Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: Ev+48ZwY6mP9zm0AO06xQ22LNTzC+MeRtkOJxVm/fwo=
Subject key identifier: 2F:78:1E:AA:12:8F:EB:18:8D:6F:82:38:54:15:05:90:FE:F9:1D:F2
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 01968849D7F46FCC76964F7FF9FB1CAE9962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: D5
Signing time: Wed 30 Apr 2025 20:01:02 +0000
Manifest this update: Wed 30 Apr 2025 20:01:02 +0000
Manifest next update: Thu 01 May 2025 20:01:02 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: ZsmCLzWjFksqm9/85ihRNQFc8zWn8fEuZ2Gz7WAmheo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:d7:f4:6f:cc:76:96:4f:7f:f9:fb:1c:ae:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Apr 30 20:01:02 2025 GMT
Not After : May 1 20:01:02 2025 GMT
Subject: CN=2f781eaa128feb188d6f823854150590fef91df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:a8:71:dd:cf:bb:b6:ec:f1:8e:bf:08:bd:
ed:22:68:a9:2d:d3:26:fa:f2:f2:a4:7a:4d:6f:09:
b7:2c:15:40:11:7f:2f:76:33:e1:cf:0e:bb:90:53:
80:51:00:5e:29:37:20:67:ee:b4:60:d8:b5:0b:c7:
1a:b2:69:a4:0e:15:b3:b2:62:45:2a:1c:63:03:43:
87:18:4e:46:02:a5:9d:72:7e:e9:7e:43:75:8f:3e:
87:52:75:5d:5b:f8:32:61:9f:40:5c:d2:5e:ff:ad:
29:1d:aa:21:79:d1:d1:8d:2a:e1:0e:39:75:d6:f8:
4d:31:3c:7c:06:c5:30:6d:ae:b0:2c:39:61:86:a6:
33:46:79:19:ac:a7:2f:2e:17:70:83:32:d4:61:5d:
d0:3c:9a:84:c1:c9:ef:59:36:b1:05:85:0e:f4:b8:
48:8e:c0:4e:40:16:7c:a8:7b:2d:53:c3:45:de:20:
87:46:e5:75:ad:81:ee:5e:58:3b:24:18:9c:93:4c:
80:5f:2a:95:16:e3:88:88:e3:b2:21:12:6f:1a:58:
86:a4:a6:d0:f7:1a:25:65:11:7e:dd:d9:b6:1c:80:
53:20:a2:2e:24:a4:3a:fc:b9:17:59:39:2f:f3:c8:
0f:db:72:8a:5b:ac:d3:b1:6c:23:90:28:0f:a2:89:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:1E:AA:12:8F:EB:18:8D:6F:82:38:54:15:05:90:FE:F9:1D:F2
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a6:08:ea:cf:6d:f8:7d:7e:f8:6a:53:4a:2c:b8:81:43:4d:
ca:25:b7:22:65:4d:63:c4:89:72:f7:ca:2c:a2:3c:22:41:5c:
94:17:7e:f2:7b:96:25:e4:7e:e6:fa:45:aa:6f:02:c6:b5:f2:
98:59:2f:65:86:d7:59:85:79:b3:62:2d:1a:09:e8:13:a6:e9:
28:c6:08:e4:a0:df:ba:59:c2:7b:96:28:b3:39:e3:01:32:12:
5b:07:45:73:c9:bd:ff:eb:4f:97:99:57:d1:7b:ed:00:9b:3b:
e9:d3:41:b0:06:05:5e:37:90:17:c7:e4:b7:ea:2d:09:a6:5a:
62:f8:a7:a1:8e:cb:1e:8b:b1:62:55:06:be:3c:d6:92:27:2b:
9b:22:d9:9e:2a:df:51:0c:b2:ef:fb:bb:8d:e1:2c:a0:af:cc:
e5:26:d3:96:c1:d4:46:9e:28:8b:9c:49:ff:f0:1a:cd:c9:1c:
5c:71:8e:82:59:b4:66:a0:d0:bf:ad:21:fb:24:41:5d:85:7a:
26:f3:0e:16:c4:6c:59:02:2d:29:9f:e8:e2:4b:0d:4f:eb:f0:
6c:0f:fc:21:dd:98:f4:0e:ce:71:7e:91:78:20:e3:20:72:37:
59:69:43:fc:bd:7a:93:cd:54:c9:ac:e5:0f:76:8a:d1:71:20:
3a:76:dd:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaISdf0b8x2lk9/+fscrpliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNjAwMDQxZTRlY2Y5OGMzMTU1ZDQ4ZjQ5N2NmNmQxNDM2
ODMyM2UwHhcNMjUwNDMwMjAwMTAyWhcNMjUwNTAxMjAwMTAyWjAzMTEwLwYDVQQD
EygyZjc4MWVhYTEyOGZlYjE4OGQ2ZjgyMzg1NDE1MDU5MGZlZjkxZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgSocd3Pu7bs8Y6/CL3tImipLdMm
+vLypHpNbwm3LBVAEX8vdjPhzw67kFOAUQBeKTcgZ+60YNi1C8casmmkDhWzsmJF
KhxjA0OHGE5GAqWdcn7pfkN1jz6HUnVdW/gyYZ9AXNJe/60pHaohedHRjSrhDjl1
1vhNMTx8BsUwba6wLDlhhqYzRnkZrKcvLhdwgzLUYV3QPJqEwcnvWTaxBYUO9LhI
jsBOQBZ8qHstU8NF3iCHRuV1rYHuXlg7JBick0yAXyqVFuOIiOOyIRJvGliGpKbQ
9xolZRF+3dm2HIBTIKIuJKQ6/LkXWTkv88gP23KKW6zTsWwjkCgPoomCZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC94HqoSj+sYjW+COFQVBZD++R3yMB8GA1UdIwQY
MBaAFDFgAEHk7PmMMVXUj0l89tFDaDI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2Qt
OWMzNmMyMjJkOGRjLzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2QtOWMzNmMyMjJkOGRj
LzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqYI6s9t
+H1++GpTSiy4gUNNyiW3ImVNY8SJcvfKLKI8IkFclBd+8nuWJeR+5vpFqm8CxrXy
mFkvZYbXWYV5s2ItGgnoE6bpKMYI5KDfulnCe5YosznjATISWwdFc8m9/+tPl5lX
0XvtAJs76dNBsAYFXjeQF8fkt+otCaZaYvinoY7LHouxYlUGvjzWkicrmyLZnirf
UQyy7/u7jeEsoK/M5SbTlsHURp4oi5xJ//AazckcXHGOglm0ZqDQv60h+yRBXYV6
JvMOFsRsWQItKZ/o4ksNT+vwbA/8Id2Y9A7OcX6ReCDjIHI3WWlD/L16k81Uyazl
D3aK0XEgOnbdyg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:11:30 2025 by rpki-client