Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: 8dItSNAMwsLoezPB1YHZm12dwecZxJh7p2hlR418g30=
Subject key identifier: DD:F9:02:79:18:0B:AD:C9:D0:C4:B3:CB:7B:7E:72:F5:89:0B:2A:8D
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 0196876E6825B3A2E33B6DBB6B8FFD85134A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0B19
Signing time: Wed 30 Apr 2025 16:01:21 +0000
Manifest this update: Wed 30 Apr 2025 16:01:21 +0000
Manifest next update: Thu 01 May 2025 16:01:21 +0000
Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: p0KSeywjIaYlWoezTYxyMMR8arlWnXWUCBmNKWtah00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:68:25:b3:a2:e3:3b:6d:bb:6b:8f:fd:85:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Apr 30 16:01:21 2025 GMT
Not After : May 1 16:01:21 2025 GMT
Subject: CN=ddf90279180badc9d0c4b3cb7b7e72f5890b2a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:1b:5e:8b:17:6d:61:aa:ef:ab:54:da:35:
74:b9:41:47:cf:4c:c5:82:ed:39:a8:22:f9:d5:80:
86:6a:d0:68:50:36:16:71:8b:3f:ef:ca:b4:f4:35:
c5:aa:4d:2c:e8:9c:a6:89:07:18:b4:fe:34:ee:67:
a0:b7:3e:48:39:aa:0c:24:4a:82:5c:a2:f6:b1:d4:
6f:58:25:dc:f3:3e:b1:bc:06:d8:17:5b:08:a4:c4:
23:44:8d:f4:24:33:63:bd:11:6e:48:81:16:e8:58:
9b:10:fe:5e:60:86:5b:6d:80:73:eb:7e:1c:65:f7:
2d:ae:72:ba:56:24:58:8e:1c:6b:c0:b5:64:fa:3c:
3c:ab:2a:b5:1d:06:ba:b9:a2:fb:4c:06:d0:34:af:
aa:9c:eb:63:79:86:5c:68:6d:e3:3c:e1:4e:e3:e1:
fb:6c:8c:c5:75:90:9d:94:9b:53:96:24:f4:9a:f3:
6a:95:0c:73:9a:b4:03:69:97:aa:a2:61:04:69:ec:
4d:c4:00:dd:dd:e8:b9:39:35:0e:91:22:8d:0c:0f:
6a:18:fd:9a:3e:1f:e4:8c:5c:09:6a:03:bb:ca:c8:
68:79:e9:be:6f:01:14:6e:ab:16:47:18:56:b0:9c:
cb:12:47:d1:7c:a1:86:a0:4c:81:26:b4:c2:be:8b:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:02:79:18:0B:AD:C9:D0:C4:B3:CB:7B:7E:72:F5:89:0B:2A:8D
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fc:f4:ce:b3:1c:da:c1:9b:ea:b9:45:58:11:a7:e5:38:39:
6f:d9:0e:6d:9a:c7:e2:26:a8:82:13:16:8d:2b:f7:53:d0:f2:
57:e9:3f:d5:b7:e9:70:08:fe:78:52:08:ae:b4:04:6c:1e:85:
c0:6d:b9:e3:a4:ea:c1:96:23:dc:06:0e:05:7a:05:ff:6c:da:
19:9d:85:de:29:83:5b:51:6e:cb:63:cd:ce:ee:85:b4:17:f0:
f5:df:f6:16:13:d8:cd:f8:b6:57:1f:11:43:7f:d9:52:37:7c:
dc:5b:9a:72:98:d3:32:77:37:dc:69:7c:b1:27:91:84:39:75:
bc:99:88:39:59:d8:50:7f:dd:c1:2b:52:5a:4b:fb:4a:ec:ee:
9b:3f:f4:ea:4a:16:90:90:a5:de:89:38:6d:91:f7:3d:68:a7:
e1:6e:fc:ca:f2:90:fb:62:21:0c:8b:14:29:b4:33:00:ba:64:
f7:35:66:a0:c5:f6:72:68:71:86:26:8a:6a:a0:b9:a8:9a:38:
f8:ea:57:00:cc:99:20:80:0d:d2:3c:2c:0b:e4:a8:49:94:aa:
f2:95:0d:bb:ea:c1:90:30:a6:3e:30:a2:3d:d3:73:cc:b6:ba:
86:98:bc:1c:d2:2c:73:dc:b7:d1:97:22:01:71:8a:37:f3:49:
43:72:db:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbmgls6LjO227a4/9hRNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0
NTUwNzIwHhcNMjUwNDMwMTYwMTIxWhcNMjUwNTAxMTYwMTIxWjAzMTEwLwYDVQQD
EyhkZGY5MDI3OTE4MGJhZGM5ZDBjNGIzY2I3YjdlNzJmNTg5MGIyYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCAbXosXbWGq76tU2jV0uUFHz0zF
gu05qCL51YCGatBoUDYWcYs/78q09DXFqk0s6JymiQcYtP407megtz5IOaoMJEqC
XKL2sdRvWCXc8z6xvAbYF1sIpMQjRI30JDNjvRFuSIEW6FibEP5eYIZbbYBz634c
ZfctrnK6ViRYjhxrwLVk+jw8qyq1HQa6uaL7TAbQNK+qnOtjeYZcaG3jPOFO4+H7
bIzFdZCdlJtTliT0mvNqlQxzmrQDaZeqomEEaexNxADd3ei5OTUOkSKNDA9qGP2a
Ph/kjFwJagO7yshoeem+bwEUbqsWRxhWsJzLEkfRfKGGoEyBJrTCvotZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN35AnkYC63J0MSzy3t+cvWJCyqNMB8GA1UdIwQY
MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt
MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx
LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfz0zrMc
2sGb6rlFWBGn5Tg5b9kObZrH4iaoghMWjSv3U9DyV+k/1bfpcAj+eFIIrrQEbB6F
wG2546TqwZYj3AYOBXoF/2zaGZ2F3imDW1Fuy2PNzu6FtBfw9d/2FhPYzfi2Vx8R
Q3/ZUjd83FuacpjTMnc33Gl8sSeRhDl1vJmIOVnYUH/dwStSWkv7Suzumz/06koW
kJCl3ok4bZH3PWin4W78yvKQ+2IhDIsUKbQzALpk9zVmoMX2cmhxhiaKaqC5qJo4
+OpXAMyZIIAN0jwsC+SoSZSq8pUNu+rBkDCmPjCiPdNzzLa6hpi8HNIsc9y30Zci
AXGKN/NJQ3LblA==
-----END CERTIFICATE-----
Generated at Thu May 1 01:29:30 2025 by rpki-client