Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: wxXFcBHDRKlllc3Zh4Gf87q93iYNgjwetox3Fgd61qc=
Subject key identifier: A0:5B:47:4E:90:3E:F9:FC:05:84:F7:75:79:2B:F6:F4:C5:6B:90:01
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 01967CE9E3CB4B76DF7DA2E50422790A8428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0E3C
Signing time: Mon 28 Apr 2025 15:00:24 +0000
Manifest this update: Mon 28 Apr 2025 15:00:24 +0000
Manifest next update: Tue 29 Apr 2025 15:00:24 +0000
Files and hashes: 1: fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa (hash: N/iSveQaUWb1ReObfQZCITPh3u+LQRq5t3sKbajN6Pg=)
2: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: i0IYPWKUfVsN2TRquJC5FwAPayHRf3KtoMP2NEIQnp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:e3:cb:4b:76:df:7d:a2:e5:04:22:79:0a:84:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Apr 28 15:00:24 2025 GMT
Not After : Apr 29 15:00:24 2025 GMT
Subject: CN=a05b474e903ef9fc0584f775792bf6f4c56b9001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:a5:6f:40:54:89:ee:d5:bf:5c:a1:08:66:
79:bb:78:4c:1f:9f:22:8b:d2:1f:c3:d8:ad:b1:86:
02:86:d2:23:a1:bd:e4:84:4f:ab:ba:87:05:d3:d0:
c7:bd:e9:f5:fc:bb:fd:86:44:d2:14:39:d8:85:17:
ea:f9:b6:2e:cb:c8:96:50:c2:87:72:0b:d4:bd:82:
58:e0:0b:42:d4:38:01:f8:78:56:c0:d6:c7:2d:47:
d5:72:53:4c:38:00:88:06:a3:27:7d:37:53:98:49:
3b:98:99:d9:98:57:81:1d:b8:ef:46:f6:ad:9f:d5:
ec:40:5f:51:1d:5c:42:33:af:26:c5:c3:49:a4:67:
c9:73:95:ce:12:17:da:a5:98:93:35:8c:d1:fc:3b:
69:03:e5:90:ae:46:c5:36:dd:4b:4f:4c:d9:6e:ab:
d7:de:55:35:09:e0:94:8b:39:fa:ef:fb:bc:3c:20:
ba:65:89:ac:6c:d6:1d:a4:cd:4d:b1:19:b5:d1:be:
a9:47:f4:8f:30:c5:20:52:44:ae:06:c7:7e:93:54:
db:3c:78:25:c4:63:84:d6:2f:c0:d2:f4:4c:ee:7a:
5a:bc:5e:99:93:43:9d:04:74:9c:10:81:ef:29:89:
4c:49:ac:b5:ae:b0:0a:73:e8:29:43:74:51:e3:6e:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5B:47:4E:90:3E:F9:FC:05:84:F7:75:79:2B:F6:F4:C5:6B:90:01
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:0d:9e:71:23:3d:8a:b3:3e:d5:34:6f:27:60:22:f1:f1:
96:a8:d6:ea:10:26:0d:82:01:5e:12:95:5f:cf:4f:ec:d1:80:
30:49:49:a5:4d:cb:b5:27:b7:fe:41:41:43:c3:5a:44:c2:7c:
5f:01:a5:df:c6:18:80:a9:b3:9b:7b:4d:cd:c0:96:49:af:14:
a6:97:56:02:23:5d:9a:84:5e:2b:43:9f:69:ba:1f:95:b9:d1:
67:e2:70:8f:88:73:9f:8b:2d:9a:6b:37:14:8b:5b:a8:15:de:
f1:66:c5:41:52:21:4c:fe:9c:fd:a0:20:db:2e:83:e6:46:44:
42:a4:72:9b:4b:02:99:b3:10:35:19:ef:9a:2d:74:55:9b:c1:
f1:54:de:6f:35:3c:4a:b5:08:4b:61:e8:2e:d9:11:94:f9:0a:
c2:e2:48:b7:4c:db:c9:16:07:6a:f7:cc:ea:fe:7a:6c:a3:33:
96:fe:29:22:1b:4f:5e:ca:b3:e2:f8:a2:6a:d7:e6:e2:c9:f8:
f9:ac:69:71:57:37:e3:b4:e9:99:63:94:89:2b:dd:a2:43:91:
22:b4:08:d3:77:c0:be:e0:9a:4a:a6:b0:2d:af:66:3c:36:3c:
5e:61:03:75:1a:bd:6b:80:d5:2a:2f:e9:0c:62:72:70:64:1b:
85:93:96:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ86ePLS3bffaLlBCJ5CoQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMWYxMjNiNWJhNGJjMWI3NzkzYjllOWZhMWI0M2RhYzQ5
YTY2MGEwHhcNMjUwNDI4MTUwMDI0WhcNMjUwNDI5MTUwMDI0WjAzMTEwLwYDVQQD
EyhhMDViNDc0ZTkwM2VmOWZjMDU4NGY3NzU3OTJiZjZmNGM1NmI5MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ2lb0BUie7Vv1yhCGZ5u3hMH58i
i9Ifw9itsYYChtIjob3khE+ruocF09DHven1/Lv9hkTSFDnYhRfq+bYuy8iWUMKH
cgvUvYJY4AtC1DgB+HhWwNbHLUfVclNMOACIBqMnfTdTmEk7mJnZmFeBHbjvRvat
n9XsQF9RHVxCM68mxcNJpGfJc5XOEhfapZiTNYzR/DtpA+WQrkbFNt1LT0zZbqvX
3lU1CeCUizn67/u8PCC6ZYmsbNYdpM1NsRm10b6pR/SPMMUgUkSuBsd+k1TbPHgl
xGOE1i/A0vRM7npavF6Zk0OdBHScEIHvKYlMSay1rrAKc+gpQ3RR425nqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBbR06QPvn8BYT3dXkr9vTFa5ABMB8GA1UdIwQY
MBaAFJsfEjtbpLwbd5O56fobQ9rEmmYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81MjNlYjgtMzY3Ny00YzlmLWI2YmQt
N2M1ZTdlMzI0NTMwLzEvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81MjNlYjgtMzY3Ny00YzlmLWI2YmQtN2M1ZTdlMzI0NTMw
LzEvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpwNnnEj
PYqzPtU0bydgIvHxlqjW6hAmDYIBXhKVX89P7NGAMElJpU3LtSe3/kFBQ8NaRMJ8
XwGl38YYgKmzm3tNzcCWSa8UppdWAiNdmoReK0OfaboflbnRZ+Jwj4hzn4stmms3
FItbqBXe8WbFQVIhTP6c/aAg2y6D5kZEQqRym0sCmbMQNRnvmi10VZvB8VTebzU8
SrUIS2HoLtkRlPkKwuJIt0zbyRYHavfM6v56bKMzlv4pIhtPXsqz4viiatfm4sn4
+axpcVc347TpmWOUiSvdokORIrQI03fAvuCaSqawLa9mPDY8XmEDdRq9a4DVKi/p
DGJycGQbhZOW1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:57:19 2025 by rpki-client