Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: qOw4wsyCpQv9HS9HtTy+7UeSHX8WEUuYZ651JFcaGlY=
Subject key identifier: CE:6D:D8:8E:F3:31:0D:C8:68:B1:94:69:36:16:72:6C:E9:D5:F8:EA
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 01968134A81A9496B754824C2F949101418E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 11:00:33 +0000
Manifest this update: Tue 29 Apr 2025 11:00:33 +0000
Manifest next update: Wed 30 Apr 2025 11:00:33 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: yPau5fkJ2yVp7WMLxJjzAdYKoRg4CsGoTUtNxu3mSZE=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:a8:1a:94:96:b7:54:82:4c:2f:94:91:01:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Apr 29 11:00:33 2025 GMT
Not After : Apr 30 11:00:33 2025 GMT
Subject: CN=ce6dd88ef3310dc868b194693616726ce9d5f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:8b:21:be:0d:86:5e:34:0a:78:8f:0c:d7:
68:9f:c5:68:7d:3d:a9:5d:22:00:a4:4a:b3:a5:c4:
35:8c:2d:a4:c5:96:f4:62:3e:fd:c0:0c:10:b3:fc:
cf:99:43:57:bc:67:75:6c:4a:23:2e:45:f1:76:d4:
88:c0:2c:7a:6f:96:db:26:92:e5:d0:43:5b:e5:d2:
23:20:31:10:7a:88:3f:92:47:4d:65:c1:d8:87:1b:
0d:63:0c:9f:b0:36:21:df:8c:9f:1b:87:5c:54:00:
76:72:f2:88:c3:75:52:e0:ab:f9:99:26:a2:e5:09:
67:4a:66:c6:08:ad:b8:6c:ac:ab:27:93:b1:65:ca:
a9:48:35:c0:82:01:06:c9:a1:e9:8a:0e:fb:80:cc:
05:60:00:49:53:04:81:53:e4:6d:62:f6:b3:15:9d:
18:d6:24:0b:34:9b:db:df:d9:a5:6c:c9:ef:39:a0:
c0:15:04:fd:17:ff:1a:68:f0:98:5d:4d:9d:d8:ee:
db:7a:08:fd:de:ea:50:e3:1a:ee:ad:4c:49:f8:4a:
78:c0:06:54:94:01:5d:b5:f7:32:eb:6b:74:02:f3:
f1:40:43:c1:ef:99:39:ee:5a:91:b1:9c:c6:f5:93:
34:5a:04:ee:91:5e:84:c5:f2:1a:05:c8:d8:0b:73:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:D8:8E:F3:31:0D:C8:68:B1:94:69:36:16:72:6C:E9:D5:F8:EA
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e7:f2:46:d3:b7:e8:d4:7e:00:71:3b:52:cd:cc:05:ce:33:
13:43:80:8f:c6:f4:5a:60:6b:83:d9:91:50:18:12:7f:3c:87:
73:5f:99:67:a7:22:73:5e:97:9f:ae:4d:1c:93:52:fe:78:1c:
6d:f6:a0:d2:f4:ff:7e:0f:a6:05:1c:1d:aa:5f:cd:0f:54:68:
78:a7:c9:f3:49:85:c3:18:5d:67:25:4e:a8:69:2b:3a:70:ac:
b7:91:6c:7d:0b:e9:4e:c1:75:cf:90:3b:7c:bf:2e:6a:e7:f8:
ec:0d:c4:ed:c3:9a:2d:d5:00:8c:c9:0b:9a:dd:2e:ff:cf:1f:
e0:cc:3b:42:bd:0a:a8:47:02:cf:bd:a7:4f:6a:66:8c:71:3a:
9e:e1:00:14:8c:0e:70:d5:40:fa:a4:ad:ac:6c:f4:65:08:ce:
1a:2a:d7:ee:6d:61:90:86:36:50:d7:c4:d9:98:9e:85:d3:55:
f0:e6:5b:04:79:1b:43:c3:fd:b4:dd:79:51:6a:d7:b1:1f:af:
d8:21:0c:ce:11:24:c4:93:a7:a3:30:8f:22:51:44:c5:2a:6a:
3e:e2:bf:c5:82:7f:06:1e:3f:40:57:8b:33:7e:84:c9:c7:c3:
75:17:75:63:c1:43:10:f3:45:aa:67:81:52:d0:4b:e0:50:bc:
c6:f5:dd:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBNKgalJa3VIJML5SRAUGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0
ZjRlZWQwHhcNMjUwNDI5MTEwMDMzWhcNMjUwNDMwMTEwMDMzWjAzMTEwLwYDVQQD
EyhjZTZkZDg4ZWYzMzEwZGM4NjhiMTk0NjkzNjE2NzI2Y2U5ZDVmOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXWLIb4Nhl40CniPDNdon8VofT2p
XSIApEqzpcQ1jC2kxZb0Yj79wAwQs/zPmUNXvGd1bEojLkXxdtSIwCx6b5bbJpLl
0ENb5dIjIDEQeog/kkdNZcHYhxsNYwyfsDYh34yfG4dcVAB2cvKIw3VS4Kv5mSai
5QlnSmbGCK24bKyrJ5OxZcqpSDXAggEGyaHpig77gMwFYABJUwSBU+RtYvazFZ0Y
1iQLNJvb39mlbMnvOaDAFQT9F/8aaPCYXU2d2O7begj93upQ4xrurUxJ+Ep4wAZU
lAFdtfcy62t0AvPxQEPB75k57lqRsZzG9ZM0WgTukV6ExfIaBcjYC3P+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5t2I7zMQ3IaLGUaTYWcmzp1fjqMB8GA1UdIwQY
MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt
ZTE1NDRjNTdlMzhiLzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi
LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeufyRtO3
6NR+AHE7Us3MBc4zE0OAj8b0WmBrg9mRUBgSfzyHc1+ZZ6cic16Xn65NHJNS/ngc
bfag0vT/fg+mBRwdql/ND1RoeKfJ80mFwxhdZyVOqGkrOnCst5FsfQvpTsF1z5A7
fL8uauf47A3E7cOaLdUAjMkLmt0u/88f4Mw7Qr0KqEcCz72nT2pmjHE6nuEAFIwO
cNVA+qStrGz0ZQjOGirX7m1hkIY2UNfE2ZiehdNV8OZbBHkbQ8P9tN15UWrXsR+v
2CEMzhEkxJOnozCPIlFExSpqPuK/xYJ/Bh4/QFeLM36EycfDdRd1Y8FDEPNFqmeB
UtBL4FC8xvXdzQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:01:46 2025 by rpki-client