Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: mA5m0QwLGAGscALOE1jdyxIrb5na2AMdpYYJ6aGDm1s=
Subject key identifier: 2D:4A:A4:E1:D8:E2:7F:60:FA:26:73:D3:81:54:B3:FE:37:D2:DD:91
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 019673E69D9E9844961194E70858CFEF435B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 0421
Signing time: Sat 26 Apr 2025 21:00:15 +0000
Manifest this update: Sat 26 Apr 2025 21:00:15 +0000
Manifest next update: Sun 27 Apr 2025 21:00:15 +0000
Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: noLqHFOKHst1bxKH0QP1qzUJrl0sfrg64dYHrCtBQG4=)
2: NYziV-NFGGqBIoJkJemWo5QRXPo.roa (hash: NJwrl3v2N6LA2BTkuAAr9JlSloYvfxRMFpbHdjPuE8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:9d:9e:98:44:96:11:94:e7:08:58:cf:ef:43:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Apr 26 21:00:15 2025 GMT
Not After : Apr 27 21:00:15 2025 GMT
Subject: CN=2d4aa4e1d8e27f60fa2673d38154b3fe37d2dd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:5a:b0:01:da:66:f8:97:ba:56:b5:96:d0:
f8:11:7d:ed:71:28:54:37:62:6c:31:c2:19:2d:42:
64:1f:22:58:16:13:06:ce:c8:bf:c8:78:a4:3e:5b:
f4:c5:b7:2c:07:6e:cc:ce:59:28:50:e6:42:43:4c:
37:94:3c:a2:eb:a3:fc:0b:6a:8b:aa:22:35:eb:f3:
89:95:d2:b2:e8:d7:1b:33:e3:8c:31:af:16:be:11:
d7:57:34:d1:b2:4d:19:06:1c:95:4b:65:f5:3d:0b:
7f:b8:a7:fa:b4:f9:c7:2e:f4:6f:fd:ad:0e:e6:b4:
d1:d8:01:0d:9d:dc:b6:55:9d:72:77:fa:0e:43:1f:
33:5e:cb:76:6d:2b:ff:c8:88:df:03:87:f6:35:83:
3a:62:ce:dd:18:a2:f4:f1:54:0c:79:50:c4:2d:98:
f6:0f:c7:b9:40:2c:37:b2:70:d9:60:15:74:dd:33:
46:2f:a2:3c:fa:4a:a7:4f:65:7b:bd:38:2b:00:fc:
07:db:0b:fe:c5:7b:66:a7:a5:77:0c:6e:aa:ce:08:
7b:11:1e:b8:2f:99:15:73:84:2b:f6:0a:6f:71:a6:
53:2b:21:10:85:e5:cd:65:ba:b0:9d:87:b4:be:33:
ff:e4:76:c9:ad:7b:38:a5:40:f9:b6:3f:aa:68:27:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4A:A4:E1:D8:E2:7F:60:FA:26:73:D3:81:54:B3:FE:37:D2:DD:91
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ed:58:63:03:3c:75:f9:08:9f:b8:53:90:c7:5d:6a:88:62:
81:c7:b8:91:2c:2a:8b:dd:86:1b:29:5b:37:b8:df:39:13:7a:
61:6a:ba:59:77:24:4b:72:9b:69:4b:df:e1:57:f9:52:2e:79:
ee:c5:9b:e9:c5:ee:34:25:8c:70:9b:57:20:18:37:8e:9e:53:
b6:63:dc:42:93:68:d3:da:fe:cf:84:32:1e:1a:0e:12:99:2e:
4e:1c:50:29:ca:c1:a4:2e:54:f2:e4:21:85:ce:41:3e:02:cb:
da:e6:57:5e:6e:5d:ad:55:77:3f:55:8d:46:d1:75:73:ce:af:
7d:62:d9:28:b7:97:d7:60:d1:d2:48:c9:f3:6c:30:08:ca:59:
14:6b:f0:7d:fc:74:d7:43:a3:7b:6e:64:50:c1:5d:cc:4e:92:
32:8e:3d:89:b6:d6:41:9b:9d:19:19:91:c6:8f:28:fc:5e:37:
b2:e7:c5:0f:a3:61:7a:41:b3:af:85:f8:73:f6:11:d5:0a:95:
f9:5e:d2:f4:77:a6:1d:62:ce:af:6b:29:1a:11:7c:d3:24:3f:
12:7b:f4:a9:fd:aa:98:a5:52:0a:43:cf:2a:03:26:a3:68:96:
6d:dc:1d:01:4e:65:f8:fd:58:ea:f6:d9:df:cb:21:87:31:bd:
56:f8:a3:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5p2emESWEZTnCFjP70NbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjFiODVmYTVkZTU3YTVmZTEyM2RlM2E5MDVmM2NiMzZh
YjhhZmUwHhcNMjUwNDI2MjEwMDE1WhcNMjUwNDI3MjEwMDE1WjAzMTEwLwYDVQQD
EygyZDRhYTRlMWQ4ZTI3ZjYwZmEyNjczZDM4MTU0YjNmZTM3ZDJkZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLhasAHaZviXula1ltD4EX3tcShU
N2JsMcIZLUJkHyJYFhMGzsi/yHikPlv0xbcsB27MzlkoUOZCQ0w3lDyi66P8C2qL
qiI16/OJldKy6NcbM+OMMa8WvhHXVzTRsk0ZBhyVS2X1PQt/uKf6tPnHLvRv/a0O
5rTR2AENndy2VZ1yd/oOQx8zXst2bSv/yIjfA4f2NYM6Ys7dGKL08VQMeVDELZj2
D8e5QCw3snDZYBV03TNGL6I8+kqnT2V7vTgrAPwH2wv+xXtmp6V3DG6qzgh7ER64
L5kVc4Qr9gpvcaZTKyEQheXNZbqwnYe0vjP/5HbJrXs4pUD5tj+qaCfkTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1KpOHY4n9g+iZz04FUs/430t2RMB8GA1UdIwQY
MBaAFDLxuF+l3lel/hI946kF88s2q4r+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmIt
OWQyNzA5MTc4NGNjLzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmItOWQyNzA5MTc4NGNj
LzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+1YYwM8
dfkIn7hTkMddaohigce4kSwqi92GGylbN7jfORN6YWq6WXckS3KbaUvf4Vf5Ui55
7sWb6cXuNCWMcJtXIBg3jp5TtmPcQpNo09r+z4QyHhoOEpkuThxQKcrBpC5U8uQh
hc5BPgLL2uZXXm5drVV3P1WNRtF1c86vfWLZKLeX12DR0kjJ82wwCMpZFGvwffx0
10Oje25kUMFdzE6SMo49ibbWQZudGRmRxo8o/F43sufFD6NhekGzr4X4c/YR1QqV
+V7S9HemHWLOr2spGhF80yQ/Env0qf2qmKVSCkPPKgMmo2iWbdwdAU5l+P1Y6vbZ
38shhzG9VvijlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:47 2025 by rpki-client