Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: ifJ7TE9x1gn5XJ8gEPoSn4F5boq7I4rk1j6+dsm+4Qk=
Subject key identifier: 7C:40:C4:7F:3F:F6:2D:44:CC:CD:3B:2F:3C:FF:BE:B4:71:44:8F:F0
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019686FFC9EAC29C3A844BF7EE1C6874597D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 14:00:32 +0000
Manifest this update: Wed 30 Apr 2025 14:00:32 +0000
Manifest next update: Thu 01 May 2025 14:00:32 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: Wwr6eTEB2n3IpmMLIuy4CUtEe9YFI6w8l8LbCt5kf4A=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:c9:ea:c2:9c:3a:84:4b:f7:ee:1c:68:74:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Apr 30 14:00:32 2025 GMT
Not After : May 1 14:00:32 2025 GMT
Subject: CN=7c40c47f3ff62d44cccd3b2f3cffbeb471448ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:f3:90:0a:f8:84:27:30:c0:21:6f:5a:1e:
af:4b:04:08:4b:ca:26:d1:82:b9:d4:36:36:5b:9d:
90:08:ed:0d:9c:23:55:bb:1d:94:bc:09:17:d3:43:
f1:44:61:4a:3a:f6:59:58:d1:91:27:6b:1d:64:fd:
f9:70:07:4a:a9:79:cc:3e:85:ea:52:fe:f3:14:23:
ee:df:f7:2d:0e:1a:b2:6c:30:c6:a4:e4:ac:54:a7:
c9:be:0d:f6:a8:95:fc:47:3c:b9:5d:0b:ef:7d:bd:
f7:4c:d2:0c:ec:7f:67:40:96:37:c7:0b:1c:51:2f:
2c:f8:e4:10:7c:2d:fc:d1:f6:e1:56:d6:22:9a:f2:
50:17:20:cb:0a:40:61:15:2b:9c:29:82:95:38:65:
5a:be:8b:0a:a8:26:6b:0e:59:dd:7b:13:21:c4:a7:
3b:fb:e2:b9:ad:40:17:73:42:86:a9:b5:77:42:68:
95:95:b8:3c:0a:6d:5e:a1:cb:73:03:c7:39:37:4f:
29:3d:ba:67:6c:cd:60:34:ca:15:19:df:21:fb:61:
8a:dc:ba:42:7e:c5:bd:da:06:32:dc:b1:5f:6f:e4:
8a:ab:8e:2f:cc:de:bb:e4:7b:58:7b:dd:e5:3c:ac:
80:5c:ce:f8:2f:2b:fe:78:bf:7e:b4:2b:5a:1e:ad:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:C4:7F:3F:F6:2D:44:CC:CD:3B:2F:3C:FF:BE:B4:71:44:8F:F0
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:6d:b2:74:db:e5:19:81:3f:03:a0:f8:5f:8b:25:82:6a:
1c:57:9b:0f:6b:c2:d7:a8:43:85:74:41:ee:ed:c3:9a:3c:f1:
63:01:82:b0:b1:b2:8c:7d:8d:2e:3d:9c:02:01:ea:9d:f2:bd:
70:27:18:a8:45:7a:4f:e4:a4:7b:4e:f0:c5:a0:26:da:59:37:
b5:ea:e1:b5:20:e8:c5:05:86:64:8f:3a:11:17:e3:78:0c:0c:
ba:c0:c2:a1:e6:42:f5:6c:47:d0:10:4f:b7:a6:4c:57:d6:e6:
6f:4a:2d:47:33:c2:7d:0f:a4:6e:07:8e:f9:5e:a7:1f:11:c1:
b3:e2:5a:bc:bc:7b:38:20:5a:37:e4:f0:9d:51:58:6f:3f:62:
fe:bd:28:d5:b0:5b:e7:4e:be:34:92:d0:10:a6:b7:b3:c8:76:
aa:57:f9:28:94:60:b4:d1:3c:29:98:df:f5:16:9c:35:17:fb:
58:d2:28:a8:24:5f:11:32:48:f0:44:c3:3b:d5:38:4a:65:3d:
51:47:b5:2a:54:fc:46:ee:47:c5:4c:c3:89:8e:58:15:75:48:
f0:98:6a:99:f0:ca:ec:b5:70:a4:2f:b4:98:bd:2a:a5:a1:1f:
b0:70:32:69:19:03:00:46:fb:b6:c6:a5:55:1c:87:b7:9f:a3:
1e:81:06:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG/8nqwpw6hEv37hxodFl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz
MWVmZDAwHhcNMjUwNDMwMTQwMDMyWhcNMjUwNTAxMTQwMDMyWjAzMTEwLwYDVQQD
Eyg3YzQwYzQ3ZjNmZjYyZDQ0Y2NjZDNiMmYzY2ZmYmViNDcxNDQ4ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlzzkAr4hCcwwCFvWh6vSwQIS8om
0YK51DY2W52QCO0NnCNVux2UvAkX00PxRGFKOvZZWNGRJ2sdZP35cAdKqXnMPoXq
Uv7zFCPu3/ctDhqybDDGpOSsVKfJvg32qJX8Rzy5XQvvfb33TNIM7H9nQJY3xwsc
US8s+OQQfC380fbhVtYimvJQFyDLCkBhFSucKYKVOGVavosKqCZrDlndexMhxKc7
++K5rUAXc0KGqbV3QmiVlbg8Cm1eoctzA8c5N08pPbpnbM1gNMoVGd8h+2GK3LpC
fsW92gYy3LFfb+SKq44vzN675HtYe93lPKyAXM74Lyv+eL9+tCtaHq0lqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxAxH8/9i1EzM07Lzz/vrRxRI/wMB8GA1UdIwQY
MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt
OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl
LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfg1tsnTb
5RmBPwOg+F+LJYJqHFebD2vC16hDhXRB7u3DmjzxYwGCsLGyjH2NLj2cAgHqnfK9
cCcYqEV6T+Ske07wxaAm2lk3terhtSDoxQWGZI86ERfjeAwMusDCoeZC9WxH0BBP
t6ZMV9bmb0otRzPCfQ+kbgeO+V6nHxHBs+JavLx7OCBaN+TwnVFYbz9i/r0o1bBb
506+NJLQEKa3s8h2qlf5KJRgtNE8KZjf9RacNRf7WNIoqCRfETJI8ETDO9U4SmU9
UUe1KlT8Ru5HxUzDiY5YFXVI8JhqmfDK7LVwpC+0mL0qpaEfsHAyaRkDAEb7tsal
VRyHt5+jHoEGxg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:45:29 2025 by rpki-client