Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: 0jtaIXSxhV5SSksflO6nO9BD5FHVPJUjesMffvrgVLQ=
Subject key identifier: 85:59:B1:7C:DB:4B:7C:B5:62:B7:81:78:15:40:62:BB:3F:3A:B9:2D
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 0196756762E11E44EE32ED07F9FDB3502ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 043C
Signing time: Sun 27 Apr 2025 04:00:31 +0000
Manifest this update: Sun 27 Apr 2025 04:00:31 +0000
Manifest next update: Mon 28 Apr 2025 04:00:31 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: W2zjQ8poIzEuBwoCoEDi8K3MI99w9PDQkUx7IKIUfrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:62:e1:1e:44:ee:32:ed:07:f9:fd:b3:50:2e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Apr 27 04:00:31 2025 GMT
Not After : Apr 28 04:00:31 2025 GMT
Subject: CN=8559b17cdb4b7cb562b78178154062bb3f3ab92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:f4:c7:09:da:8c:ff:56:89:85:31:7c:ad:
b1:24:5c:99:f5:35:67:13:01:17:17:de:a5:f9:30:
f8:06:34:b5:bf:c7:43:50:e0:52:99:20:9d:d5:a9:
e1:57:4e:35:96:7a:68:29:83:c0:21:04:40:ff:e2:
64:55:c0:b9:c6:35:bc:e6:8a:f4:fa:b4:5a:59:ab:
87:f5:6b:72:05:1e:94:66:30:bb:7d:4b:af:19:4c:
27:6e:a4:76:f8:0e:ce:5d:00:1e:8d:c7:d0:0d:94:
79:1f:cf:df:95:ff:d8:a7:e2:c3:53:a4:a2:68:0e:
4e:ca:e9:92:31:9d:55:4e:cd:9c:39:7d:2c:94:a3:
de:a8:a8:80:dc:d0:4c:95:bc:d5:9a:42:c1:89:4e:
35:8c:c9:3d:da:0e:f2:d0:f0:c9:b7:38:cc:5f:1f:
d3:15:aa:05:9c:40:1d:0c:76:a8:3a:b2:ad:32:83:
23:c1:36:4a:86:ae:a5:11:e8:2f:c0:f7:30:90:af:
b4:a3:09:23:5b:ee:b2:f6:18:9a:5e:c0:e1:ef:8c:
1c:0b:52:fe:0e:36:a7:97:36:e9:ec:b8:86:2a:8b:
8f:d3:80:d7:9c:19:e8:d5:0e:d3:5b:f2:6e:7f:61:
3b:db:3e:28:1f:56:73:7a:f9:7f:d9:e2:22:d3:3e:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:B1:7C:DB:4B:7C:B5:62:B7:81:78:15:40:62:BB:3F:3A:B9:2D
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:42:c8:6e:6d:29:f5:f1:1f:3b:fd:d9:0f:3b:70:25:c5:
e7:d8:de:75:fd:f9:56:bc:ab:54:3c:cd:9d:c5:76:a8:13:41:
1d:25:e5:55:3c:44:d6:76:06:72:cb:02:e9:a8:7a:7b:e6:e5:
18:86:45:f4:8f:32:c2:6a:a4:64:0d:c0:4c:a6:49:7b:17:d4:
0a:f3:3b:90:01:20:f7:ec:c8:b4:f6:23:02:a2:a7:13:31:6d:
1d:3d:7c:95:6f:56:13:e8:22:8d:88:a3:66:94:01:28:d2:91:
79:aa:35:ce:d6:13:ed:57:09:eb:be:b6:f6:4d:d2:fd:90:8b:
03:a4:3b:24:fb:d1:f3:c6:ab:aa:50:b1:30:61:41:7b:19:6b:
2f:1a:e2:ed:43:53:7e:f2:69:20:89:b0:f9:fb:d2:6d:a6:b3:
ad:ac:d8:b8:12:92:1c:d7:b2:de:3b:5d:31:d6:a9:ea:b0:79:
6a:4f:7d:2d:9c:84:1f:df:e8:39:0a:47:71:d4:01:ab:24:1d:
81:56:bc:85:20:f8:1c:ea:b9:f6:0b:4e:a2:a9:03:b1:aa:aa:
17:dd:8b:a9:8a:7b:73:17:3d:d9:2e:d0:f9:82:a1:ec:33:35:
22:67:d7:ba:1b:04:90:cd:6d:9c:4a:9c:c1:7b:9e:6c:7f:81:
f9:40:36:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z2LhHkTuMu0H+f2zUC7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTc1MTU2NTcxNzVhOTQ2Y2M4ZGI2MTk2Y2ExYjIxNTRl
MzgxMTQwHhcNMjUwNDI3MDQwMDMxWhcNMjUwNDI4MDQwMDMxWjAzMTEwLwYDVQQD
Eyg4NTU5YjE3Y2RiNGI3Y2I1NjJiNzgxNzgxNTQwNjJiYjNmM2FiOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhb0xwnajP9WiYUxfK2xJFyZ9TVn
EwEXF96l+TD4BjS1v8dDUOBSmSCd1anhV041lnpoKYPAIQRA/+JkVcC5xjW85or0
+rRaWauH9WtyBR6UZjC7fUuvGUwnbqR2+A7OXQAejcfQDZR5H8/flf/Yp+LDU6Si
aA5OyumSMZ1VTs2cOX0slKPeqKiA3NBMlbzVmkLBiU41jMk92g7y0PDJtzjMXx/T
FaoFnEAdDHaoOrKtMoMjwTZKhq6lEegvwPcwkK+0owkjW+6y9hiaXsDh74wcC1L+
Djanlzbp7LiGKouP04DXnBno1Q7TW/Juf2E72z4oH1Zzevl/2eIi0z4lkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVZsXzbS3y1YreBeBVAYrs/OrktMB8GA1UdIwQY
MBaAFJqXUVZXF1qUbMjbYZbKGyFU44EUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgt
NTZlNmUyZGM4ODg1LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgtNTZlNmUyZGM4ODg1
LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvZCyG5t
KfXxHzv92Q87cCXF59jedf35VryrVDzNncV2qBNBHSXlVTxE1nYGcssC6ah6e+bl
GIZF9I8ywmqkZA3ATKZJexfUCvM7kAEg9+zItPYjAqKnEzFtHT18lW9WE+gijYij
ZpQBKNKReao1ztYT7VcJ67629k3S/ZCLA6Q7JPvR88arqlCxMGFBexlrLxri7UNT
fvJpIImw+fvSbaazrazYuBKSHNey3jtdMdap6rB5ak99LZyEH9/oOQpHcdQBqyQd
gVa8hSD4HOq59gtOoqkDsaqqF92LqYp7cxc92S7Q+YKh7DM1ImfXuhsEkM1tnEqc
wXuebH+B+UA2yw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:43 2025 by rpki-client