Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
File: mwpFcttA2K06pRQevZHpAo51NjE.mft (raw, json)
Hash identifier: AAXPX7BNfUXoDPHIDTV9n6IeiQ2T1ju5akNZs65u1e8=
Subject key identifier: 41:BF:60:31:19:34:FE:BB:13:38:3D:43:1B:AC:17:74:75:A5:BB:60
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Certificate issuer: /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial: 0196760C3DF8E87FEC37310E171AA463DF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
Manifest number: 0695
Signing time: Sun 27 Apr 2025 07:00:35 +0000
Manifest this update: Sun 27 Apr 2025 07:00:35 +0000
Manifest next update: Mon 28 Apr 2025 07:00:35 +0000
Files and hashes: 1: LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa (hash: 0hquK8SkvqQbNfKEbYjZG0icP/g4QwK+sH8IO5xeaXI=)
2: mwpFcttA2K06pRQevZHpAo51NjE.crl (hash: aDPVjq68ZS/O7Cru2BUumd/i7VDoD0P94ZwaN9WyiHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:3d:f8:e8:7f:ec:37:31:0e:17:1a:a4:63:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Validity
Not Before: Apr 27 07:00:35 2025 GMT
Not After : Apr 28 07:00:35 2025 GMT
Subject: CN=41bf60311934febb13383d431bac177475a5bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:f1:31:31:4b:37:d6:0e:4a:77:12:7b:13:
cc:b0:8d:90:43:ee:29:ce:cd:bf:2f:4e:15:b4:b5:
4c:b2:22:8d:e8:f5:4f:86:4f:b6:9a:8e:a8:49:4e:
cd:ea:3b:f0:39:b9:6f:94:d4:65:1a:71:00:ff:9e:
b4:db:e2:d6:71:5e:dc:c3:58:c4:1f:d7:e8:8e:91:
54:26:63:ea:8e:4c:51:09:5e:d1:d1:10:5c:bf:fc:
d3:c4:08:d3:c4:82:42:e0:e5:aa:a8:60:36:88:e8:
e0:c9:8d:22:67:0b:e1:88:7a:3b:c3:5b:48:46:e2:
ee:b3:bc:d3:d8:f3:7b:25:70:e8:81:a7:a3:ab:11:
f0:86:14:ed:60:3e:9c:0c:c0:d4:d0:ea:ee:3a:e8:
6a:62:d9:1a:0d:13:19:a0:cc:96:95:33:e4:fc:b7:
78:f5:0a:57:b1:b9:cb:74:b3:ee:9e:1c:7f:47:91:
44:f8:ed:65:28:54:dd:a2:1a:e7:65:19:72:6f:7f:
9d:02:e3:f5:7e:05:26:83:16:c1:81:99:05:a6:0e:
e5:be:dd:a2:ed:02:b5:44:f4:f6:4f:26:91:c3:e1:
b7:e2:00:74:98:6f:9d:cb:65:b0:e4:d0:16:b9:ff:
29:f4:c4:6b:dd:30:99:d5:e8:d8:d6:af:58:7d:a1:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BF:60:31:19:34:FE:BB:13:38:3D:43:1B:AC:17:74:75:A5:BB:60
X509v3 Authority Key Identifier:
keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7d:e9:e4:01:cf:e2:c4:ba:a9:0d:27:7e:0d:3d:82:8a:75:
e8:95:4a:ae:87:45:89:fe:b1:90:81:95:9b:8c:7b:69:6e:f9:
