Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: 2ncd6rmRNZexElRHiizupw7iTVXpjUJNV0p6MObhM9o=
Subject key identifier: 05:5C:26:DF:13:B1:9C:B6:E3:30:FA:E7:F2:43:4C:8C:7F:DB:F3:E2
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 01967FB421DE60C672997231DC2C9F9981F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 113D
Signing time: Tue 29 Apr 2025 04:00:33 +0000
Manifest this update: Tue 29 Apr 2025 04:00:33 +0000
Manifest next update: Wed 30 Apr 2025 04:00:33 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: lSXbV8HPwQ6oR4i7vpfIoOgudhXQK4A95z6Hl97ze2o=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:21:de:60:c6:72:99:72:31:dc:2c:9f:99:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Apr 29 04:00:33 2025 GMT
Not After : Apr 30 04:00:33 2025 GMT
Subject: CN=055c26df13b19cb6e330fae7f2434c8c7fdbf3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:6b:0e:83:73:a5:60:00:02:8d:ba:c3:40:
54:31:dc:d6:d8:8d:e6:73:54:a9:5b:5a:4a:7d:95:
59:55:1c:6a:bc:ad:29:8b:91:88:19:55:75:42:29:
c5:0c:cf:2e:56:51:a8:78:29:b8:54:31:1d:86:5e:
4a:95:a2:ea:32:9e:cd:d1:69:3a:e7:8a:89:13:42:
88:b4:f7:8b:7a:97:f3:70:f4:4a:f9:a4:0b:77:f5:
69:f4:35:fd:28:a5:ef:48:3c:d7:6b:a2:00:d5:3d:
95:9b:30:c4:12:09:fc:ed:5d:a0:3e:7c:cc:a5:7d:
d5:18:ee:bb:a1:d6:2e:23:d9:06:57:ea:21:82:4a:
c5:0f:18:22:c8:e7:c6:52:ad:5f:84:5f:dc:b5:b0:
50:9e:0a:df:37:21:98:9d:c2:6b:4a:56:69:c0:60:
d8:2f:54:4e:17:a5:6e:99:d9:1e:ab:41:10:2b:be:
a0:cd:7b:ae:f5:51:9e:5a:33:0b:27:f8:df:02:5c:
2b:a1:91:79:f0:d7:60:b3:a2:25:7b:dc:05:db:ec:
6c:d8:25:c6:64:5c:65:88:90:da:c6:89:bd:6f:da:
c0:52:ca:ae:e5:79:73:e5:75:f1:87:8e:90:f5:76:
bf:2c:93:07:00:ef:ae:69:c2:7c:25:31:42:87:6f:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:26:DF:13:B1:9C:B6:E3:30:FA:E7:F2:43:4C:8C:7F:DB:F3:E2
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:49:ab:64:c1:f0:5d:f8:0a:5d:a1:7c:ea:6e:5b:c6:12:e6:
0c:1d:75:f4:7d:e2:c2:8b:02:0b:9e:6b:d9:4d:cb:ae:78:8d:
91:f8:ad:ff:9b:80:9c:a9:2c:e2:57:cb:1a:0d:12:55:b5:de:
f2:13:8c:82:82:ca:ae:54:07:05:e5:3e:41:7f:07:60:3a:6e:
82:70:65:c8:42:0a:6d:2b:72:da:a0:e4:59:37:32:e6:0e:21:
c3:49:6f:2b:d3:85:9d:52:90:df:d2:f0:8d:d7:da:ce:ef:3d:
d2:13:cd:08:33:c0:bd:53:64:73:ef:2e:67:a8:49:f8:fe:2c:
ed:c4:45:8c:ca:5c:d8:e7:b8:18:dc:c2:c0:20:1a:b5:3f:83:
ae:eb:87:c4:63:1d:f9:fe:e7:2d:53:8a:e2:42:b5:43:62:96:
75:ea:fb:03:36:d1:51:9b:cd:7a:36:2d:52:ed:da:42:dd:81:
a7:0e:62:8b:6c:9b:af:68:3f:25:35:d9:7f:67:60:a1:65:72:
15:9c:8d:19:c0:c8:2a:b7:34:12:05:da:51:dc:fa:5d:95:9e:
ef:ac:72:70:22:b1:11:f8:7a:12:99:63:f8:cc:12:15:93:7e:
ac:34:13:6e:9d:ff:50:38:99:b4:9d:e2:8d:2a:9b:8c:d8:4f:
99:4d:aa:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tCHeYMZymXIx3CyfmYHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjUwNDI5MDQwMDMzWhcNMjUwNDMwMDQwMDMzWjAzMTEwLwYDVQQD
EygwNTVjMjZkZjEzYjE5Y2I2ZTMzMGZhZTdmMjQzNGM4YzdmZGJmM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNJrDoNzpWAAAo26w0BUMdzW2I3m
c1SpW1pKfZVZVRxqvK0pi5GIGVV1QinFDM8uVlGoeCm4VDEdhl5KlaLqMp7N0Wk6
54qJE0KItPeLepfzcPRK+aQLd/Vp9DX9KKXvSDzXa6IA1T2VmzDEEgn87V2gPnzM
pX3VGO67odYuI9kGV+ohgkrFDxgiyOfGUq1fhF/ctbBQngrfNyGYncJrSlZpwGDY
L1ROF6Vumdkeq0EQK76gzXuu9VGeWjMLJ/jfAlwroZF58Ndgs6Ile9wF2+xs2CXG
ZFxliJDaxom9b9rAUsqu5Xlz5XXxh46Q9Xa/LJMHAO+uacJ8JTFCh280ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVcJt8TsZy24zD65/JDTIx/2/PiMB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2EmrZMHw
XfgKXaF86m5bxhLmDB119H3iwosCC55r2U3LrniNkfit/5uAnKks4lfLGg0SVbXe
8hOMgoLKrlQHBeU+QX8HYDpugnBlyEIKbSty2qDkWTcy5g4hw0lvK9OFnVKQ39Lw
jdfazu890hPNCDPAvVNkc+8uZ6hJ+P4s7cRFjMpc2Oe4GNzCwCAatT+DruuHxGMd
+f7nLVOK4kK1Q2KWder7AzbRUZvNejYtUu3aQt2Bpw5ii2ybr2g/JTXZf2dgoWVy
FZyNGcDIKrc0EgXaUdz6XZWe76xycCKxEfh6Eplj+MwSFZN+rDQTbp3/UDiZtJ3i
jSqbjNhPmU2qWg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:20:48 2025 by rpki-client