Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: t3RFaB+5wsX2w1Oc6gMgN5LDKcteBOUFKnfVgxF2+E0=
Subject key identifier: B3:0E:E4:04:CE:99:28:2A:64:F5:AE:2A:75:C0:F4:B9:06:25:3D:96
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 01968D38B7ADC7397C8FE6686EA91B92D8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 19:00:26 +0000
Manifest this update: Thu 01 May 2025 19:00:26 +0000
Manifest next update: Fri 02 May 2025 19:00:26 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: 7T96Gl+bex0eAfCkTrbDG0T0rvAl05GnBONoy+C5Wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:38:b7:ad:c7:39:7c:8f:e6:68:6e:a9:1b:92:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: May 1 19:00:26 2025 GMT
Not After : May 2 19:00:26 2025 GMT
Subject: CN=b30ee404ce99282a64f5ae2a75c0f4b906253d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:4a:dc:a1:c1:c7:15:1b:2c:57:1e:70:74:
8c:9a:4d:37:2d:c2:76:72:bc:e3:e6:66:28:9b:55:
55:69:44:ef:6b:83:b1:bf:e1:cb:e0:06:c4:7c:4a:
e7:89:81:f0:56:35:62:05:0b:f3:27:00:3b:a8:5d:
44:07:d4:f9:60:36:67:56:d8:80:ab:37:39:8a:ec:
e8:db:d9:36:4e:a7:d0:c7:d8:5a:a6:da:8c:29:74:
d4:a3:72:fc:5d:a5:d7:9d:69:98:5d:80:d5:a8:7c:
77:d0:aa:0c:d5:da:64:47:d3:87:a3:f1:dd:05:7f:
b8:92:43:94:8c:af:56:48:dd:a9:81:20:0b:8d:d0:
55:e5:45:8c:ed:f5:ba:07:f0:99:04:a8:6f:91:b2:
28:b0:d6:cf:f7:12:68:ef:a2:19:8a:a8:a8:c0:42:
f5:03:b5:f6:49:e9:ff:8b:45:a2:42:a1:a8:59:13:
14:6f:24:58:10:ab:db:7d:92:2f:ca:2f:7a:4c:eb:
6b:b0:7a:a4:9a:e8:12:47:7d:2c:23:e5:00:5a:84:
aa:a5:3e:00:5a:77:f5:df:63:a8:4f:cf:f9:0e:93:
27:a1:59:17:81:1b:c1:1b:91:36:37:61:35:6e:c4:
e5:e1:15:b6:0f:e4:21:d4:35:3e:e9:d1:b2:f4:09:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:E4:04:CE:99:28:2A:64:F5:AE:2A:75:C0:F4:B9:06:25:3D:96
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c1:b8:9e:37:77:ac:1a:7a:c5:c9:0d:ca:1a:f3:02:e3:cb:
a8:96:ad:26:3f:f7:36:db:53:50:31:fa:88:5e:98:33:40:ea:
30:3d:57:33:ee:4c:0c:b9:9a:3f:b9:18:8d:50:7a:d4:b0:ce:
df:ab:a1:8d:0e:eb:ae:ea:84:db:ff:a3:4e:93:d9:42:72:af:
ec:c7:3e:1f:44:dd:8b:7c:4f:aa:39:eb:9d:84:bf:9f:b0:53:
95:bc:68:5e:80:11:32:f6:e8:1e:d0:dd:c7:7e:8c:3a:d2:a9:
83:d8:52:04:e2:ce:cf:26:83:03:5b:33:19:ed:a6:7a:c5:c4:
d6:86:47:ff:11:73:3e:dd:bf:29:9c:a0:c4:27:77:5d:cf:1f:
35:98:54:36:47:fb:8f:f5:03:e1:c7:9e:d4:e8:e7:ca:bc:1f:
dc:bb:57:35:a4:4e:cc:5f:30:e2:17:7a:26:60:e5:1d:f4:8e:
d3:b0:66:67:80:7f:f2:2d:87:ce:79:9b:ce:f6:55:f0:b5:21:
86:e1:20:f5:d7:98:f2:a0:12:c9:5e:ac:af:7e:dc:e4:08:c7:
ad:62:71:aa:59:4f:d4:a0:9b:67:71:d7:7d:8f:1b:fc:33:ea:
28:3e:45:eb:fb:0f:c6:ad:e2:4e:ed:d9:1e:dd:85:03:e3:29:
54:35:cf:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNOLetxzl8j+ZobqkbktijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk
ZWU2MjUwHhcNMjUwNTAxMTkwMDI2WhcNMjUwNTAyMTkwMDI2WjAzMTEwLwYDVQQD
EyhiMzBlZTQwNGNlOTkyODJhNjRmNWFlMmE3NWMwZjRiOTA2MjUzZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc9K3KHBxxUbLFcecHSMmk03LcJ2
crzj5mYom1VVaUTva4Oxv+HL4AbEfErniYHwVjViBQvzJwA7qF1EB9T5YDZnVtiA
qzc5iuzo29k2TqfQx9haptqMKXTUo3L8XaXXnWmYXYDVqHx30KoM1dpkR9OHo/Hd
BX+4kkOUjK9WSN2pgSALjdBV5UWM7fW6B/CZBKhvkbIosNbP9xJo76IZiqiowEL1
A7X2Sen/i0WiQqGoWRMUbyRYEKvbfZIvyi96TOtrsHqkmugSR30sI+UAWoSqpT4A
Wnf132OoT8/5DpMnoVkXgRvBG5E2N2E1bsTl4RW2D+Qh1DU+6dGy9AlYhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMO5ATOmSgqZPWuKnXA9LkGJT2WMB8GA1UdIwQY
MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt
YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2
LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMG4njd3
rBp6xckNyhrzAuPLqJatJj/3NttTUDH6iF6YM0DqMD1XM+5MDLmaP7kYjVB61LDO
36uhjQ7rruqE2/+jTpPZQnKv7Mc+H0Tdi3xPqjnrnYS/n7BTlbxoXoARMvboHtDd
x36MOtKpg9hSBOLOzyaDA1szGe2mesXE1oZH/xFzPt2/KZygxCd3Xc8fNZhUNkf7
j/UD4cee1Ojnyrwf3LtXNaROzF8w4hd6JmDlHfSO07BmZ4B/8i2HznmbzvZV8LUh
huEg9deY8qASyV6sr37c5AjHrWJxqllP1KCbZ3HXfY8b/DPqKD5F6/sPxq3iTu3Z
Ht2FA+MpVDXP3A==
-----END CERTIFICATE-----
Generated at Fri May 2 00:07:13 2025 by rpki-client