Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: ekQAERHg7mwiPXTNhvYOpZFQcnxx8FugmuLiTGlrvDc=
Subject key identifier: A2:19:B4:AD:F3:10:5D:2C:52:14:90:51:73:91:99:72:FF:20:22:3D
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 01968BEEF4ED8403267761F3A5DAF582D9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 0365
Signing time: Thu 01 May 2025 13:00:15 +0000
Manifest this update: Thu 01 May 2025 13:00:15 +0000
Manifest next update: Fri 02 May 2025 13:00:15 +0000
Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=)
2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: 1DJqCzgM5/7dt96BJzfZ3aYkP0cYISj+uMr/UMsnNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ee:f4:ed:84:03:26:77:61:f3:a5:da:f5:82:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: May 1 13:00:15 2025 GMT
Not After : May 2 13:00:15 2025 GMT
Subject: CN=a219b4adf3105d2c5214905173919972ff20223d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9d:3f:72:10:8d:05:d6:6d:5e:1e:2c:3f:fc:
e8:56:72:6d:e2:34:99:85:c8:c6:1d:a2:4e:9c:d9:
e7:58:f3:d4:ae:dc:97:84:23:5f:af:4b:dc:9b:0c:
1b:05:8b:80:b4:fb:4c:52:f1:a2:05:e1:44:1d:57:
5b:d2:47:bf:0d:9e:38:07:76:c1:ef:74:d0:00:e5:
1f:b2:c0:6e:18:d4:15:f1:d9:ee:15:33:09:16:62:
b3:ca:5b:9e:54:c2:37:16:e1:57:28:31:71:ab:31:
b5:8a:b0:d1:c1:eb:8c:26:f4:2b:70:d9:95:e3:26:
b4:e7:c5:80:c4:11:3e:14:bf:06:cc:28:4f:4b:90:
ea:0e:25:80:82:d5:df:99:c0:4e:18:13:03:b2:9a:
0f:cc:5e:54:67:41:e6:ad:36:5e:b7:fc:1c:7d:19:
b8:32:1d:fc:38:b4:fe:ba:8c:c6:29:c7:8e:34:a4:
06:61:ab:11:d1:32:60:b2:92:b7:14:17:d8:a7:53:
24:3e:a9:46:d9:c9:54:6d:3c:10:98:4a:bd:f7:8f:
cb:70:a9:47:4a:6a:b2:49:aa:80:29:72:a2:dc:2a:
4b:f9:94:05:ba:fe:69:3d:7c:d7:bc:4d:a1:65:a6:
3f:ab:07:77:c9:60:5c:8f:ef:43:ef:a3:08:23:89:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:B4:AD:F3:10:5D:2C:52:14:90:51:73:91:99:72:FF:20:22:3D
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6f:d8:5f:fe:d0:29:7a:7d:96:9b:66:d7:25:3b:c0:6a:6b:
90:ef:31:6a:39:be:5d:5b:96:e0:ce:72:54:c2:5c:c8:7e:11:
1c:d4:e1:f7:eb:5f:8a:5e:1d:3e:0a:89:87:83:c6:eb:d7:d4:
d0:59:75:25:b1:ac:70:75:b4:47:9f:e4:42:81:bf:c3:31:f0:
79:c1:7c:6d:af:6c:fb:a9:7a:fa:0c:e1:02:3c:56:03:94:f2:
b4:06:e4:b1:5d:e3:55:5d:40:70:c0:3d:60:c6:bb:c2:19:d0:
2b:c7:51:77:ef:d3:ad:1a:f4:2d:9a:0a:b7:bd:cc:45:03:8a:
03:fe:99:8c:d5:ae:b9:ea:eb:d8:c5:16:57:36:9f:05:12:06:
d3:47:4f:1d:80:c3:06:4f:5f:76:db:d5:c0:a4:39:bf:cc:0f:
65:67:04:fd:7b:ff:db:79:71:b9:86:cf:14:e0:dd:47:f1:62:
f9:01:2d:e6:fa:30:c4:1c:4b:a2:8b:4b:8a:b9:66:53:0c:da:
57:cd:68:47:55:01:6c:fe:e9:07:a4:1c:dd:18:6c:6a:5b:01:
f4:de:02:6c:43:cc:fc:96:c6:f2:a2:5c:49:f5:51:90:82:3b:
50:53:bc:cf:ef:d7:19:ce:4f:7c:2e:53:3b:23:80:79:f9:ac:
10:10:1b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaL7vTthAMmd2Hzpdr1gtnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl
ZjEyY2QwHhcNMjUwNTAxMTMwMDE1WhcNMjUwNTAyMTMwMDE1WjAzMTEwLwYDVQQD
EyhhMjE5YjRhZGYzMTA1ZDJjNTIxNDkwNTE3MzkxOTk3MmZmMjAyMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p0/chCNBdZtXh4sP/zoVnJt4jSZ
hcjGHaJOnNnnWPPUrtyXhCNfr0vcmwwbBYuAtPtMUvGiBeFEHVdb0ke/DZ44B3bB
73TQAOUfssBuGNQV8dnuFTMJFmKzylueVMI3FuFXKDFxqzG1irDRweuMJvQrcNmV
4ya058WAxBE+FL8GzChPS5DqDiWAgtXfmcBOGBMDspoPzF5UZ0HmrTZet/wcfRm4
Mh38OLT+uozGKceONKQGYasR0TJgspK3FBfYp1MkPqlG2clUbTwQmEq994/LcKlH
SmqySaqAKXKi3CpL+ZQFuv5pPXzXvE2hZaY/qwd3yWBcj+9D76MII4kXFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIZtK3zEF0sUhSQUXORmXL/ICI9MB8GA1UdIwQY
MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt
MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2
LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW/YX/7Q
KXp9lptm1yU7wGprkO8xajm+XVuW4M5yVMJcyH4RHNTh9+tfil4dPgqJh4PG69fU
0Fl1JbGscHW0R5/kQoG/wzHwecF8ba9s+6l6+gzhAjxWA5TytAbksV3jVV1AcMA9
YMa7whnQK8dRd+/TrRr0LZoKt73MRQOKA/6ZjNWuuerr2MUWVzafBRIG00dPHYDD
Bk9fdtvVwKQ5v8wPZWcE/Xv/23lxuYbPFODdR/Fi+QEt5vowxBxLootLirlmUwza
V81oR1UBbP7pB6Qc3RhsalsB9N4CbEPM/JbG8qJcSfVRkII7UFO8z+/XGc5PfC5T
OyOAefmsEBAbBw==
-----END CERTIFICATE-----
Generated at Thu May 1 21:43:37 2025 by rpki-client