:35:3e:
8f:b6:56:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjVRXfAj9A3vc1UFug290MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjUwNDE3MjEwMDEyWhcNMjUwNDE4MjEwMDEyWjAzMTEwLwYDVQQD
Eyg2MmQ5NjYzN2IyYWZjY2Y5NDg4OTg4ZmJiMWZjYTNmM2I1NzQ4MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOtdo7vQkH1i1BYLsE0NHJuytN6t
wq0hChmrn4d06PR/Vxjs7UcMLbd5wVEwmLdqbxzPSTwqNDfQkN1kHnrXsqlPU+tN
WarFWEgDL2HVmXvw6CnPssRVGbs25yLMSViYHU8EIs70+VgTih2cVu7eeDVSmSH5
CfjIZioPf3eIy2DntaK4559Rvc0+ryRdoztob5q1CuT6xqkbVGbrP43j1Sq7OSMR
tQGWJZdYu4qZQrW8D8r9XC2K1HlpUD4TNUjcXOg/9JjLCkixAx2PsDS2MJqTB+ss
ztGtQq6ksvhOaGTpR1Sq17IpWbznekRn7Q14WuWiahfyWbz7wuRZUKdmKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLZZjeyr8z5SImI+7H8o/O1dIAtMB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYjK9hZR
7/wTT9eug5d+p5LB9q3QhpBqt+KlYmxKWTBrgxIc1dyH0OZDV641Gg6ufL3HoOt8
iWKk0Y7HFYQaSpBg8TPW3EwIgGBqxKGctNOSh+I547G9qEqJ8ziHhNb868M4e5x2
HSkzzyFRPiA62XnPkpPb0X/OnDmlBNheRnxhZMk88ikYnWClyHTUw10s+vwLgZK1
SUDP+IvzBMCdCinrWHqkTRcqVBiBJNRQ32YyLuqZh/KuMDQDUmuBYEJsgDLLDe4B
3/nRlaLcbWcHOwAz/+7k32NxFLlcBjjFCUhF4eXUU6HV9Ab6sB5XBXFmdRQ2kmbq
pe+nVjU+j7ZWLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:58:57 2025 by rpki-client