Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: HHkAKSgzgNGmJa6KyIpo5yWq5dgtVqY1pg9JWFrINdw=
Subject key identifier: E3:65:24:9B:46:BA:5B:56:51:07:36:85:08:21:FD:6A:F3:69:18:4F
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019686FF749453909852565CB287C85C8C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 1192
Signing time: Wed 30 Apr 2025 14:00:10 +0000
Manifest this update: Wed 30 Apr 2025 14:00:10 +0000
Manifest next update: Thu 01 May 2025 14:00:10 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: w3cZU4hUocxZw57A9FxjLc9eKPgQ3G3AwVvLoOn2eDI=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:74:94:53:90:98:52:56:5c:b2:87:c8:5c:8c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Apr 30 14:00:10 2025 GMT
Not After : May 1 14:00:10 2025 GMT
Subject: CN=e365249b46ba5b56510736850821fd6af369184f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:73:b8:50:de:d1:43:04:f6:cb:7f:5e:c5:
4a:6b:1c:bd:35:5d:68:bf:d4:96:1f:91:59:4d:65:
18:b5:09:75:6e:30:24:a1:64:e6:2f:fa:47:68:e2:
dd:bd:fb:08:18:75:6d:83:ac:7b:b5:4b:6f:5a:dd:
6d:bc:79:d1:52:e5:66:44:14:48:df:5b:b7:54:70:
ce:d5:35:da:07:35:e9:99:3d:12:73:13:e1:d9:e5:
1e:87:7e:2a:db:73:d1:72:ea:b5:e5:56:72:09:d6:
b8:d5:65:c0:61:01:d6:df:99:7f:e5:ff:22:11:16:
90:19:47:dc:f7:2b:de:dc:e3:ca:fe:99:2c:e9:31:
86:24:a3:a4:a5:01:32:1a:d7:f2:d8:26:8f:45:4d:
62:15:6b:20:24:6d:81:2b:32:78:19:c0:2f:4d:27:
bd:e2:ce:99:c9:9d:8f:02:02:84:26:11:f3:b5:17:
97:11:b9:a6:49:e1:16:dd:a9:3c:88:97:b0:e0:6b:
d0:b6:5e:e0:ad:ee:a8:36:48:25:26:60:40:96:80:
d3:64:69:d7:9b:dd:0e:e6:e5:0a:84:b8:df:22:2d:
d5:62:39:5f:db:25:9c:51:cc:11:c5:bd:d5:99:38:
a8:0f:b4:df:e9:7b:3a:53:08:3d:fc:aa:f2:a1:22:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:24:9B:46:BA:5B:56:51:07:36:85:08:21:FD:6A:F3:69:18:4F
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:17:5b:6f:29:0e:d9:30:1e:14:34:c2:97:00:15:32:53:11:
8a:12:9f:45:a5:60:0a:80:d5:0b:a3:bf:f9:27:d9:f8:5c:38:
3c:c6:f7:04:e3:e5:65:be:1b:ac:b1:30:2c:59:d9:cb:ac:e7:
4a:5d:73:67:90:6d:a2:48:79:d2:a0:be:44:c8:45:77:29:81:
dc:bb:f2:01:ff:c2:70:01:94:e2:56:b6:ae:f9:c7:dc:d6:01:
28:a2:ea:0f:3e:b7:61:5c:d7:bd:a7:54:d7:4d:d1:7c:20:ff:
48:01:8e:e5:78:b1:b4:32:b1:80:a9:b5:ec:ad:37:ea:53:5a:
70:b9:fa:3f:29:5d:89:e3:67:38:d9:d6:30:e1:49:31:0c:dc:
bd:05:ec:b7:bc:10:9c:28:c8:5d:3a:65:2d:9a:c0:44:00:68:
4c:c4:48:50:dc:ff:b5:ad:60:1d:43:63:80:dd:8d:50:e7:d4:
ee:7e:b9:3a:9b:e7:b2:f4:b6:e6:32:21:28:ff:de:09:6a:8f:
46:be:9f:0f:a3:78:61:70:76:24:b9:09:7f:3b:c2:cd:e9:b2:
99:67:cc:1f:5d:95:40:8b:52:61:91:23:13:09:a1:9b:c9:b8:
37:26:e8:d2:4f:8b:49:6e:1a:a7:07:9e:bf:35:c7:e8:8b:f6:
39:37:3b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG/3SUU5CYUlZcsofIXIx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWY4NTE4OGQwODJmZDU2NDBiNWMzZmUxMjIxZjYwYzUw
MWVkYjUwHhcNMjUwNDMwMTQwMDEwWhcNMjUwNTAxMTQwMDEwWjAzMTEwLwYDVQQD
EyhlMzY1MjQ5YjQ2YmE1YjU2NTEwNzM2ODUwODIxZmQ2YWYzNjkxODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSJzuFDe0UME9st/XsVKaxy9NV1o
v9SWH5FZTWUYtQl1bjAkoWTmL/pHaOLdvfsIGHVtg6x7tUtvWt1tvHnRUuVmRBRI
31u3VHDO1TXaBzXpmT0ScxPh2eUeh34q23PRcuq15VZyCda41WXAYQHW35l/5f8i
ERaQGUfc9yve3OPK/pks6TGGJKOkpQEyGtfy2CaPRU1iFWsgJG2BKzJ4GcAvTSe9
4s6ZyZ2PAgKEJhHztReXEbmmSeEW3ak8iJew4GvQtl7gre6oNkglJmBAloDTZGnX
m90O5uUKhLjfIi3VYjlf2yWcUcwRxb3VmTioD7Tf6Xs6Uwg9/KryoSJoEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONlJJtGultWUQc2hQgh/WrzaRhPMB8GA1UdIwQY
MBaAFDEfhRiNCC/VZAtcP+EiH2DFAe21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUt
OWJiZDFlZWJlMzNlLzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUtOWJiZDFlZWJlMzNl
LzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexdbbykO
2TAeFDTClwAVMlMRihKfRaVgCoDVC6O/+SfZ+Fw4PMb3BOPlZb4brLEwLFnZy6zn
Sl1zZ5Btokh50qC+RMhFdymB3LvyAf/CcAGU4la2rvnH3NYBKKLqDz63YVzXvadU
103RfCD/SAGO5XixtDKxgKm17K036lNacLn6PyldieNnONnWMOFJMQzcvQXst7wQ
nCjIXTplLZrARABoTMRIUNz/ta1gHUNjgN2NUOfU7n65OpvnsvS25jIhKP/eCWqP
Rr6fD6N4YXB2JLkJfzvCzemymWfMH12VQItSYZEjEwmhm8m4Nybo0k+LSW4apwee
vzXH6Iv2OTc7aA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:24:48 2025 by rpki-client