Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: Gd7elIeKvAVfXg1VDr/iCbMlY/AmKig469Pf5SOmlQs=
Subject key identifier: A4:DC:F6:5B:98:81:CF:5B:B3:2C:D2:58:D7:DC:87:50:EB:C4:93:DC
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 01963E0B8AD72A75E6C687D1F3E579115ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 0ECC
Signing time: Wed 16 Apr 2025 10:01:05 +0000
Manifest this update: Wed 16 Apr 2025 10:01:05 +0000
Manifest next update: Thu 17 Apr 2025 10:01:05 +0000
Files and hashes: 1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=)
2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: HBIaKIJTfmlPjKpdBjcD0UKDATtJW+0NOGGukz+JQ2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:8a:d7:2a:75:e6:c6:87:d1:f3:e5:79:11:5a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Apr 16 10:01:05 2025 GMT
Not After : Apr 17 10:01:05 2025 GMT
Subject: CN=a4dcf65b9881cf5bb32cd258d7dc8750ebc493dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:d0:32:5d:ff:ab:c9:9c:34:0b:e9:c0:01:
3a:34:e9:01:da:11:6c:b2:08:90:ac:c8:ba:4c:eb:
dd:7f:22:43:44:6b:30:73:28:29:9e:71:e3:6d:55:
ee:f2:4b:7e:de:67:95:4e:07:0f:b2:51:81:f6:ac:
80:32:2e:c6:fb:e7:c5:6f:aa:7c:d3:2b:b1:0f:25:
8f:5a:59:11:54:30:49:68:7f:3d:a5:26:19:a6:fa:
63:02:f1:e7:7d:9d:37:41:9e:20:71:69:1f:8e:65:
a1:ff:f7:7a:d3:63:72:62:39:3c:13:24:6c:97:45:
72:7d:2a:ad:3e:e8:72:55:70:c2:ae:d6:56:d5:e4:
c9:9c:1e:4d:4b:50:0d:71:6e:29:11:9d:3c:be:a9:
c7:e9:3d:20:d8:1f:39:65:3c:2a:6b:77:02:60:9c:
7b:8b:d5:5f:a0:4b:5f:6b:e6:71:0d:4e:69:f1:a0:
e2:0a:46:2b:53:b2:fa:ed:14:9d:73:87:0b:6b:51:
a3:c3:b1:b6:24:7b:f5:60:b8:29:47:9f:98:11:97:
2e:72:77:d6:eb:8c:a5:6a:a9:28:e4:61:a7:16:16:
df:f4:08:26:b8:41:86:81:75:0f:db:86:5d:ec:d7:
1f:a1:ed:0e:57:d1:d6:1c:76:66:c3:ba:11:07:78:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DC:F6:5B:98:81:CF:5B:B3:2C:D2:58:D7:DC:87:50:EB:C4:93:DC
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b4:77:cb:13:fa:df:22:e9:b0:8b:f3:38:ed:3d:4c:ec:ff:
a5:f1:ee:cf:a4:e1:c8:7c:78:dc:15:64:42:9d:a8:75:8f:57:
26:d5:f0:3a:08:af:1a:a3:7c:3f:2e:3c:63:42:7e:9f:6c:6a:
54:1f:4d:26:19:0b:c1:7a:fd:54:50:9b:b1:2d:0a:a2:74:a2:
a2:79:68:47:22:bc:a5:7a:ee:7f:ab:cd:b7:e6:cc:35:21:ba:
8b:33:ce:61:a9:ca:ca:fd:03:b0:d2:6e:25:f1:4d:8e:da:91:
14:1e:9b:78:8c:ca:e3:6e:1f:c5:9c:75:76:c8:3c:6d:03:bd:
f4:f0:f2:68:f4:43:11:71:65:47:9e:49:00:14:c5:cc:44:4b:
37:16:bf:63:dd:80:3e:f6:bf:95:ac:dd:c0:3b:71:7a:80:d5:
5b:46:18:31:81:2e:b9:95:01:d7:d0:3b:e8:ca:24:ba:c5:ce:
79:6d:b4:e7:e0:69:07:24:3a:23:86:2c:42:23:ee:5c:ff:9d:
39:77:e0:ea:b8:40:24:a3:ff:c0:fe:57:52:a7:4e:6a:73:55:
26:20:f6:39:4d:c7:4f:fc:5e:10:30:e3:21:99:4c:59:f9:40:
ad:6a:02:72:d1:52:b6:d6:54:bf:97:7c:70:f7:42:71:55:08:
15:b4:ba:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+C4rXKnXmxofR8+V5EVrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzc4OTI1OGU2MDlmM2U1NThkNzdiM2JmZDA4YWNmMzUx
NWZhOTIwHhcNMjUwNDE2MTAwMTA1WhcNMjUwNDE3MTAwMTA1WjAzMTEwLwYDVQQD
EyhhNGRjZjY1Yjk4ODFjZjViYjMyY2QyNThkN2RjODc1MGViYzQ5M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeHQMl3/q8mcNAvpwAE6NOkB2hFs
sgiQrMi6TOvdfyJDRGswcygpnnHjbVXu8kt+3meVTgcPslGB9qyAMi7G++fFb6p8
0yuxDyWPWlkRVDBJaH89pSYZpvpjAvHnfZ03QZ4gcWkfjmWh//d602NyYjk8EyRs
l0VyfSqtPuhyVXDCrtZW1eTJnB5NS1ANcW4pEZ08vqnH6T0g2B85ZTwqa3cCYJx7
i9VfoEtfa+ZxDU5p8aDiCkYrU7L67RSdc4cLa1Gjw7G2JHv1YLgpR5+YEZcucnfW
64ylaqko5GGnFhbf9AgmuEGGgXUP24Zd7Ncfoe0OV9HWHHZmw7oRB3jE+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTc9luYgc9bsyzSWNfch1DrxJPcMB8GA1UdIwQY
MBaAFDA3iSWOYJ8+VY13s7/Qis81FfqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTct
NGYyMTlkYjc4NTA4LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTctNGYyMTlkYjc4NTA4
LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7R3yxP6
3yLpsIvzOO09TOz/pfHuz6ThyHx43BVkQp2odY9XJtXwOgivGqN8Py48Y0J+n2xq
VB9NJhkLwXr9VFCbsS0KonSionloRyK8pXruf6vNt+bMNSG6izPOYanKyv0DsNJu
JfFNjtqRFB6beIzK424fxZx1dsg8bQO99PDyaPRDEXFlR55JABTFzERLNxa/Y92A
Pva/lazdwDtxeoDVW0YYMYEuuZUB19A76MokusXOeW205+BpByQ6I4YsQiPuXP+d
OXfg6rhAJKP/wP5XUqdOanNVJiD2OU3HT/xeEDDjIZlMWflArWoCctFSttZUv5d8
cPdCcVUIFbS6mA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:06 2025 by rpki-client