Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: 6W1Cb9uNlruyU3TegW43PgKZYv7Nhwfx0JKNU/ofW1k=
Subject key identifier: 7F:3A:A9:BE:7E:A9:66:DC:E2:91:B0:A3:E2:D9:EA:45:E3:B3:88:27
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 0196741E552C68A260E5812846F32C5A44F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: 01BA
Signing time: Sat 26 Apr 2025 22:01:07 +0000
Manifest this update: Sat 26 Apr 2025 22:01:07 +0000
Manifest next update: Sun 27 Apr 2025 22:01:07 +0000
Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: Fj+974/8FIpsUokSml/8/Ou+N6GGhseRI7j809Kz2d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:55:2c:68:a2:60:e5:81:28:46:f3:2c:5a:44:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Apr 26 22:01:07 2025 GMT
Not After : Apr 27 22:01:07 2025 GMT
Subject: CN=7f3aa9be7ea966dce291b0a3e2d9ea45e3b38827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:86:fd:41:54:cc:5e:e6:45:14:ac:eb:a6:
79:b6:62:5f:24:9e:ed:55:34:c4:27:de:ed:cc:7f:
47:0a:0f:6e:1c:b6:54:dc:9d:d9:a7:8f:06:68:4e:
f3:02:09:3b:96:6e:49:ad:16:18:48:4a:64:ed:c8:
5a:6d:00:9e:42:05:1d:ad:b8:8f:9e:d7:93:8f:0e:
ad:05:d8:7a:bb:4e:bd:99:c9:a0:e3:d2:6e:df:74:
c1:f5:3a:ee:fb:1b:56:92:35:ff:d5:89:65:e6:f5:
64:40:20:e5:e4:a2:ab:c1:d3:6c:4e:b2:74:6b:8f:
f7:02:f6:4a:c8:d6:88:2d:40:60:be:73:7a:ef:86:
6b:d8:fc:47:34:34:30:11:2f:5a:d5:87:ca:e9:11:
3b:53:ea:73:4e:fe:0a:c5:48:8d:60:e8:28:6c:27:
1b:1a:31:f1:12:c8:41:f9:7b:ea:9c:6e:62:6f:1f:
0a:47:d7:6c:50:07:53:55:6f:94:d0:79:38:fe:3f:
60:21:f3:4a:ed:f5:cb:14:38:5a:8c:f7:18:96:5c:
2a:1e:24:19:d7:f9:52:0b:92:91:3a:02:7a:1c:6d:
f0:14:5d:0d:f0:75:1c:c7:90:9b:ef:e0:31:80:00:
6c:be:4f:2b:8a:d1:00:51:2c:14:28:8e:49:68:56:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:A9:BE:7E:A9:66:DC:E2:91:B0:A3:E2:D9:EA:45:E3:B3:88:27
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:d9:fc:e5:0b:02:23:16:b9:95:81:4a:45:5b:45:d6:1a:
be:70:11:ed:6b:d6:d8:bb:07:38:83:f8:4b:e5:ac:5e:1f:0e:
6f:a4:1b:d5:44:fc:ee:6a:1b:8c:36:d6:7f:43:8f:5b:1d:92:
1b:37:fa:80:fa:35:d2:e2:be:b3:47:45:72:88:1d:d1:6f:c5:
31:31:a5:f1:c3:40:ce:2a:8f:cb:3b:c7:a0:ea:26:c6:c3:00:
d6:0c:99:1e:8e:31:a8:56:8b:a6:da:02:1f:2f:b5:e4:cf:c3:
52:d3:99:a3:3e:4b:7b:ad:30:6b:68:1e:57:7f:d0:ad:88:a6:
31:46:66:91:96:4e:f8:69:86:89:09:5c:61:b4:61:6e:5b:72:
55:77:5f:32:fe:01:0f:ee:7a:6d:eb:25:c7:59:59:39:5c:87:
2b:06:4f:d1:d8:25:d7:35:e0:94:a3:72:cf:48:fe:2d:83:61:
2a:b1:10:3e:bb:9a:99:54:21:2c:b1:73:b2:c9:5c:fb:91:1d:
06:81:fb:82:10:52:55:ea:94:ab:2d:b1:69:49:2b:93:72:36:
24:cf:e1:a6:ed:78:5b:db:13:90:33:4d:fd:65:44:31:fb:a2:
62:3d:75:91:19:53:60:06:71:c6:13:97:72:56:a6:df:03:39:
aa:86:be:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HlUsaKJg5YEoRvMsWkT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh
ZGQzNmYwHhcNMjUwNDI2MjIwMTA3WhcNMjUwNDI3MjIwMTA3WjAzMTEwLwYDVQQD
Eyg3ZjNhYTliZTdlYTk2NmRjZTI5MWIwYTNlMmQ5ZWE0NWUzYjM4ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a+G/UFUzF7mRRSs66Z5tmJfJJ7t
VTTEJ97tzH9HCg9uHLZU3J3Zp48GaE7zAgk7lm5JrRYYSEpk7chabQCeQgUdrbiP
nteTjw6tBdh6u069mcmg49Ju33TB9Tru+xtWkjX/1Yll5vVkQCDl5KKrwdNsTrJ0
a4/3AvZKyNaILUBgvnN674Zr2PxHNDQwES9a1YfK6RE7U+pzTv4KxUiNYOgobCcb
GjHxEshB+XvqnG5ibx8KR9dsUAdTVW+U0Hk4/j9gIfNK7fXLFDhajPcYllwqHiQZ
1/lSC5KROgJ6HG3wFF0N8HUcx5Cb7+AxgABsvk8ritEAUSwUKI5JaFZhiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH86qb5+qWbc4pGwo+LZ6kXjs4gnMB8GA1UdIwQY
MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt
YzA0MDQ0MzdlODViLzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi
LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW7Z/OUL
AiMWuZWBSkVbRdYavnAR7WvW2LsHOIP4S+WsXh8Ob6Qb1UT87mobjDbWf0OPWx2S
Gzf6gPo10uK+s0dFcogd0W/FMTGl8cNAziqPyzvHoOomxsMA1gyZHo4xqFaLptoC
Hy+15M/DUtOZoz5Le60wa2geV3/QrYimMUZmkZZO+GmGiQlcYbRhbltyVXdfMv4B
D+56beslx1lZOVyHKwZP0dgl1zXglKNyz0j+LYNhKrEQPruamVQhLLFzsslc+5Ed
BoH7ghBSVeqUqy2xaUkrk3I2JM/hpu14W9sTkDNN/WVEMfuiYj11kRlTYAZxxhOX
clam3wM5qoa+Sg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:20 2025 by rpki-client