Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File: MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier: 6gycWp8pw1ofp+Z0ULXtETgEgNf8z3RFdGcDAyk+Q9Q=
Subject key identifier: 23:F5:7A:6F:F5:A6:20:56:12:73:58:E8:13:8A:6F:D2:4F:96:74:E4
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 0196827E179AC9278B82DD28A7B340FABCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 17:00:23 +0000
Manifest this update: Tue 29 Apr 2025 17:00:23 +0000
Manifest next update: Wed 30 Apr 2025 17:00:23 +0000
Files and hashes: 1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: hpUC+l18Va730kVPXak0a2S75wOgZMwk5yBVTYuNMYw=)
2: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (hash: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:17:9a:c9:27:8b:82:dd:28:a7:b3:40:fa:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Apr 29 17:00:23 2025 GMT
Not After : Apr 30 17:00:23 2025 GMT
Subject: CN=23f57a6ff5a62056127358e8138a6fd24f9674e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:c4:17:bf:03:52:7f:d4:95:de:6d:2a:e5:
b3:33:78:5e:9d:e9:fb:70:22:d0:1e:22:69:f3:23:
66:a2:2c:24:b5:08:31:9c:21:2a:83:cf:07:7c:5b:
57:9e:4f:35:61:d8:c6:01:ec:14:c0:ea:87:f0:e6:
26:5a:df:09:d3:64:35:72:55:00:e7:20:3c:68:00:
85:74:0e:88:9d:c7:1e:c4:a1:89:f5:6d:b3:9d:9c:
a2:a3:62:3c:43:5e:03:0a:80:5d:34:f0:95:af:4f:
8d:dc:de:b7:f5:35:89:0f:37:b8:9a:ed:53:7a:43:
35:37:b6:e0:9a:81:05:da:d4:cc:41:08:08:9f:4f:
10:9d:77:f3:66:be:40:1d:80:c9:d1:a3:9e:10:7d:
7a:15:70:06:63:fe:74:8a:b0:f7:9e:f9:04:c8:97:
6b:ea:c9:28:bb:08:aa:0d:32:17:2b:54:ae:b9:5e:
fe:be:a0:fa:97:5b:2c:23:82:52:e2:f9:9c:75:a1:
47:9d:23:43:ff:a8:ad:e7:59:ae:47:84:49:a4:4e:
83:16:f8:8e:02:a9:79:f8:a3:e0:67:a0:88:9a:92:
d7:51:e9:7a:00:d5:01:9e:c6:11:06:61:4c:08:e1:
4b:e0:f4:56:30:dd:cf:0f:a2:b7:34:76:83:e5:4e:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:7A:6F:F5:A6:20:56:12:73:58:E8:13:8A:6F:D2:4F:96:74:E4
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:32:69:73:78:88:c6:78:a7:0d:c8:e7:09:72:0c:eb:d8:a6:
e5:0d:89:bc:af:c6:28:7d:3f:4d:c7:6d:27:34:4a:fa:0e:0b:
0b:ae:e4:da:e0:33:e8:2a:7d:51:ce:64:c7:17:1f:ad:b5:e4:
d3:f2:8b:f3:6a:4a:58:b6:91:c4:95:4b:95:f1:4c:fa:8a:bf:
30:b6:f3:8c:fd:93:b2:31:ee:42:79:e9:9f:d3:44:c0:ea:03:
db:8b:b0:24:e5:fc:60:d8:28:e3:65:79:cf:49:53:56:9b:2e:
b3:ef:66:e0:fe:67:ef:46:cb:1f:f2:e6:12:17:00:e5:8e:19:
dc:1f:09:90:9a:f4:ef:ba:b2:b5:f1:89:8a:ec:89:0e:48:28:
b3:6e:24:f8:84:46:9c:b6:b5:7a:35:20:d6:3f:27:62:c6:19:
c6:81:d5:0f:6c:41:32:71:e8:86:00:a8:7d:a8:97:27:65:29:
8c:e6:30:9a:5e:c7:da:af:8d:15:51:02:bb:7b:e1:24:e2:a2:
9e:da:6b:35:b2:b7:9b:3f:ba:44:42:27:ce:85:9d:6a:c3:74:
24:d8:b3:7e:08:4d:66:45:03:1e:43:1a:3a:39:64:87:8b:12:
06:b0:a5:f0:6d:c1:f1:ba:dc:42:6b:08:ac:8c:a1:49:12:a2:
72:93:1f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfheaySeLgt0op7NA+rziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNTRiYjZlOWY3ODAxMWI4Y2M1ZDNmMjNiNzBiNjZjZjY5
NzlhYTcwHhcNMjUwNDI5MTcwMDIzWhcNMjUwNDMwMTcwMDIzWjAzMTEwLwYDVQQD
EygyM2Y1N2E2ZmY1YTYyMDU2MTI3MzU4ZTgxMzhhNmZkMjRmOTY3NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl/EF78DUn/Uld5tKuWzM3henen7
cCLQHiJp8yNmoiwktQgxnCEqg88HfFtXnk81YdjGAewUwOqH8OYmWt8J02Q1clUA
5yA8aACFdA6InccexKGJ9W2znZyio2I8Q14DCoBdNPCVr0+N3N639TWJDze4mu1T
ekM1N7bgmoEF2tTMQQgIn08QnXfzZr5AHYDJ0aOeEH16FXAGY/50irD3nvkEyJdr
6skouwiqDTIXK1SuuV7+vqD6l1ssI4JS4vmcdaFHnSND/6it51muR4RJpE6DFviO
Aql5+KPgZ6CImpLXUel6ANUBnsYRBmFMCOFL4PRWMN3PD6K3NHaD5U79ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP1em/1piBWEnNY6BOKb9JPlnTkMB8GA1UdIwQY
MBaAFDBUu26feAEbjMXT8jtwtmz2l5qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZTN2JwOTRBUnVNeGRQeU8zQzJiUGFYbXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMWM5MzctZTc2Ny00YWIxLThjNWMt
MDk1MjU4OWI4YjU5LzEvTUZTN2JwOTRBUnVNeGRQeU8zQzJiUGFYbXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMWM5MzctZTc2Ny00YWIxLThjNWMtMDk1MjU4OWI4YjU5
LzEvTUZTN2JwOTRBUnVNeGRQeU8zQzJiUGFYbXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzJpc3iI
xninDcjnCXIM69im5Q2JvK/GKH0/TcdtJzRK+g4LC67k2uAz6Cp9Uc5kxxcfrbXk
0/KL82pKWLaRxJVLlfFM+oq/MLbzjP2TsjHuQnnpn9NEwOoD24uwJOX8YNgo42V5
z0lTVpsus+9m4P5n70bLH/LmEhcA5Y4Z3B8JkJr077qytfGJiuyJDkgos24k+IRG
nLa1ejUg1j8nYsYZxoHVD2xBMnHohgCofaiXJ2UpjOYwml7H2q+NFVECu3vhJOKi
ntprNbK3mz+6REInzoWdasN0JNizfghNZkUDHkMaOjlkh4sSBrCl8G3B8brcQmsI
rIyhSRKicpMfUQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:58:27 2025 by rpki-client