Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: thuP5b58Zmg3euqGlOVTpcr2tsu9ztejIxOSB4eLT4I=
Subject key identifier: A1:B2:A4:C4:8A:D5:17:D2:83:17:A7:81:E6:B7:F6:7E:BC:CA:73:D6
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 0196A954ED6ED472C6ADAC29B68293F5CE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 132F
Signing time: Wed 07 May 2025 06:00:37 +0000
Manifest this update: Wed 07 May 2025 06:00:37 +0000
Manifest next update: Thu 08 May 2025 06:00:37 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: 4DSIiyAwPp+BqlEJWs8oZr94hpqGt7XHvaNvmvFPMY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:ed:6e:d4:72:c6:ad:ac:29:b6:82:93:f5:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: May 7 06:00:37 2025 GMT
Not After : May 8 06:00:37 2025 GMT
Subject: CN=a1b2a4c48ad517d28317a781e6b7f67ebcca73d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:38:fc:19:32:43:a3:a2:21:40:32:e3:aa:
bf:ff:86:40:b3:11:05:da:17:f4:ce:4b:27:ee:b3:
ea:05:2b:fb:b1:2e:96:5c:96:a9:fc:5d:01:1f:74:
43:d2:ef:6e:66:ed:aa:b9:f2:3b:2a:6f:7c:d1:75:
0f:4d:b3:d7:0a:c4:27:d8:d0:7e:a4:6b:97:b5:a0:
97:f5:ad:66:f9:9c:ee:74:48:5d:b9:77:e4:36:55:
83:7b:6a:93:38:3a:04:e7:02:b7:3c:ff:1d:29:15:
ae:89:97:db:0a:dc:d6:48:35:a7:b4:57:db:0e:9d:
f7:dc:0c:95:26:d8:7a:5e:51:28:2e:dd:2b:2b:e0:
fa:07:2f:5c:bc:3b:84:cd:78:89:a7:bc:97:41:3e:
b0:8b:19:7a:ec:42:ce:3f:f6:91:b9:9b:ca:08:50:
f4:1b:d9:a5:a1:66:80:5f:b1:db:7e:6f:d5:b4:fa:
91:b0:95:ad:ce:80:fe:38:55:55:b5:2b:91:6e:34:
ac:9e:75:49:83:b0:60:73:58:5e:a2:b0:11:e8:9f:
ab:82:66:e8:da:09:41:97:ad:c4:ac:d9:47:1d:de:
d3:97:76:c8:cb:0f:ee:3f:d1:79:6f:aa:8d:17:fb:
b5:66:85:4f:1e:b1:c2:2b:76:2c:6d:24:44:a9:8d:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B2:A4:C4:8A:D5:17:D2:83:17:A7:81:E6:B7:F6:7E:BC:CA:73:D6
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:57:09:17:38:07:fa:21:c6:0f:ed:fc:7a:5d:f3:f6:e4:
34:f6:13:ec:6e:11:0f:ad:e0:41:58:da:55:d8:a5:0e:2b:8c:
6b:04:b9:47:9c:bd:46:4a:4f:ac:dc:85:1a:da:57:e9:03:6d:
fd:df:be:9f:f6:ce:30:8c:5a:7b:8e:7b:73:8d:b1:21:6f:ef:
56:94:5e:cb:8c:9f:f3:71:f6:f3:a3:4b:24:f9:d0:3d:96:6a:
b2:2c:14:b7:e6:e6:7e:fd:42:8a:50:6a:5a:bd:08:1d:ba:2b:
5f:46:cd:95:7e:c1:4d:a8:67:33:f8:36:46:06:c2:c9:47:e7:
08:72:07:c7:16:e8:84:fe:7e:06:0a:5d:77:8c:07:4f:01:ab:
ac:29:b7:ec:4e:76:b5:c2:14:08:4e:cf:d3:de:9c:9a:93:02:
ea:ea:bc:d1:2e:3c:48:3b:87:d1:4d:a8:25:3d:22:ce:c1:94:
58:0f:b4:8e:69:82:cd:d2:ef:6f:40:01:68:0e:31:17:0f:c0:
82:4d:14:ee:98:10:b3:bf:ea:ee:72:bd:9b:c4:10:33:98:86:
0c:b7:f9:37:a5:34:61:f7:38:6c:9f:d4:bc:aa:76:89:d3:87:
35:e2:01:fc:d0:a3:a1:49:5b:2a:34:83:91:31:06:94:86:80:
83:df:a9:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapVO1u1HLGrawptoKT9c5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNzkyZGU3MGYzM2I4Mjg4MjU0MmJlZjIzYjE4ZGE5NzUz
OGNhMDQwHhcNMjUwNTA3MDYwMDM3WhcNMjUwNTA4MDYwMDM3WjAzMTEwLwYDVQQD
EyhhMWIyYTRjNDhhZDUxN2QyODMxN2E3ODFlNmI3ZjY3ZWJjY2E3M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P04/BkyQ6OiIUAy46q//4ZAsxEF
2hf0zksn7rPqBSv7sS6WXJap/F0BH3RD0u9uZu2qufI7Km980XUPTbPXCsQn2NB+
pGuXtaCX9a1m+ZzudEhduXfkNlWDe2qTODoE5wK3PP8dKRWuiZfbCtzWSDWntFfb
Dp333AyVJth6XlEoLt0rK+D6By9cvDuEzXiJp7yXQT6wixl67ELOP/aRuZvKCFD0
G9mloWaAX7Hbfm/VtPqRsJWtzoD+OFVVtSuRbjSsnnVJg7Bgc1heorAR6J+rgmbo
2glBl63ErNlHHd7Tl3bIyw/uP9F5b6qNF/u1ZoVPHrHCK3YsbSREqY0RuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGypMSK1RfSgxengea39n68ynPWMB8GA1UdIwQY
MBaAFJt5LecPM7goglQr7yOxjal1OMoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wYTRjMWUtMWZjNS00MDdhLWJkMDgt
MDcxN2RhMDUzNTg1LzEvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wYTRjMWUtMWZjNS00MDdhLWJkMDgtMDcxN2RhMDUzNTg1
LzEvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVVXCRc4
B/ohxg/t/Hpd8/bkNPYT7G4RD63gQVjaVdilDiuMawS5R5y9RkpPrNyFGtpX6QNt
/d++n/bOMIxae457c42xIW/vVpRey4yf83H286NLJPnQPZZqsiwUt+bmfv1CilBq
Wr0IHborX0bNlX7BTahnM/g2RgbCyUfnCHIHxxbohP5+Bgpdd4wHTwGrrCm37E52
tcIUCE7P096cmpMC6uq80S48SDuH0U2oJT0izsGUWA+0jmmCzdLvb0ABaA4xFw/A
gk0U7pgQs7/q7nK9m8QQM5iGDLf5N6U0Yfc4bJ/UvKp2idOHNeIB/NCjoUlbKjSD
kTEGlIaAg9+p1g==
-----END CERTIFICATE-----
Generated at Wed May 7 11:39:28 2025 by rpki-client