Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File: MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier: Tnl8nqqBDXeeGnHmKi8VRTF1UGTh/9OdgJzQzHU75AY=
Subject key identifier: 1B:ED:8C:D1:0A:C7:FE:9F:A1:DE:CD:C1:38:72:DB:0C:67:CC:EE:F3
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0196718B1631726C4761ECC748906ABBF446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number: 0CD1
Signing time: Sat 26 Apr 2025 10:01:02 +0000
Manifest this update: Sat 26 Apr 2025 10:01:02 +0000
Manifest next update: Sun 27 Apr 2025 10:01:02 +0000
Files and hashes: 1: HqEtipzQowxTqcDrA6YD2PAM22k.roa (hash: +TySDtYTZSAF4An5pdiKoQwn0LwGdYxQZAyZ18GrAFU=)
2: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: yicAfBJRnEDtw07V4tcpSAGzqHAgmeqXopqlGFE08Qs=)
3: N-IkqmIl8KlWw01vFtAZ-uos0pY.roa (hash: YeMMYzZTCS8ByuvcJi0c6d7AtfKEEZ2nt+xBnMZjmqQ=)
4: SXPqMjJIqIiiKMiICnz-R2huK7A.roa (hash: VBPweWvhbagfxdIj/U/h3DiF8G4gGJiOVx2OPYGVAl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8b:16:31:72:6c:47:61:ec:c7:48:90:6a:bb:f4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Apr 26 10:01:02 2025 GMT
Not After : Apr 27 10:01:02 2025 GMT
Subject: CN=1bed8cd10ac7fe9fa1decdc13872db0c67cceef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:4b:74:cd:81:43:26:d0:0b:8a:b2:7c:4e:
80:7a:3b:e0:af:ab:dd:99:d9:b7:35:bc:4b:18:c2:
83:f1:3b:19:12:09:3b:23:d7:92:62:d0:1b:89:ea:
37:5f:7f:ec:db:3f:3f:06:6d:79:5f:2c:41:3b:c6:
65:92:a1:4d:bd:93:2d:19:d1:a7:c8:4a:7e:f1:b8:
d1:ec:3a:e3:78:f9:65:dc:09:32:3c:ea:67:7d:9a:
b0:ce:aa:fc:ac:16:75:ab:22:c2:d8:43:c3:d2:48:
55:89:09:8b:02:a1:2b:3b:c0:e6:a0:f5:31:de:4d:
b3:d7:1f:27:d2:45:5d:89:4e:0b:ce:7f:48:3d:e2:
6d:59:81:2f:d2:37:bf:27:79:e4:57:74:82:ed:3b:
0b:2b:de:11:8b:84:8b:f2:c1:b2:60:aa:a2:a0:05:
61:29:1b:b7:80:99:16:84:2d:57:47:a9:55:93:d5:
c4:8e:57:a3:66:c6:71:50:16:cc:eb:d8:1c:c6:5f:
72:b3:c4:eb:5c:97:22:dd:b7:1a:34:fd:52:37:e7:
0c:39:56:99:01:19:e9:cd:8c:48:aa:e4:d5:2b:c1:
24:b6:f8:d9:62:f2:e1:2a:ee:83:67:2f:44:97:99:
ec:2e:5d:19:24:f2:3b:5c:4d:ee:87:3a:66:c6:c2:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:8C:D1:0A:C7:FE:9F:A1:DE:CD:C1:38:72:DB:0C:67:CC:EE:F3
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dd:88:bb:6e:41:13:08:a2:d7:bb:91:c7:ba:2b:06:4a:b6:
6d:88:48:7e:3f:39:92:58:64:26:89:bf:61:5c:d2:7e:e1:80:
