Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
File: Mm9RyiOYIQP_40-YkNC3To-nga8.mft (raw, json)
Hash identifier: Cz8b3n8nrCL29yeuSa3VpePyDtCEfZFHc2yhS8R/AjE=
Subject key identifier: 33:3F:64:C2:E9:2A:8D:39:24:2C:E6:00:67:54:19:2B:57:20:4A:5C
Authority key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
Certificate issuer: /CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Certificate serial: 0196B17C39CDDDE3B5192058BEFD4839CB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
Manifest number: 0592
Signing time: Thu 08 May 2025 20:00:30 +0000
Manifest this update: Thu 08 May 2025 20:00:30 +0000
Manifest next update: Fri 09 May 2025 20:00:30 +0000
Files and hashes: 1: Mm9RyiOYIQP_40-YkNC3To-nga8.crl (hash: voRnRg8sIMHlV0ObQj8YmJATbaHhkZJ1eeDRshVcMNk=)
2: XS-Ybz0hvV9BojCYEUiidWOyx20.roa (hash: rQhYc9pPbBgv4YgNdF82ibLtydUp9AsYJJ57Y6MS2So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:39:cd:dd:e3:b5:19:20:58:be:fd:48:39:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Validity
Not Before: May 8 20:00:30 2025 GMT
Not After : May 9 20:00:30 2025 GMT
Subject: CN=333f64c2e92a8d39242ce6006754192b57204a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:1f:cb:95:98:e5:e1:47:8d:ae:fb:e8:c6:
3f:b7:e9:2d:44:5f:06:ec:90:d5:e0:1b:87:a2:95:
39:18:9f:29:c2:7c:e1:28:12:4c:46:4e:89:11:f3:
72:9a:c8:47:0c:99:2b:61:b8:7f:9b:13:79:27:88:
2a:6d:d1:55:5d:81:d1:43:16:99:75:92:25:d4:2d:
9d:a4:54:53:df:ef:fd:fd:c0:aa:95:6e:29:16:80:
11:9f:ea:d0:2e:e2:66:1c:e4:66:b5:e2:c8:50:9b:
82:ed:dc:99:ef:ad:9c:d0:80:fd:f5:0e:51:17:1b:
07:38:02:4f:bb:2f:f5:cf:24:91:8d:a3:b8:17:75:
1f:6c:a9:4d:3e:81:23:6c:78:52:23:d8:67:c9:95:
98:96:a0:1f:e5:94:8f:49:93:bb:09:ba:f2:0a:7e:
bb:8a:2f:24:97:d0:07:b0:17:be:64:5e:63:c7:e0:
70:95:80:3a:3f:ac:1d:30:7c:6c:d4:ef:f3:01:24:
32:7e:df:e3:09:ec:91:b7:13:5e:ae:e9:cf:f7:bd:
4f:9a:34:f4:94:b3:ad:e2:bc:39:f4:53:80:61:b7:
17:a5:99:40:89:e5:43:65:67:47:cd:2b:d6:3d:cb:
10:1f:b0:2e:49:ff:88:47:b1:70:5e:6d:da:24:ee:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3F:64:C2:E9:2A:8D:39:24:2C:E6:00:67:54:19:2B:57:20:4A:5C
X509v3 Authority Key Identifier:
keyid:32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:32:15:81:7c:06:15:2e:48:71:e9:6c:3d:12:a4:92:01:ad:
58:94:92:fa:70:1a:a0:69:ad:49:ce:d3:8a:9a:96:44:67:da:
c1:cb:d9:c1:60:cf:24:58:75:d0:f0:6b:ab:99:4c:93:38:ba:
7d:fc:3f:93:b9:7c:58:e5:53:89:ad:78:81:68:23:a0:6b:3e:
68:4e:5b:d5:f5:e9:5e:d6:00:31:33:97:07:2d:a6:fc:dd:42:
63:f1:4e:7f:4a:f7:b8:e2:0e:d4:1c:48:34:e5:b3:14:70:bd:
6f:48:54:9f:6b:ef:ed:6f:9e:06:f0:5b:04:1c:6f:8c:ed:d7:
4e:9e:65:9e:41:ec:7e:f2:2e:20:b6:a8:fb:a5:c4:0d:01:ba:
3d:0e:5b:cc:c3:4c:b7:c5:5b:c6:04:41:3b:fd:14:1d:2f:f1:
25:f9:53:f1:b7:f4:99:b0:a6:13:33:99:84:e5:e3:0c:46:35:
b6:98:ec:55:fe:0b:3d:6c:20:96:bc:0b:fd:12:97:75:d1:dc:
b7:60:20:26:56:79:31:14:f1:81:2e:76:22:f1:f4:fa:07:1d:
ec:ba:1e:da:c9:10:04:f2:27:df:4c:4d:dc:55:a2:b4:3b:e0:
17:47:5b:61:bb:64:37:21:55:a1:f1:0e:ab:b2:35:fc:f9:cf:
31:60:a8:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxfDnN3eO1GSBYvv1IOctaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNmY1MWNhMjM5ODIxMDNmZmUzNGY5ODkwZDBiNzRlOGZh
NzgxYWYwHhcNMjUwNTA4MjAwMDMwWhcNMjUwNTA5MjAwMDMwWjAzMTEwLwYDVQQD
EygzMzNmNjRjMmU5MmE4ZDM5MjQyY2U2MDA2NzU0MTkyYjU3MjA0YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+0fy5WY5eFHja776MY/t+ktRF8G
7JDV4BuHopU5GJ8pwnzhKBJMRk6JEfNymshHDJkrYbh/mxN5J4gqbdFVXYHRQxaZ
dZIl1C2dpFRT3+/9/cCqlW4pFoARn+rQLuJmHORmteLIUJuC7dyZ762c0ID99Q5R
FxsHOAJPuy/1zySRjaO4F3UfbKlNPoEjbHhSI9hnyZWYlqAf5ZSPSZO7CbryCn67
ii8kl9AHsBe+ZF5jx+BwlYA6P6wdMHxs1O/zASQyft/jCeyRtxNerunP971PmjT0
lLOt4rw59FOAYbcXpZlAieVDZWdHzSvWPcsQH7AuSf+IR7FwXm3aJO69AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM/ZMLpKo05JCzmAGdUGStXIEpcMB8GA1UdIwQY
MBaAFDJvUcojmCED/+NPmJDQt06Pp4GvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYt
OTY2ZmE5NmJlZmYyLzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYtOTY2ZmE5NmJlZmYy
LzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzIVgXwG
FS5IcelsPRKkkgGtWJSS+nAaoGmtSc7TipqWRGfawcvZwWDPJFh10PBrq5lMkzi6
ffw/k7l8WOVTia14gWgjoGs+aE5b1fXpXtYAMTOXBy2m/N1CY/FOf0r3uOIO1BxI
NOWzFHC9b0hUn2vv7W+eBvBbBBxvjO3XTp5lnkHsfvIuILao+6XEDQG6PQ5bzMNM
t8VbxgRBO/0UHS/xJflT8bf0mbCmEzOZhOXjDEY1tpjsVf4LPWwglrwL/RKXddHc
t2AgJlZ5MRTxgS52IvH0+gcd7Loe2skQBPIn30xN3FWitDvgF0dbYbtkNyFVofEO
q7I1/PnPMWCoZQ==
-----END CERTIFICATE-----
Generated at Fri May 9 03:01:38 2025 by rpki-client