Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: u8RnpJtSZX+MQrit8hQKojpGYpjVwKeAJeHBgvwZfO8=
Subject key identifier: 53:2D:D6:3E:57:C6:3A:15:8A:FC:62:FA:5B:F1:26:FF:F5:4B:A0:F4
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0196A088E664B6B03EEB402ED8DB7E4CEB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 10C3
Signing time: Mon 05 May 2025 13:00:48 +0000
Manifest this update: Mon 05 May 2025 13:00:48 +0000
Manifest next update: Tue 06 May 2025 13:00:48 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: 4LN+A5Y/1qMMWSb1AMu20cO5/UYStIHhh8M6qgDV8SY=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:e6:64:b6:b0:3e:eb:40:2e:d8:db:7e:4c:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: May 5 13:00:48 2025 GMT
Not After : May 6 13:00:48 2025 GMT
Subject: CN=532dd63e57c63a158afc62fa5bf126fff54ba0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:fd:bc:ad:74:d1:57:f3:83:4f:5e:c9:88:
7d:1f:df:d3:b5:97:f9:49:bb:9c:99:ec:4f:7c:ca:
6f:60:8d:ea:54:1c:2f:25:c4:d8:83:82:63:f0:97:
e1:62:b8:64:f2:05:38:00:0c:0c:f2:06:56:c6:a1:
ba:7e:c6:e8:63:e6:46:70:91:3d:53:82:ba:e2:5f:
7a:26:db:22:e6:72:4d:11:a4:bd:ed:12:61:20:7e:
a1:9a:0f:a0:58:89:42:1f:cc:3f:cb:2b:5f:a4:62:
92:99:91:d5:16:38:e0:d3:df:d4:13:e4:26:27:4d:
55:02:ed:9d:e6:26:34:2c:b3:b6:fc:63:7a:f2:a1:
32:ac:b9:11:41:9a:aa:88:37:c6:f8:a8:32:cb:b4:
4b:9b:c7:3d:12:9e:e4:29:74:61:5b:c6:c6:f9:0b:
0f:83:09:92:7b:4d:93:3d:70:f5:1e:f3:01:02:7f:
3e:a5:fc:12:6d:7b:9c:93:7e:c9:73:27:c2:fd:e1:
54:10:f9:37:e4:0d:13:1f:3a:ea:d6:5d:93:43:c3:
92:3b:58:e8:af:27:86:50:20:9d:48:67:e0:91:0d:
80:43:53:c4:f1:40:e6:40:5c:a0:d5:3f:ae:f1:ab:
c2:e8:44:de:a6:60:b4:57:b3:fc:33:55:b0:1e:cc:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:D6:3E:57:C6:3A:15:8A:FC:62:FA:5B:F1:26:FF:F5:4B:A0:F4
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:79:15:23:df:70:3d:d9:c0:5f:aa:30:6f:6a:51:f4:41:e7:
a9:60:33:b2:93:e6:eb:53:29:5f:90:61:27:4b:00:d9:b6:b1:
b3:a4:ae:35:c2:cf:c2:43:e3:56:ed:d8:ff:17:15:e9:a0:17:
b1:67:f7:69:99:c6:51:79:49:c2:ad:a0:60:1c:f4:b8:0a:91:
88:4c:03:d2:41:e0:ad:8d:3f:44:68:8e:da:ad:4d:b5:e5:b1:
dc:f4:30:44:26:d0:dd:06:52:70:d4:99:b4:f7:c3:1e:36:1a:
20:06:96:b6:6a:00:5b:5b:f3:ab:9a:e0:8e:a1:7c:4a:09:92:
e3:dd:e0:cc:e5:8e:e5:59:1a:03:2e:93:50:1b:d6:11:a3:26:
59:02:b4:90:7c:50:e3:d8:92:a7:b1:24:e6:4c:06:29:89:dc:
66:ad:e3:a6:a5:43:94:5c:be:78:92:7c:f0:7e:c5:d3:de:bf:
33:fa:65:19:40:54:1e:df:6b:1b:e8:76:03:ca:c9:42:fa:94:
2d:54:33:da:55:f3:3e:31:b3:44:19:13:27:64:2d:51:98:c9:
bf:9a:b9:d8:aa:4c:02:ce:e3:11:75:7d:4c:1f:da:07:99:ba:
8c:bc:9d:f5:1c:f6:98:23:09:98:1c:ed:d6:c1:b2:ff:8a:f3:
5b:ed:ec:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiOZktrA+60Au2Nt+TOsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjUwNTA1MTMwMDQ4WhcNMjUwNTA2MTMwMDQ4WjAzMTEwLwYDVQQD
Eyg1MzJkZDYzZTU3YzYzYTE1OGFmYzYyZmE1YmYxMjZmZmY1NGJhMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGP9vK100Vfzg09eyYh9H9/TtZf5
SbucmexPfMpvYI3qVBwvJcTYg4Jj8JfhYrhk8gU4AAwM8gZWxqG6fsboY+ZGcJE9
U4K64l96Jtsi5nJNEaS97RJhIH6hmg+gWIlCH8w/yytfpGKSmZHVFjjg09/UE+Qm
J01VAu2d5iY0LLO2/GN68qEyrLkRQZqqiDfG+Kgyy7RLm8c9Ep7kKXRhW8bG+QsP
gwmSe02TPXD1HvMBAn8+pfwSbXuck37JcyfC/eFUEPk35A0THzrq1l2TQ8OSO1jo
ryeGUCCdSGfgkQ2AQ1PE8UDmQFyg1T+u8avC6ETepmC0V7P8M1WwHswd+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMt1j5XxjoVivxi+lvxJv/1S6D0MB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnkVI99w
PdnAX6owb2pR9EHnqWAzspPm61MpX5BhJ0sA2baxs6SuNcLPwkPjVu3Y/xcV6aAX
sWf3aZnGUXlJwq2gYBz0uAqRiEwD0kHgrY0/RGiO2q1NteWx3PQwRCbQ3QZScNSZ
tPfDHjYaIAaWtmoAW1vzq5rgjqF8SgmS493gzOWO5VkaAy6TUBvWEaMmWQK0kHxQ
49iSp7Ek5kwGKYncZq3jpqVDlFy+eJJ88H7F096/M/plGUBUHt9rG+h2A8rJQvqU
LVQz2lXzPjGzRBkTJ2QtUZjJv5q52KpMAs7jEXV9TB/aB5m6jLyd9Rz2mCMJmBzt
1sGy/4rzW+3sdw==
-----END CERTIFICATE-----
Generated at Mon May 5 17:17:10 2025 by rpki-client