7f:92:a7:5e:59:e3:5b:84:f9:35:3d:e3:70:ae:19:c4:85:d9:
f2:a6:bc:65:4d:47:8f:16:ff:e1:75:b5:65:b0:f4:32:a6:d8:
2f:a0:95:87:3f:df:0a:42:06:55:2c:65:4a:5e:97:3c:8e:f3:
e7:c3:a7:58:f2:16:2c:8e:04:89:f6:2c:42:97:1c:92:1f:2f:
d1:70:f6:ba:46:5a:88:96:d8:94:36:50:82:51:f2:99:47:d4:
ea:a7:5e:5a:5f:77:73:ef:96:3c:40:24:b3:9d:3c:c1:9e:b1:
7e:74:5d:be:fe:1d:20:78:32:75:73:2d:02:4d:50:23:2b:f2:
f9:32:72:cb:7f:ba:11:bd:ae:61:df:d8:d7:cb:8f:19:a7:49:
d0:44:b1:57:50:15:77:1e:8b:7d:d5:70:85:0d:bf:55:dd:5a:
72:76:b7:5b:5a:18:13:75:64:14:2a:f0:b0:88:8d:d3:28:db:
a8:56:94:12:a0:93:31:99:db:af:9f:ab:a9:2d:87:d3:59:fa:
1a:6b:23:8e:95:36:89:69:a9:97:c2:39:5e:c8:39:0c:65:a9:
7c:a5:11:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxixYxcmxHYezHSJBqu/RGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjY4MDZhNmI4ZGFjNjhjMmEzMmI2NTg0OTIyOTUyNGZj
MzNkYTcwHhcNMjUwNDI2MTAwMTAyWhcNMjUwNDI3MTAwMTAyWjAzMTEwLwYDVQQD
EygxYmVkOGNkMTBhYzdmZTlmYTFkZWNkYzEzODcyZGIwYzY3Y2NlZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+BLdM2BQybQC4qyfE6Aejvgr6vd
mdm3NbxLGMKD8TsZEgk7I9eSYtAbieo3X3/s2z8/Bm15XyxBO8ZlkqFNvZMtGdGn
yEp+8bjR7DrjePll3AkyPOpnfZqwzqr8rBZ1qyLC2EPD0khViQmLAqErO8DmoPUx
3k2z1x8n0kVdiU4Lzn9IPeJtWYEv0je/J3nkV3SC7TsLK94Ri4SL8sGyYKqioAVh
KRu3gJkWhC1XR6lVk9XEjlejZsZxUBbM69gcxl9ys8TrXJci3bcaNP1SN+cMOVaZ
ARnpzYxIquTVK8EktvjZYvLhKu6DZy9El5nsLl0ZJPI7XE3uhzpmxsKP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvtjNEKx/6fod7NwThy2wxnzO7zMB8GA1UdIwQY
MBaAFDAmgGprjaxowqMrZYSSKVJPwz2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNhQWFtdU5yR2pDb3l0bGhKSXBVa19EUGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZGNhMGUtYTQxYi00OTcyLWJiYjUt
MDhlMmIxMDE3OTI3LzEvTUNhQWFtdU5yR2pDb3l0bGhKSXBVa19EUGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85ZGNhMGUtYTQxYi00OTcyLWJiYjUtMDhlMmIxMDE3OTI3
LzEvTUNhQWFtdU5yR2pDb3l0bGhKSXBVa19EUGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt2Iu25B
Ewii17uRx7orBkq2bYhIfj85klhkJom/YVzSfuGAf5KnXlnjW4T5NT3jcK4ZxIXZ
8qa8ZU1Hjxb/4XW1ZbD0MqbYL6CVhz/fCkIGVSxlSl6XPI7z58OnWPIWLI4EifYs
Qpcckh8v0XD2ukZaiJbYlDZQglHymUfU6qdeWl93c++WPEAks508wZ6xfnRdvv4d
IHgydXMtAk1QIyvy+TJyy3+6Eb2uYd/Y18uPGadJ0ESxV1AVdx6LfdVwhQ2/Vd1a
cna3W1oYE3VkFCrwsIiN0yjbqFaUEqCTMZnbr5+rqS2H01n6GmsjjpU2iWmpl8I5
Xsg5DGWpfKURPg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:43 2025 by rpki-client