Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: 545A3jegOLb80lfYst03SVBn3tV2ZUq3csMoygkHwko=
Subject key identifier: 7E:90:6C:68:1F:17:E7:BD:64:60:6F:6C:CB:C5:7C:C5:A7:0D:C6:81
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 0196A842F3E6CF8479EFA02627F84D454B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 01:01:22 +0000
Manifest this update: Wed 07 May 2025 01:01:22 +0000
Manifest next update: Thu 08 May 2025 01:01:22 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: rloPdmE0TZzvAN684m539gBK2V3MA8XMKuQukCwNOEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:f3:e6:cf:84:79:ef:a0:26:27:f8:4d:45:4b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: May 7 01:01:22 2025 GMT
Not After : May 8 01:01:22 2025 GMT
Subject: CN=7e906c681f17e7bd64606f6ccbc57cc5a70dc681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:7d:75:c8:62:52:1e:8d:7f:46:c7:76:64:
3b:44:88:0d:98:68:22:6c:c9:eb:01:45:84:3f:b9:
52:94:64:25:d6:11:9f:37:1e:a6:5c:e0:ea:65:09:
d4:24:fc:d1:42:54:2c:eb:00:6c:11:4d:18:09:12:
bc:90:bd:01:e8:fd:a9:0e:6a:a3:25:14:c7:60:73:
66:44:b8:06:2f:24:8e:f8:f3:0d:67:8b:70:71:f3:
5f:f1:fa:f4:1b:40:f9:ba:cd:e9:2e:43:31:c5:14:
88:b6:6b:4a:13:d9:c7:ee:2b:0e:0d:b5:2b:c2:39:
99:a4:d9:7d:f2:30:1a:ec:1c:4e:67:c7:78:a0:7a:
ed:ca:5a:82:d7:58:f5:21:76:6a:cf:7d:2e:e0:b1:
c8:56:6e:2d:28:c0:69:b4:7c:e6:1b:e6:e4:0a:c4:
e0:6b:60:bb:70:c0:60:ef:38:55:a4:98:4e:ca:aa:
00:9a:30:97:cc:e0:f0:cd:8a:96:10:ba:96:b0:77:
da:bb:17:19:1b:e5:85:67:3a:3a:85:6e:65:58:3b:
ac:b7:1f:8b:7c:3a:8b:42:00:6a:f9:02:73:b9:68:
22:0e:86:70:79:55:34:c1:54:2e:d9:3c:6b:3f:71:
26:6d:e2:b0:0e:f3:23:20:bd:80:f8:af:65:32:6d:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:6C:68:1F:17:E7:BD:64:60:6F:6C:CB:C5:7C:C5:A7:0D:C6:81
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:84:fd:5a:b8:22:f8:0d:d1:b6:bd:b7:a4:73:37:5a:3f:88:
32:d6:fe:0e:a1:76:cc:10:70:a4:26:ae:6b:40:f1:7b:26:6f:
4a:70:0c:81:1e:a3:2e:af:76:52:a5:6e:a4:a5:58:bb:01:3e:
c9:c5:1a:cd:8b:8b:f4:42:09:1a:c9:7d:3c:0e:71:e3:3f:27:
78:5e:4e:ac:8b:31:b6:1a:62:0a:03:a8:62:06:fe:85:9f:db:
88:39:67:ec:13:1c:cc:80:bb:49:27:2c:2a:68:11:cb:4e:60:
a5:8a:3e:de:b2:82:27:93:0a:19:f7:62:ca:3f:42:04:c0:74:
f9:10:e4:1e:a1:55:e4:17:63:3a:68:01:4e:2e:ff:a6:59:ab:
be:4c:2a:e7:02:aa:03:47:97:38:c5:50:d0:74:95:d2:d9:fe:
ae:e0:36:6d:17:95:0b:2b:72:95:48:eb:23:ce:34:35:e9:d8:
ef:ce:99:78:2a:d4:08:23:8e:a9:35:3f:57:30:81:c7:f8:7b:
93:8f:9f:53:86:65:01:2b:bf:d0:52:6d:7a:7c:4b:fb:26:4d:
3e:22:d8:ab:ef:56:44:a8:2e:8d:3f:c4:a9:e8:a6:f3:91:9f:
b8:ac:94:f3:4c:13:c1:7b:b3:b3:98:04:8f:31:ec:9b:ac:56:
92:3f:08:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoQvPmz4R576AmJ/hNRUuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx
NGMzY2IwHhcNMjUwNTA3MDEwMTIyWhcNMjUwNTA4MDEwMTIyWjAzMTEwLwYDVQQD
Eyg3ZTkwNmM2ODFmMTdlN2JkNjQ2MDZmNmNjYmM1N2NjNWE3MGRjNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ59dchiUh6Nf0bHdmQ7RIgNmGgi
bMnrAUWEP7lSlGQl1hGfNx6mXODqZQnUJPzRQlQs6wBsEU0YCRK8kL0B6P2pDmqj
JRTHYHNmRLgGLySO+PMNZ4twcfNf8fr0G0D5us3pLkMxxRSItmtKE9nH7isODbUr
wjmZpNl98jAa7BxOZ8d4oHrtylqC11j1IXZqz30u4LHIVm4tKMBptHzmG+bkCsTg
a2C7cMBg7zhVpJhOyqoAmjCXzODwzYqWELqWsHfauxcZG+WFZzo6hW5lWDustx+L
fDqLQgBq+QJzuWgiDoZweVU0wVQu2TxrP3EmbeKwDvMjIL2A+K9lMm31lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6QbGgfF+e9ZGBvbMvFfMWnDcaBMB8GA1UdIwQY
MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt
MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh
LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2YT9Wrgi
+A3Rtr23pHM3Wj+IMtb+DqF2zBBwpCaua0DxeyZvSnAMgR6jLq92UqVupKVYuwE+
ycUazYuL9EIJGsl9PA5x4z8neF5OrIsxthpiCgOoYgb+hZ/biDln7BMczIC7SScs
KmgRy05gpYo+3rKCJ5MKGfdiyj9CBMB0+RDkHqFV5BdjOmgBTi7/plmrvkwq5wKq
A0eXOMVQ0HSV0tn+ruA2bReVCytylUjrI840NenY786ZeCrUCCOOqTU/VzCBx/h7
k4+fU4ZlASu/0FJtenxL+yZNPiLYq+9WRKgujT/Eqeim85GfuKyU80wTwXuzs5gE
jzHsm6xWkj8Ieg==
-----END CERTIFICATE-----
Generated at Wed May 7 05:06:08 2025 by rpki-client