Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: ODgXlp4mRBQg7KgHck0NnABgB59MngXoxb7MonSE19c=
Subject key identifier: C1:08:09:1C:CB:16:FB:3D:1C:AD:91:33:47:1E:61:B0:8C:4E:A4:3C
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 01968134AF8A18C914D85D1175DC3AF38713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 12B3
Signing time: Tue 29 Apr 2025 11:00:35 +0000
Manifest this update: Tue 29 Apr 2025 11:00:35 +0000
Manifest next update: Wed 30 Apr 2025 11:00:35 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: 2+Qt9jrjG9sPIhNjoX5GWBXKj0FpO639N6VqOpQdsbs=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:af:8a:18:c9:14:d8:5d:11:75:dc:3a:f3:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Apr 29 11:00:35 2025 GMT
Not After : Apr 30 11:00:35 2025 GMT
Subject: CN=c108091ccb16fb3d1cad9133471e61b08c4ea43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:9b:60:87:4f:cd:24:5a:c0:89:07:5b:67:
13:7c:37:c3:25:31:d3:36:33:5a:a7:c5:86:48:fe:
25:18:8e:0e:34:8c:04:20:a6:21:2c:ed:94:d1:fc:
57:5a:9a:59:0b:b7:0a:82:8a:11:42:c7:01:9e:33:
4d:71:92:00:bc:bd:53:52:76:ee:af:be:f1:e7:cb:
bd:bc:49:9b:e9:6f:0b:02:f4:e2:74:8d:7b:49:94:
ca:23:d9:2b:fd:08:62:bb:63:9c:21:2f:0c:c6:40:
50:4a:d9:4b:c5:b7:28:2f:01:5b:de:bd:f9:7c:45:
41:c4:67:f9:ed:51:4b:bb:f6:8f:74:c3:d2:e5:4b:
13:d3:43:42:a4:46:33:27:f9:40:46:bd:4e:08:a2:
09:4a:e3:7d:c5:5b:5e:23:1a:01:c6:62:02:4e:0b:
e0:30:43:00:21:2e:6e:fa:95:d5:9b:cf:ac:69:6e:
11:8b:96:f5:05:00:8e:ed:5d:46:d9:65:79:62:d7:
89:b1:ae:de:d3:1a:e0:6d:cf:70:10:b9:b2:9e:61:
9e:9e:8f:38:3f:c0:c4:8a:60:8f:4f:23:7c:91:b5:
72:19:42:ef:57:19:16:1c:df:04:3d:f3:23:71:30:
ab:e2:d4:eb:3f:cf:33:98:f2:83:c9:86:a9:1c:01:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:09:1C:CB:16:FB:3D:1C:AD:91:33:47:1E:61:B0:8C:4E:A4:3C
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d9:40:00:56:83:22:02:92:92:3e:49:fd:16:c4:7d:ed:8d:
6a:8c:d3:0e:2d:3d:13:f2:88:70:4b:a3:58:84:23:33:bd:65:
d9:e5:58:3b:43:0d:62:5b:7d:c1:34:b8:a7:af:ad:17:97:74:
43:47:51:91:7d:04:a9:df:3b:49:15:28:f9:3f:7d:a7:85:6d:
8c:45:68:2b:f2:8c:a2:fb:6c:bb:3e:5b:af:f8:f8:6e:89:03:
b6:f4:6f:e5:8d:84:a4:13:d3:cb:16:05:70:77:79:a9:12:70:
4c:79:77:b6:b5:d4:57:ff:51:59:62:1d:a6:af:87:ff:14:8a:
d1:ae:79:a2:0a:55:a2:6e:ba:4b:80:93:91:2f:63:80:27:17:
2e:8f:ea:8c:f3:53:95:44:9b:b9:82:97:68:71:70:3d:70:b5:
e1:c9:fc:42:f9:19:e8:45:2e:60:6f:a7:06:cd:31:49:11:08:
12:2a:2f:4f:d7:ce:c5:5e:af:a6:04:79:4e:17:45:7c:35:3f:
e3:31:69:a9:6a:02:76:24:8d:60:81:7b:eb:6f:9a:51:d9:4f:
5e:9d:b2:d9:0d:ef:ce:23:ff:cd:ce:da:36:1f:6e:05:28:f2:
a2:8d:80:55:ee:0d:a0:30:32:0a:f6:45:4c:92:63:0a:b4:ee:
2a:d3:ad:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBNK+KGMkU2F0Rddw684cTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw
ZmM4NWEwHhcNMjUwNDI5MTEwMDM1WhcNMjUwNDMwMTEwMDM1WjAzMTEwLwYDVQQD
EyhjMTA4MDkxY2NiMTZmYjNkMWNhZDkxMzM0NzFlNjFiMDhjNGVhNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6bYIdPzSRawIkHW2cTfDfDJTHT
NjNap8WGSP4lGI4ONIwEIKYhLO2U0fxXWppZC7cKgooRQscBnjNNcZIAvL1TUnbu
r77x58u9vEmb6W8LAvTidI17SZTKI9kr/Qhiu2OcIS8MxkBQStlLxbcoLwFb3r35
fEVBxGf57VFLu/aPdMPS5UsT00NCpEYzJ/lARr1OCKIJSuN9xVteIxoBxmICTgvg
MEMAIS5u+pXVm8+saW4Ri5b1BQCO7V1G2WV5YteJsa7e0xrgbc9wELmynmGeno84
P8DEimCPTyN8kbVyGULvVxkWHN8EPfMjcTCr4tTrP88zmPKDyYapHAFU1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEICRzLFvs9HK2RM0ceYbCMTqQ8MB8GA1UdIwQY
MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt
NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi
LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9lAAFaD
IgKSkj5J/RbEfe2NaozTDi09E/KIcEujWIQjM71l2eVYO0MNYlt9wTS4p6+tF5d0
Q0dRkX0Eqd87SRUo+T99p4VtjEVoK/KMovtsuz5br/j4bokDtvRv5Y2EpBPTyxYF
cHd5qRJwTHl3trXUV/9RWWIdpq+H/xSK0a55ogpVom66S4CTkS9jgCcXLo/qjPNT
lUSbuYKXaHFwPXC14cn8QvkZ6EUuYG+nBs0xSREIEiovT9fOxV6vpgR5ThdFfDU/
4zFpqWoCdiSNYIF762+aUdlPXp2y2Q3vziP/zc7aNh9uBSjyoo2AVe4NoDAyCvZF
TJJjCrTuKtOtqQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:34:29 2025 by rpki-client