Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: 6j6iXlYuhsQtiryv5TGqzXlnYCiAX5RSTsGTNAWivQo=
Subject key identifier: 1C:56:99:D4:F4:52:99:C0:02:35:8B:C9:4C:8F:03:97:88:70:51:C9
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019699E2035F4E5A136825296B6984051331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 10F5
Signing time: Sun 04 May 2025 06:00:48 +0000
Manifest this update: Sun 04 May 2025 06:00:48 +0000
Manifest next update: Mon 05 May 2025 06:00:48 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: cqHcMUWsQoEGgXC/SdFtGY2bizcEYdKfz2c+26guXJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:e2:03:5f:4e:5a:13:68:25:29:6b:69:84:05:13:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: May 4 06:00:48 2025 GMT
Not After : May 5 06:00:48 2025 GMT
Subject: CN=1c5699d4f45299c002358bc94c8f0397887051c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:69:7a:bb:a0:8d:39:37:fb:7b:2c:5b:f4:
9a:08:a8:e9:6d:d3:16:df:7f:3a:d0:85:61:a1:51:
bd:ed:62:58:f6:34:f9:70:0a:f2:52:dc:4e:50:9b:
18:99:95:f7:de:20:7a:fc:13:b3:6d:fb:bc:2b:7c:
34:ac:9c:07:c9:20:47:2a:80:07:43:d0:fe:df:36:
0e:51:f7:9d:36:c7:98:1c:4f:12:16:87:bd:e4:08:
94:40:15:ac:a3:b2:ec:d1:65:ce:6b:77:3a:43:f1:
92:d3:3d:1e:ab:a7:81:a7:0a:69:b8:96:d5:18:61:
51:2e:f5:ca:3d:5f:5a:f2:4f:c9:76:ab:ce:80:38:
9c:06:99:27:ac:f4:06:42:03:bf:23:e7:75:8e:f1:
47:e4:14:e1:7b:48:ef:2f:e9:16:cb:97:6b:5a:fb:
d2:df:ba:3b:f7:62:ac:16:d2:94:1f:a8:a9:27:0d:
ea:15:22:bb:13:cf:5a:ae:eb:ba:5a:8d:a5:06:ed:
d3:5a:94:11:40:d9:17:cf:46:a3:6e:01:9a:cc:8a:
75:9a:b3:40:b9:7f:5f:14:17:bb:54:4e:1b:4d:4e:
11:48:9f:c6:89:e9:6c:6c:47:b0:f9:64:bd:00:d6:
80:0c:7c:b9:7c:66:17:48:33:b2:80:ed:11:72:4d:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:99:D4:F4:52:99:C0:02:35:8B:C9:4C:8F:03:97:88:70:51:C9
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:2e:69:6d:ac:07:7d:a4:1e:c5:25:2e:96:53:fb:ba:5c:
33:f6:cd:2e:10:65:0d:c5:e9:46:f4:ac:c4:4d:bb:66:50:11:
61:7e:62:e3:bf:1d:e2:a2:07:a4:5c:da:c0:5d:38:2d:d1:e0:
cd:04:ff:82:49:3b:24:77:b2:b7:19:84:5f:e0:42:9e:ba:c1:
b8:8e:1e:e6:2b:f1:0a:26:0f:76:f6:e2:ec:61:a7:2a:20:99:
0f:af:e9:e4:6b:7b:8d:aa:53:f4:02:4d:fa:0b:cd:61:a5:94:
79:a0:4b:de:5b:65:6a:a8:35:6e:82:b8:cb:61:cb:06:8b:92:
f5:99:c9:b6:c1:d3:aa:7a:9d:ea:48:48:4c:a3:6e:c6:08:4b:
2d:3d:e3:47:16:a0:93:ff:0a:8e:0f:9b:da:10:b8:3b:af:f0:
5e:80:98:ae:12:91:fb:f1:08:78:e5:20:94:56:af:09:2b:73:
6c:ab:79:e7:2a:c2:5d:d3:ee:29:26:ee:0c:23:5d:ef:cd:09:
6b:1c:2f:36:03:d9:eb:25:11:9e:31:4c:15:76:89:7f:e9:b3:
e1:fb:57:d7:30:97:06:3d:a8:d0:5d:3c:a2:cf:3d:ff:82:9e:
70:96:6f:79:d3:58:5a:1c:a5:f2:31:40:d9:a5:bd:50:94:3c:
89:e6:d7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZ4gNfTloTaCUpa2mEBRMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTJiNTM0MjZmYjYxNGQ5YTVhNmQ4M2Y0MDA1NjZhNjYw
YzlkZDIwHhcNMjUwNTA0MDYwMDQ4WhcNMjUwNTA1MDYwMDQ4WjAzMTEwLwYDVQQD
EygxYzU2OTlkNGY0NTI5OWMwMDIzNThiYzk0YzhmMDM5Nzg4NzA1MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo1perugjTk3+3ssW/SaCKjpbdMW
33860IVhoVG97WJY9jT5cAryUtxOUJsYmZX33iB6/BOzbfu8K3w0rJwHySBHKoAH
Q9D+3zYOUfedNseYHE8SFoe95AiUQBWso7Ls0WXOa3c6Q/GS0z0eq6eBpwppuJbV
GGFRLvXKPV9a8k/JdqvOgDicBpknrPQGQgO/I+d1jvFH5BThe0jvL+kWy5drWvvS
37o792KsFtKUH6ipJw3qFSK7E89aruu6Wo2lBu3TWpQRQNkXz0ajbgGazIp1mrNA
uX9fFBe7VE4bTU4RSJ/GielsbEew+WS9ANaADHy5fGYXSDOygO0Rck1twQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxWmdT0UpnAAjWLyUyPA5eIcFHJMB8GA1UdIwQY
MBaAFJmStTQm+2FNmlptg/QAVmpmDJ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgt
NzkxYTYyZDJkOGFiLzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgtNzkxYTYyZDJkOGFi
LzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzkuaW2s
B32kHsUlLpZT+7pcM/bNLhBlDcXpRvSsxE27ZlARYX5i478d4qIHpFzawF04LdHg
zQT/gkk7JHeytxmEX+BCnrrBuI4e5ivxCiYPdvbi7GGnKiCZD6/p5Gt7japT9AJN
+gvNYaWUeaBL3ltlaqg1boK4y2HLBouS9ZnJtsHTqnqd6khITKNuxghLLT3jRxag
k/8Kjg+b2hC4O6/wXoCYrhKR+/EIeOUglFavCStzbKt55yrCXdPuKSbuDCNd780J
axwvNgPZ6yURnjFMFXaJf+mz4ftX1zCXBj2o0F08os89/4KecJZvedNYWhyl8jFA
2aW9UJQ8iebXhQ==
-----END CERTIFICATE-----
Generated at Sun May 4 17:02:08 2025 by rpki-client