
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File: mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier: tLU8r7pJn37K3LB+eEUzQstlBzlqOjEqERK+22qJ4KU=
Subject key identifier: CF:49:24:F7:A1:17:5C:71:22:E2:9E:A4:C9:AF:04:86:B4:94:9A:0E
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer: /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial: 01967F0F670A0580DBA757529EE5D0A5EB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 01:00:37 +0000
Manifest this update: Tue 29 Apr 2025 01:00:37 +0000
Manifest next update: Wed 30 Apr 2025 01:00:37 +0000
Files and hashes: 1: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (hash: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=)
2: irj1HjAurNUv-4zFYoq9zYDgdlE.roa (hash: Q709g8riB8kWPE65HcwVtvNF/Lb15QFI8yUUJR0G7Y0=)
3: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: Kp2sxWwr4o9qEy+2vMXukIdOUGD1zgnNkzDTv5f5CZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:67:0a:05:80:db:a7:57:52:9e:e5:d0:a5:eb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Validity
Not Before: Apr 29 01:00:37 2025 GMT
Not After : Apr 30 01:00:37 2025 GMT
Subject: CN=cf4924f7a1175c7122e29ea4c9af0486b4949a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:5f:ef:6b:aa:5c:af:be:2e:3a:dd:8c:4a:
c3:c6:d7:a6:23:4f:7c:7f:f0:06:dd:9c:c8:ee:cb:
6a:51:fc:12:c9:32:18:f2:04:c2:f1:8e:a1:a9:81:
35:d8:a4:3a:8e:c0:21:68:85:5e:12:ed:2f:55:e8:
20:f1:f3:48:69:7e:40:07:a8:e8:af:b0:f7:11:f9:
22:85:87:53:39:c7:4c:ea:1b:7d:78:04:38:af:6f:
56:c3:7d:72:44:a1:57:f3:e9:de:28:76:d7:69:93:
17:af:65:ad:a1:e6:cd:60:19:7a:71:7e:ce:80:94:
81:ca:97:5f:bf:77:78:a3:01:f9:29:1d:7f:77:b8:
f6:b9:e4:56:45:93:f5:ac:1f:46:e6:6a:01:30:b7:
18:af:8b:61:86:0c:d5:18:d2:d5:5e:2d:b6:c5:83:
32:29:05:d7:79:45:57:84:56:97:ba:40:cd:ef:1f:
67:50:24:c4:dd:6e:3e:82:35:7b:ce:77:f7:07:94:
8e:0b:93:72:8a:c9:aa:ab:27:6f:01:aa:4a:88:91:
a3:f4:17:bd:5c:ca:ea:a4:76:dc:60:a3:fc:06:44:
c4:4a:27:81:49:1e:4a:82:6d:45:c9:d1:18:61:c8:
59:9b:9f:06:06:d4:1a:2c:56:e7:91:21:ac:c8:1d:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:24:F7:A1:17:5C:71:22:E2:9E:A4:C9:AF:04:86:B4:94:9A:0E
X509v3 Authority Key Identifier:
keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:db:6d:ce:fe:cb:38:67:07:6e:e2:32:d5:e7:d4:ca:33:ee:
2f:ac:38:96:31:b1:6e:76:6e:72:7c:eb:4c:a3:bb:14:56:dc:
89:6a:be:d0:10:96:e4:df:16:e4:7f:e4:76:72:cf:43:17:38:
58:62:76:26:ea:e4:e6:93:42:23:75:75:a9:17:26:02:83:dc:
d8:1a:e1:c9:bf:45:84:7e:fd:9d:f8:07:2d:ec:a6:b1:2e:71:
a3:82:07:0b:e2:c1:a4:12:a5:88:42:ad:75:93:a7:12:b5:d6:
c0:f5:cb:c0:70:52:1b:a5:ba:40:a1:05:e1:29:bf:c3:d2:b6:
f7:a7:89:59:65:c5:3b:76:d0:c7:8d:68:c4:0c:2f:37:24:43:
c1:fb:ed:50:10:ab:af:c7:48:48:fb:14:4a:11:d0:3d:5b:43:
0f:40:77:52:37:95:05:04:4a:56:80:c4:cc:40:f2:4b:02:d0:
45:c3:78:46:38:c2:43:2f:7a:fc:12:7b:61:76:f9:c8:2c:8e:
7c:fe:61:33:bf:16:1a:c5:97:52:a7:1f:29:6e:9d:e1:c7:63:
29:ce:c1:2c:e8:80:1f:f4:5c:38:27:86:35:19:b9:f5:de:99:
7b:f1:88:61:60:93:7f:0a:2c:02:7a:40:86:d3:b1:b0:73:42:
a1:63:e3:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/D2cKBYDbp1dSnuXQpesiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWFmYTk2YzlkNTYzZTY1MGJhNTkyZmZiMDZlMmNlZWI2
YTA4NTkwHhcNMjUwNDI5MDEwMDM3WhcNMjUwNDMwMDEwMDM3WjAzMTEwLwYDVQQD
EyhjZjQ5MjRmN2ExMTc1YzcxMjJlMjllYTRjOWFmMDQ4NmI0OTQ5YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQpf72uqXK++LjrdjErDxtemI098
f/AG3ZzI7stqUfwSyTIY8gTC8Y6hqYE12KQ6jsAhaIVeEu0vVegg8fNIaX5AB6jo
r7D3EfkihYdTOcdM6ht9eAQ4r29Ww31yRKFX8+neKHbXaZMXr2WtoebNYBl6cX7O
gJSBypdfv3d4owH5KR1/d7j2ueRWRZP1rB9G5moBMLcYr4thhgzVGNLVXi22xYMy
KQXXeUVXhFaXukDN7x9nUCTE3W4+gjV7znf3B5SOC5NyismqqydvAapKiJGj9Be9
XMrqpHbcYKP8BkTESieBSR5Kgm1FydEYYchZm58GBtQaLFbnkSGsyB2akwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9JJPehF1xxIuKepMmvBIa0lJoOMB8GA1UdIwQY
MBaAFJrq+pbJ1WPmULpZL/sG4s7raghZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWIt
MWYwMDczN2NiMmEyLzEvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWItMWYwMDczN2NiMmEy
LzEvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNttzv7L
OGcHbuIy1efUyjPuL6w4ljGxbnZucnzrTKO7FFbciWq+0BCW5N8W5H/kdnLPQxc4
WGJ2Jurk5pNCI3V1qRcmAoPc2Brhyb9FhH79nfgHLeymsS5xo4IHC+LBpBKliEKt
dZOnErXWwPXLwHBSG6W6QKEF4Sm/w9K296eJWWXFO3bQx41oxAwvNyRDwfvtUBCr
r8dISPsUShHQPVtDD0B3UjeVBQRKVoDEzEDySwLQRcN4RjjCQy96/BJ7YXb5yCyO
fP5hM78WGsWXUqcfKW6d4cdjKc7BLOiAH/RcOCeGNRm59d6Ze/GIYWCTfwosAnpA
htOxsHNCoWPjtQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:44 2025 by rpki-client