Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: NO6PGw3/HRBlRDwMOQE7sYqr7h77bgtMSEGbegcju4o=
Subject key identifier: 4E:3F:CC:04:4D:10:43:63:E5:F9:75:1E:22:AC:CE:BD:51:28:7A:D2
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 01967F462DB67068B2F34FCA4E1BE1C5517B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 02:00:27 +0000
Manifest this update: Tue 29 Apr 2025 02:00:27 +0000
Manifest next update: Wed 30 Apr 2025 02:00:27 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: FpDao1FTZNBcz6cgCscJzYkw38SlmAp0uJ+5rnzWFuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:2d:b6:70:68:b2:f3:4f:ca:4e:1b:e1:c5:51:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Apr 29 02:00:27 2025 GMT
Not After : Apr 30 02:00:27 2025 GMT
Subject: CN=4e3fcc044d104363e5f9751e22accebd51287ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:e5:7c:ec:9f:01:8f:f4:1d:5e:02:c1:ab:
f8:2e:28:fe:16:31:ae:68:1d:64:a8:73:b0:e9:60:
b7:d0:e9:aa:d2:be:bb:55:76:73:a2:76:0a:38:25:
db:03:7e:a4:24:ad:af:9f:74:90:61:cc:a5:b1:c9:
b2:4b:7d:cc:8f:ce:f2:52:7e:b8:61:14:31:f7:d0:
a4:3a:6d:10:86:5e:87:e7:54:91:1a:32:83:90:4f:
48:c5:e4:2f:d0:29:bc:aa:ad:3e:5b:a2:7e:bd:d6:
49:49:76:7d:f2:22:89:a9:61:b9:78:53:e9:7a:f9:
a0:b4:99:4f:9d:fc:db:67:53:85:f8:2d:5b:72:4c:
94:03:a5:80:7c:f7:ca:5f:5b:41:a3:fa:82:8d:0c:
1c:92:0a:11:64:9f:86:5c:fc:8f:30:ee:13:25:dd:
d3:62:c4:de:57:a1:05:db:40:70:04:1b:55:ae:29:
6d:8b:b4:b5:d7:63:a5:1d:2b:69:05:fe:10:cc:38:
ab:49:a1:ba:6f:dc:5e:58:6b:af:cd:d3:8a:54:ff:
02:87:35:ff:1e:fa:d0:39:c4:3d:33:fe:ed:cf:97:
d6:7b:63:84:9d:01:1e:c7:9c:0c:0f:f5:74:70:72:
2e:5a:82:14:0b:ec:4b:6c:2b:09:d4:76:04:1f:c6:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:CC:04:4D:10:43:63:E5:F9:75:1E:22:AC:CE:BD:51:28:7A:D2
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:f0:47:84:4c:76:19:a8:35:db:a7:7e:c7:66:ec:76:7c:
3b:bc:1a:18:eb:39:1a:39:2c:ad:1e:54:60:85:36:e0:b7:24:
77:ab:16:01:55:66:88:94:8c:41:02:53:4b:a7:59:c4:5d:3b:
cd:1b:33:38:d9:d0:04:4b:67:02:af:e7:1e:e0:f8:c0:b3:c7:
ec:5c:df:ef:17:13:09:f6:0e:f5:2f:fd:ba:8a:e6:c6:33:c1:
de:ef:a2:11:8e:0d:aa:f2:f1:7b:e5:8f:05:a3:e9:4d:5c:56:
e0:03:13:8a:2e:a6:97:96:ca:c7:cc:85:d0:d8:ee:38:c5:d5:
59:6c:d8:a4:98:0f:71:d1:2d:c2:23:00:ac:a2:a9:42:c4:ef:
b4:84:84:a7:37:fa:67:8a:3f:56:ec:5a:40:a4:49:01:2b:47:
96:bb:e1:01:3a:f1:38:f4:10:51:0a:30:2e:a5:88:5e:c6:61:
bf:b2:f5:f8:de:f5:5f:48:47:42:35:ef:ff:6e:08:3d:34:f0:
f7:3b:18:71:e5:aa:f2:06:50:0b:0d:79:c3:9c:92:ff:b0:cc:
47:e7:66:f8:76:7e:03:fe:c1:c1:fd:d7:e3:fa:02:e2:7d:2d:
14:89:a0:81:de:15:b7:7b:74:95:0d:37:1b:50:f0:72:dc:58:
f4:6e:f5:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/Ri22cGiy80/KThvhxVF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz
NGVhZTUwHhcNMjUwNDI5MDIwMDI3WhcNMjUwNDMwMDIwMDI3WjAzMTEwLwYDVQQD
Eyg0ZTNmY2MwNDRkMTA0MzYzZTVmOTc1MWUyMmFjY2ViZDUxMjg3YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5nlfOyfAY/0HV4Cwav4Lij+FjGu
aB1kqHOw6WC30Omq0r67VXZzonYKOCXbA36kJK2vn3SQYcylscmyS33Mj87yUn64
YRQx99CkOm0Qhl6H51SRGjKDkE9IxeQv0Cm8qq0+W6J+vdZJSXZ98iKJqWG5eFPp
evmgtJlPnfzbZ1OF+C1bckyUA6WAfPfKX1tBo/qCjQwckgoRZJ+GXPyPMO4TJd3T
YsTeV6EF20BwBBtVrilti7S112OlHStpBf4QzDirSaG6b9xeWGuvzdOKVP8ChzX/
HvrQOcQ9M/7tz5fWe2OEnQEex5wMD/V0cHIuWoIUC+xLbCsJ1HYEH8Z8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4/zARNEENj5fl1HiKszr1RKHrSMB8GA1UdIwQY
MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt
YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm
LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViLwR4RM
dhmoNdunfsdm7HZ8O7waGOs5GjksrR5UYIU24Lckd6sWAVVmiJSMQQJTS6dZxF07
zRszONnQBEtnAq/nHuD4wLPH7Fzf7xcTCfYO9S/9uormxjPB3u+iEY4NqvLxe+WP
BaPpTVxW4AMTii6ml5bKx8yF0NjuOMXVWWzYpJgPcdEtwiMArKKpQsTvtISEpzf6
Z4o/VuxaQKRJAStHlrvhATrxOPQQUQowLqWIXsZhv7L1+N71X0hHQjXv/24IPTTw
9zsYceWq8gZQCw15w5yS/7DMR+dm+HZ+A/7Bwf3X4/oC4n0tFImggd4Vt3t0lQ03
G1DwctxY9G71gA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:24 2025 by rpki-client