Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: BvqcU6f8Au6rQ1mYjWPG7BSCwB0a1Q64QQ6ro8rAQbE=
Subject key identifier: 0D:33:E7:16:6F:90:E9:48:9D:5F:2C:25:1C:C5:DF:83:BE:20:DE:30
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 0196BF00E227FDC4AD51C6B536E348308E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 11:00:28 +0000
Manifest this update: Sun 11 May 2025 11:00:28 +0000
Manifest next update: Mon 12 May 2025 11:00:28 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: YyUpJYSCyvgfb6zszUWPtptxi8VlNhkPQZYLYXlvCFU=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:e2:27:fd:c4:ad:51:c6:b5:36:e3:48:30:8e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: May 11 11:00:28 2025 GMT
Not After : May 12 11:00:28 2025 GMT
Subject: CN=0d33e7166f90e9489d5f2c251cc5df83be20de30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:49:01:f5:49:eb:c1:55:6a:3c:3c:7c:d0:
fb:2f:56:93:1d:1f:92:64:bd:c8:de:b6:fb:39:31:
c1:3b:db:51:51:ea:ef:5d:6f:a0:21:c4:f1:58:73:
51:6f:b6:16:df:ca:cb:69:2f:a4:b0:dc:91:c2:21:
b4:2a:d9:b9:43:c1:d4:e8:71:21:23:a8:8d:02:c5:
3e:6c:f6:f6:80:c8:34:ac:03:4b:d1:03:d3:53:15:
39:06:3c:a6:d8:4c:32:c4:17:17:7d:be:1f:e4:1b:
70:18:74:20:d4:14:96:6e:24:9b:da:6c:a6:ad:d3:
87:eb:8f:bf:c4:ff:c8:ea:61:51:55:f2:61:e0:f0:
b3:bd:7d:69:f7:ef:26:a2:60:05:ec:69:72:7d:ba:
9b:d3:25:6a:60:91:40:9a:14:19:6a:ec:9b:7b:02:
96:48:91:5e:0a:58:62:da:f5:0a:a7:98:71:0e:1b:
50:86:7c:ce:6d:df:6b:94:af:05:12:31:93:32:23:
f6:ae:be:91:74:3c:85:49:df:1c:95:a3:a3:0d:ab:
53:c5:00:97:42:d7:37:d2:4d:80:9e:6c:01:0c:e3:
20:1d:02:5d:5b:38:b5:6d:1e:46:ea:74:a3:cf:f5:
7f:e3:8d:5b:d8:29:c9:92:86:03:c5:27:f8:60:51:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:33:E7:16:6F:90:E9:48:9D:5F:2C:25:1C:C5:DF:83:BE:20:DE:30
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:87:3a:d2:fd:7f:b8:ef:f8:b5:f9:68:b4:5e:e1:50:2d:9d:
08:c4:ba:e5:9f:f8:3b:67:66:09:f5:34:7e:46:e8:05:e3:9b:
fb:08:b1:c9:ce:ea:7b:18:e7:aa:b5:70:cc:9a:ba:bf:d2:fa:
46:74:96:7c:f9:a7:95:4d:d5:ca:70:95:50:40:c7:ab:b9:07:
de:9e:90:67:57:06:b5:be:56:03:37:eb:be:c0:b1:89:dd:c9:
fe:f7:c3:49:d1:c4:79:cd:81:29:59:16:3c:d8:b5:1d:82:f3:
5c:a6:86:5b:21:be:eb:1d:26:7f:94:af:0d:f7:d5:f2:f6:12:
b8:d3:88:2e:0b:94:ce:94:cc:06:fb:dd:9f:7f:37:e5:9c:35:
cc:b3:58:03:77:65:29:38:a4:83:f1:5b:28:8c:c4:2f:37:46:
18:89:c7:84:91:12:fb:f1:f0:93:c0:0d:f3:29:47:cf:d3:30:
e5:9e:29:4b:f0:ab:61:84:2d:1d:62:ed:cf:55:a1:64:67:c9:
6d:2a:c7:e9:3e:ab:67:6c:01:a5:d7:5c:9f:0e:d9:4b:28:c4:
8d:a8:66:a2:1e:f5:df:16:82:cf:61:d0:06:aa:4f:26:d8:91:
71:1e:03:a0:eb:b0:1d:31:e8:c3:aa:a6:f4:7d:51:0a:4b:8b:
81:e7:73:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/AOIn/cStUca1NuNIMI4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj
YjhmNDgwHhcNMjUwNTExMTEwMDI4WhcNMjUwNTEyMTEwMDI4WjAzMTEwLwYDVQQD
EygwZDMzZTcxNjZmOTBlOTQ4OWQ1ZjJjMjUxY2M1ZGY4M2JlMjBkZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuotJAfVJ68FVajw8fND7L1aTHR+S
ZL3I3rb7OTHBO9tRUervXW+gIcTxWHNRb7YW38rLaS+ksNyRwiG0Ktm5Q8HU6HEh
I6iNAsU+bPb2gMg0rANL0QPTUxU5Bjym2EwyxBcXfb4f5BtwGHQg1BSWbiSb2mym
rdOH64+/xP/I6mFRVfJh4PCzvX1p9+8momAF7Glyfbqb0yVqYJFAmhQZauybewKW
SJFeClhi2vUKp5hxDhtQhnzObd9rlK8FEjGTMiP2rr6RdDyFSd8claOjDatTxQCX
Qtc30k2AnmwBDOMgHQJdWzi1bR5G6nSjz/V/441b2CnJkoYDxSf4YFFcwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0z5xZvkOlInV8sJRzF34O+IN4wMB8GA1UdIwQY
MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt
NzU0NjFhYmJiNWE0LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0
LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4c60v1/
uO/4tflotF7hUC2dCMS65Z/4O2dmCfU0fkboBeOb+wixyc7qexjnqrVwzJq6v9L6
RnSWfPmnlU3VynCVUEDHq7kH3p6QZ1cGtb5WAzfrvsCxid3J/vfDSdHEec2BKVkW
PNi1HYLzXKaGWyG+6x0mf5SvDffV8vYSuNOILguUzpTMBvvdn3835Zw1zLNYA3dl
KTikg/FbKIzELzdGGInHhJES+/Hwk8AN8ylHz9Mw5Z4pS/CrYYQtHWLtz1WhZGfJ
bSrH6T6rZ2wBpddcnw7ZSyjEjahmoh713xaCz2HQBqpPJtiRcR4DoOuwHTHow6qm
9H1RCkuLgedzZw==
-----END CERTIFICATE-----
Generated at Sun May 11 16:48:34 2025 by rpki-client