f5:f6:f0:ce:6b:f2:76:37:81:58:da:5b:7f:68:47:17:de:55:
a8:15:0b:a9:2a:1f:21:7c:da:2b:4c:14:20:d5:62:c5:c1:10:
dd:52:0b:da:5d:e4:9d:a6:8f:4d:06:b1:4c:fc:e7:b8:fa:e9:
67:61:9c:b4:31:16:86:ff:82:32:18:9c:d5:11:ca:5c:69:3b:
91:2c:bd:c4:c6:a0:ca:5b:c5:8f:d8:39:b9:21:06:11:61:f9:
77:7a:09:05:fa:2a:71:21:cb:29:b9:6a:e1:46:42:ad:d9:5b:
7f:93:40:30:78:3f:1b:a9:84:34:55:22:c2:81:2f:1d:69:f4:
c2:95:9c:d5:77:9c:c0:5e:b3:2d:0e:0c:d6:ea:82:6b:cb:76:
44:4d:bc:73:f0:05:1a:fc:c3:3d:50:e4:05:28:8b:41:08:c9:
06:bc:c9:8b:d1:55:d2:86:05:cd:3d:43:59:fd:80:2f:02:e1:
af:66:bf:21:bd:1a:bd:8c:16:3f:6f:e3:cb:40:2f:a4:81:a5:
c2:9f:6c:2b:33:80:7a:1d:34:a0:7e:e8:ae:b0:89:a3:94:db:
3b:d9:8d:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DD346H/sNzEOFxqkY994MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGE0NTcyZGI0MGQ4YWQzYWE1MTQxZWJkOTFlOTAyOGU3
NTM2MzEwHhcNMjUwNDI3MDcwMDM1WhcNMjUwNDI4MDcwMDM1WjAzMTEwLwYDVQQD
Eyg0MWJmNjAzMTE5MzRmZWJiMTMzODNkNDMxYmFjMTc3NDc1YTViYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmDxMTFLN9YOSncSexPMsI2QQ+4p
zs2/L04VtLVMsiKN6PVPhk+2mo6oSU7N6jvwOblvlNRlGnEA/5602+LWcV7cw1jE
H9fojpFUJmPqjkxRCV7R0RBcv/zTxAjTxIJC4OWqqGA2iOjgyY0iZwvhiHo7w1tI
RuLus7zT2PN7JXDogaejqxHwhhTtYD6cDMDU0OruOuhqYtkaDRMZoMyWlTPk/Ld4
9QpXsbnLdLPunhx/R5FE+O1lKFTdohrnZRlyb3+dAuP1fgUmgxbBgZkFpg7lvt2i
7QK1RPT2TyaRw+G34gB0mG+dy2Ww5NAWuf8p9MRr3TCZ1ejY1q9YfaEppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG/YDEZNP67Ezg9QxusF3R1pbtgMB8GA1UdIwQY
MBaAFJsKRXLbQNitOqUUHr2R6QKOdTYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXdwRmN0dEEySzA2cFJRZXZaSHBBbzUxTmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZjliOGItNWMzOS00NWViLWEzZjIt
Mzk1MTQxYTZjZmZkLzEvbXdwRmN0dEEySzA2cFJRZXZaSHBBbzUxTmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZjliOGItNWMzOS00NWViLWEzZjItMzk1MTQxYTZjZmZk
LzEvbXdwRmN0dEEySzA2cFJRZXZaSHBBbzUxTmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAln3p5AHP
4sS6qQ0nfg09gop16JVKrodFif6xkIGVm4x7aW759fbwzmvydjeBWNpbf2hHF95V
qBULqSofIXzaK0wUINVixcEQ3VIL2l3knaaPTQaxTPznuPrpZ2GctDEWhv+CMhic
1RHKXGk7kSy9xMagylvFj9g5uSEGEWH5d3oJBfoqcSHLKblq4UZCrdlbf5NAMHg/
G6mENFUiwoEvHWn0wpWc1XecwF6zLQ4M1uqCa8t2RE28c/AFGvzDPVDkBSiLQQjJ
BrzJi9FV0oYFzT1DWf2ALwLhr2a/Ib0avYwWP2/jy0AvpIGlwp9sKzOAeh00oH7o
rrCJo5TbO9mN8A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:07 2025 by rpki-client