Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: VBl+eknO3DV2dMWzUcmJMix71b0d2BOSwwQiGEUt05U=
Subject key identifier: F5:4E:BC:D7:3F:49:6A:AE:0F:41:0B:F0:52:BF:AC:B3:EF:DD:69:64
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019673E6F93C3108E59511003DDF6BC45202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0B90
Signing time: Sat 26 Apr 2025 21:00:38 +0000
Manifest this update: Sat 26 Apr 2025 21:00:38 +0000
Manifest next update: Sun 27 Apr 2025 21:00:38 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: 3BSavZq54akL30J/1Llrlkf2D91jWebEv+iNPElVZXk=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:f9:3c:31:08:e5:95:11:00:3d:df:6b:c4:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Apr 26 21:00:38 2025 GMT
Not After : Apr 27 21:00:38 2025 GMT
Subject: CN=f54ebcd73f496aae0f410bf052bfacb3efdd6964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:81:a6:f7:dd:65:10:06:67:bb:23:58:b8:
59:0a:a0:d8:92:b1:b1:9f:c7:fb:12:50:d8:a1:6f:
2e:3f:96:9e:e9:5e:de:15:21:2b:7f:c8:2f:cc:18:
83:ee:86:68:3a:fc:63:e7:22:06:29:f8:3f:12:54:
b6:fc:1e:4c:5b:9a:48:b7:79:cb:80:bd:d0:5e:0e:
d0:de:1a:b7:e6:1a:d5:46:9f:84:e3:74:c4:62:2a:
49:e5:bf:47:dd:8c:75:ac:59:aa:18:eb:73:23:ce:
3b:3e:43:1f:db:04:bc:a2:9d:4d:8d:a9:7f:ce:be:
5a:4e:e2:6d:f4:d0:cd:58:f4:de:73:b7:9f:35:84:
ab:a8:13:42:3d:b8:76:65:f1:c4:d1:cd:eb:5c:38:
a9:25:80:d2:0c:c1:07:85:9d:41:c6:73:ea:db:1e:
d7:81:70:04:e8:94:e3:07:6e:ed:54:b2:df:76:7c:
e2:d0:64:15:55:0f:42:de:96:b1:fa:2a:4f:2b:eb:
1f:89:82:f4:ca:75:2f:1c:87:26:23:bb:58:c1:ef:
f7:15:9d:f7:50:ec:91:b4:d7:be:c1:91:5c:43:8a:
af:95:93:fb:ce:d1:86:45:68:28:99:6b:c9:1f:b4:
25:12:13:3c:b1:cf:44:89:52:bd:1b:92:92:1b:57:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:BC:D7:3F:49:6A:AE:0F:41:0B:F0:52:BF:AC:B3:EF:DD:69:64
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f1:9d:db:c7:cc:4a:46:9c:1a:96:de:6e:1e:cd:00:d5:2f:
07:03:0a:25:92:41:b8:e9:de:42:9b:68:55:61:b3:7e:ab:56:
f5:71:1b:5f:26:80:31:fa:fd:0f:b1:b3:81:b9:c7:a1:ba:ae:
04:27:36:17:9b:fe:88:4e:88:cd:de:ba:19:59:78:94:e6:f4:
9b:71:73:8d:e0:6a:ae:42:81:23:fc:b3:d2:c9:1c:d9:3a:ab:
2b:7b:a1:bc:9e:18:66:e4:c6:8d:4b:95:64:7c:a2:ef:05:15:
21:a5:3a:07:0d:53:5a:5c:06:55:eb:ff:d5:c6:de:71:61:4e:
fd:70:5b:17:7e:59:4c:f2:48:be:3d:f0:42:af:16:ca:5a:5d:
02:6f:17:39:ef:51:65:58:72:76:28:42:48:76:8e:7f:06:33:
bc:43:c3:0a:33:cd:ec:c9:e3:91:3e:f2:88:6b:f3:47:cb:8a:
71:23:0d:92:92:2a:39:1d:c7:f6:f7:42:e1:db:88:bd:c5:f1:
81:34:11:6f:ce:7b:9e:59:41:32:eb:4c:ce:74:6d:50:94:da:
82:fd:cf:b5:6c:bd:5a:50:10:e8:3a:5f:cd:4c:45:bc:60:55:
97:d3:d6:bb:6f:db:7a:92:b3:0a:36:44:f0:58:5d:a4:24:18:
af:76:f8:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5vk8MQjllREAPd9rxFICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx
ZGQ3ZjAwHhcNMjUwNDI2MjEwMDM4WhcNMjUwNDI3MjEwMDM4WjAzMTEwLwYDVQQD
EyhmNTRlYmNkNzNmNDk2YWFlMGY0MTBiZjA1MmJmYWNiM2VmZGQ2OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKuBpvfdZRAGZ7sjWLhZCqDYkrGx
n8f7ElDYoW8uP5ae6V7eFSErf8gvzBiD7oZoOvxj5yIGKfg/ElS2/B5MW5pIt3nL
gL3QXg7Q3hq35hrVRp+E43TEYipJ5b9H3Yx1rFmqGOtzI847PkMf2wS8op1Njal/
zr5aTuJt9NDNWPTec7efNYSrqBNCPbh2ZfHE0c3rXDipJYDSDMEHhZ1BxnPq2x7X
gXAE6JTjB27tVLLfdnzi0GQVVQ9C3pax+ipPK+sfiYL0ynUvHIcmI7tYwe/3FZ33
UOyRtNe+wZFcQ4qvlZP7ztGGRWgomWvJH7QlEhM8sc9EiVK9G5KSG1c8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVOvNc/SWquD0EL8FK/rLPv3WlkMB8GA1UdIwQY
MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt
YTRmN2IwODhiYzFhLzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh
LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPGd28fM
SkacGpbebh7NANUvBwMKJZJBuOneQptoVWGzfqtW9XEbXyaAMfr9D7GzgbnHobqu
BCc2F5v+iE6Izd66GVl4lOb0m3FzjeBqrkKBI/yz0skc2TqrK3uhvJ4YZuTGjUuV
ZHyi7wUVIaU6Bw1TWlwGVev/1cbecWFO/XBbF35ZTPJIvj3wQq8WylpdAm8XOe9R
ZVhydihCSHaOfwYzvEPDCjPN7MnjkT7yiGvzR8uKcSMNkpIqOR3H9vdC4duIvcXx
gTQRb857nllBMutMznRtUJTagv3PtWy9WlAQ6DpfzUxFvGBVl9PWu2/bepKzCjZE
8FhdpCQYr3b4XQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:12:18 2025 by rpki-client