Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: 4zUyDS80lSmIyvH+pC3kUAa5u1v2wWm5qE6v2ZDix/M=
Subject key identifier: 30:61:1D:99:30:78:7F:3A:04:55:16:58:F0:16:5F:3B:97:92:36:8C
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 01965500EB89F860D7D661205A09A4B7863F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 21:00:45 +0000
Manifest this update: Sun 20 Apr 2025 21:00:45 +0000
Manifest next update: Mon 21 Apr 2025 21:00:45 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: ibE7tN+LqF7ULy+CRw0SJFOIbdH4ktlpbdufJDD8jYc=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:eb:89:f8:60:d7:d6:61:20:5a:09:a4:b7:86:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Apr 20 21:00:45 2025 GMT
Not After : Apr 21 21:00:45 2025 GMT
Subject: CN=30611d9930787f3a04551658f0165f3b9792368c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:82:c6:4c:eb:14:73:28:66:de:1a:a5:4f:
dd:68:39:22:d3:58:9e:90:b6:2e:72:a9:59:32:a5:
e2:31:45:69:c1:c7:c8:77:4f:5f:92:a7:b3:8a:e4:
60:2c:f0:e4:a9:71:48:a2:77:8c:ef:fc:1d:de:b3:
8d:e8:e8:50:25:fb:05:a4:6e:7c:91:2c:12:33:0a:
14:da:9a:29:e6:7b:48:10:73:fa:17:4a:32:d5:ac:
b0:0f:dd:d0:ec:1e:09:61:3e:2b:8d:d2:46:14:3d:
6c:4b:77:c5:46:cb:26:18:86:f4:fc:77:10:4e:8e:
a4:71:53:5f:50:62:4e:69:32:27:1f:08:54:db:14:
75:9b:01:c7:ef:7f:54:b2:cb:3b:60:2b:86:7c:d4:
c5:ff:a5:31:2b:bb:d6:5c:95:1b:4d:a0:a6:8c:da:
33:02:0e:36:62:e7:fb:30:9d:ca:0f:48:ed:fb:7c:
88:71:cf:be:8a:d3:42:bd:b1:c4:a9:7e:7d:d4:39:
bb:c2:37:cc:ce:3a:91:b4:6c:74:5e:09:03:75:e5:
2f:2b:3d:5f:2e:32:6d:8a:97:68:23:3b:bd:00:0a:
5f:3b:8d:1e:8b:7b:07:ed:79:5e:da:58:05:ea:d7:
57:c0:87:a8:53:9e:95:93:d3:1a:f5:15:bc:51:60:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:1D:99:30:78:7F:3A:04:55:16:58:F0:16:5F:3B:97:92:36:8C
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3e:70:23:aa:6e:a9:64:e9:e9:46:a1:b0:2c:d0:29:e9:23:
81:3c:7f:29:3a:14:bd:b9:09:e6:dd:b5:2b:2a:28:76:36:7b:
12:54:b5:c7:8b:8d:ea:ea:f1:04:42:17:6e:db:2f:36:e8:2a:
83:cd:4c:46:14:fb:9e:28:8b:22:7a:e1:ea:fc:64:a2:ea:62:
16:cc:cd:6e:46:aa:18:c5:06:f8:20:81:47:86:55:bc:87:48:
52:2e:99:90:78:d5:a4:3a:56:c9:45:19:02:b7:b1:8e:db:89:
bb:37:a6:da:c1:2a:1a:22:5d:8a:42:ee:53:da:a9:78:71:ac:
95:65:91:0c:38:ca:cb:ed:27:61:cd:fd:50:10:f3:17:9f:7a:
99:d5:d0:a7:60:3e:24:69:59:84:98:96:48:56:81:93:24:08:
13:4f:74:8b:e2:b4:b1:c5:f4:cb:57:f8:51:3e:62:ac:ac:e3:
62:8f:06:c3:65:d3:03:16:4f:df:96:b5:53:53:74:f4:c2:ad:
cc:a3:0f:c6:f0:f0:5c:f1:0a:a8:29:1a:30:a6:d0:2b:cc:ba:
ea:cc:36:20:3f:e1:8c:45:11:ee:c3:6e:d7:a0:72:1e:32:5d:
62:74:c8:62:79:58:43:b4:fa:c5:80:42:c4:a1:fa:f4:a2:bf:
99:c6:d4:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAOuJ+GDX1mEgWgmkt4Y/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzkzYWIzNjRjODc4MzJlNzc3NjIyNmVlZTZjMTMxZGJl
MTUzYmIwHhcNMjUwNDIwMjEwMDQ1WhcNMjUwNDIxMjEwMDQ1WjAzMTEwLwYDVQQD
EygzMDYxMWQ5OTMwNzg3ZjNhMDQ1NTE2NThmMDE2NWYzYjk3OTIzNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkyCxkzrFHMoZt4apU/daDki01ie
kLYucqlZMqXiMUVpwcfId09fkqeziuRgLPDkqXFIoneM7/wd3rON6OhQJfsFpG58
kSwSMwoU2pop5ntIEHP6F0oy1aywD93Q7B4JYT4rjdJGFD1sS3fFRssmGIb0/HcQ
To6kcVNfUGJOaTInHwhU2xR1mwHH739Usss7YCuGfNTF/6UxK7vWXJUbTaCmjNoz
Ag42Yuf7MJ3KD0jt+3yIcc++itNCvbHEqX591Dm7wjfMzjqRtGx0XgkDdeUvKz1f
LjJtipdoIzu9AApfO40ei3sH7Xle2lgF6tdXwIeoU56Vk9Ma9RW8UWApLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBhHZkweH86BFUWWPAWXzuXkjaMMB8GA1UdIwQY
MBaAFKTJOrNkyHgy53diJu7mwTHb4VO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEt
ZTI1MzNjZGQyNWFmLzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEtZTI1MzNjZGQyNWFm
LzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHT5wI6pu
qWTp6UahsCzQKekjgTx/KToUvbkJ5t21KyoodjZ7ElS1x4uN6urxBEIXbtsvNugq
g81MRhT7niiLInrh6vxkoupiFszNbkaqGMUG+CCBR4ZVvIdIUi6ZkHjVpDpWyUUZ
ArexjtuJuzem2sEqGiJdikLuU9qpeHGslWWRDDjKy+0nYc39UBDzF596mdXQp2A+
JGlZhJiWSFaBkyQIE090i+K0scX0y1f4UT5irKzjYo8Gw2XTAxZP35a1U1N09MKt
zKMPxvDwXPEKqCkaMKbQK8y66sw2ID/hjEUR7sNu16ByHjJdYnTIYnlYQ7T6xYBC
xKH69KK/mcbU+w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:18 2025 by rpki-client