Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: 2f807Z3bL+NHr4Z9Gh6TNjASE5mg+GGXkKkyUNiCAss=
Subject key identifier: 7E:A3:04:0E:6A:51:19:3C:C1:3C:AC:19:CB:B4:25:2A:FC:6D:99:CD
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 0196C570C5607760623F66CBF65CCA965E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 1246
Signing time: Mon 12 May 2025 17:00:24 +0000
Manifest this update: Mon 12 May 2025 17:00:24 +0000
Manifest next update: Tue 13 May 2025 17:00:24 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: KkbqqFwvqF9h5Jz4/YE4qeU8wymFPPfm6q9oxyyPWxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:c5:60:77:60:62:3f:66:cb:f6:5c:ca:96:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: May 12 17:00:24 2025 GMT
Not After : May 13 17:00:24 2025 GMT
Subject: CN=7ea3040e6a51193cc13cac19cbb4252afc6d99cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:55:8d:f1:6f:a2:52:7c:aa:75:f4:e6:40:
41:2c:a9:3b:1c:2d:fb:6d:af:8f:46:5e:40:f9:4d:
fe:d2:52:8e:cc:26:f3:2f:63:a2:26:05:08:a1:19:
68:1f:1d:fa:4a:3d:06:53:5d:d7:6f:15:ec:8a:71:
e7:b0:a4:c5:a5:92:b1:1f:0b:78:77:20:a0:cb:74:
cc:d0:18:b6:d0:0b:c7:8d:54:41:b5:cb:f7:8c:32:
c8:27:46:40:ed:33:a8:0f:87:ca:6e:0f:78:a1:1a:
bf:5d:97:60:9d:f9:b5:cc:86:15:ac:35:c6:e6:e1:
b2:37:78:b9:ce:80:67:8e:20:92:e4:31:fa:85:6a:
2b:33:84:85:0e:42:31:25:23:d8:61:61:0d:dd:bd:
19:50:bd:39:3c:74:4b:23:cb:04:a4:40:65:ca:83:
2c:cd:00:17:50:77:7b:85:c9:c2:0e:d5:e0:a4:99:
06:28:af:12:b2:45:bf:c2:25:6f:b9:f6:c6:64:82:
bc:6f:b9:01:15:b8:96:37:2a:d8:0b:db:a7:a5:aa:
17:4d:6f:53:b0:f1:02:4a:52:0c:2d:7e:45:c3:31:
dd:93:bf:a4:1a:1f:c4:99:f4:f2:2f:29:04:f6:86:
37:5f:1d:c2:8a:9a:56:b8:aa:c3:6d:05:b9:7a:d1:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:04:0E:6A:51:19:3C:C1:3C:AC:19:CB:B4:25:2A:FC:6D:99:CD
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8b:99:86:67:64:06:7e:94:e2:6c:d7:16:54:f4:36:ec:3d:
a4:32:d8:23:40:40:61:23:52:49:ef:3c:65:5c:06:b4:19:41:
37:77:c8:07:3c:fb:00:7c:75:d8:93:96:57:05:62:12:5f:60:
97:24:d0:d9:d7:79:cb:d5:bb:a9:6d:2d:f0:5d:96:a9:48:7f:
9e:5e:c0:1b:80:3b:27:e4:0d:e1:43:90:83:b3:c0:01:d3:8c:
73:b6:d7:ef:76:22:4d:35:e5:36:d9:4f:1d:cc:ff:92:59:e4:
fa:bb:fb:70:e3:31:c4:87:22:3e:91:85:12:4b:91:a0:fe:b0:
e0:7c:24:ff:e4:30:93:47:61:56:cc:50:4e:70:67:7a:eb:58:
4c:01:24:d6:b8:9e:9d:f0:63:6a:65:9d:e6:9a:93:6a:37:2e:
c9:1d:00:5b:7a:28:fe:c5:19:31:ed:be:9d:97:e6:08:2c:91:
b3:b7:50:60:0a:77:3b:02:83:3c:bd:59:ba:ca:e6:9d:ed:95:
43:85:14:61:48:66:e5:38:ff:b5:36:26:b3:11:37:81:a0:ea:
d6:ad:85:d3:ba:9a:bc:db:4f:22:80:0b:98:98:2e:82:7b:95:
0b:f5:23:cb:33:3c:2c:1c:85:ea:40:a5:4e:44:ff:91:a3:da:
3a:dd:db:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcMVgd2BiP2bL9lzKll5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOWI1MTNlNjU3MDZmY2FhNTQzYTExYTBlNDJkMjhiMTA5
ZGYzYjYwHhcNMjUwNTEyMTcwMDI0WhcNMjUwNTEzMTcwMDI0WjAzMTEwLwYDVQQD
Eyg3ZWEzMDQwZTZhNTExOTNjYzEzY2FjMTljYmI0MjUyYWZjNmQ5OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA5VjfFvolJ8qnX05kBBLKk7HC37
ba+PRl5A+U3+0lKOzCbzL2OiJgUIoRloHx36Sj0GU13XbxXsinHnsKTFpZKxHwt4
dyCgy3TM0Bi20AvHjVRBtcv3jDLIJ0ZA7TOoD4fKbg94oRq/XZdgnfm1zIYVrDXG
5uGyN3i5zoBnjiCS5DH6hWorM4SFDkIxJSPYYWEN3b0ZUL05PHRLI8sEpEBlyoMs
zQAXUHd7hcnCDtXgpJkGKK8SskW/wiVvufbGZIK8b7kBFbiWNyrYC9unpaoXTW9T
sPECSlIMLX5FwzHdk7+kGh/EmfTyLykE9oY3Xx3CippWuKrDbQW5etEsXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6jBA5qURk8wTysGcu0JSr8bZnNMB8GA1UdIwQY
MBaAFDKbUT5lcG/KpUOhGg5C0osQnfO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wYWRjZDgtOGE0Yi00OTIzLWJmMzYt
ODE0YTYxMWVjYTYwLzEvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wYWRjZDgtOGE0Yi00OTIzLWJmMzYtODE0YTYxMWVjYTYw
LzEvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZouZhmdk
Bn6U4mzXFlT0Nuw9pDLYI0BAYSNSSe88ZVwGtBlBN3fIBzz7AHx12JOWVwViEl9g
lyTQ2dd5y9W7qW0t8F2WqUh/nl7AG4A7J+QN4UOQg7PAAdOMc7bX73YiTTXlNtlP
Hcz/klnk+rv7cOMxxIciPpGFEkuRoP6w4Hwk/+Qwk0dhVsxQTnBneutYTAEk1rie
nfBjamWd5pqTajcuyR0AW3oo/sUZMe2+nZfmCCyRs7dQYAp3OwKDPL1Zusrmne2V
Q4UUYUhm5Tj/tTYmsxE3gaDq1q2F07qavNtPIoALmJgugnuVC/UjyzM8LByF6kCl
TkT/kaPaOt3bog==
-----END CERTIFICATE-----
Generated at Mon May 12 20:45:54 2025 by rpki-client