Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: 66DsKC334lAT27MWmSuI2ZnyZNBoKBuWZ1UX9zpuSSc=
Subject key identifier: 75:EB:68:25:0F:7E:64:82:8C:7B:BC:90:C9:9A:EF:22:EC:56:BA:5B
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 01969F0835A69D0C99CF74B10D287E3195BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 125F
Signing time: Mon 05 May 2025 06:00:37 +0000
Manifest this update: Mon 05 May 2025 06:00:37 +0000
Manifest next update: Tue 06 May 2025 06:00:37 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: +FMpdYntkt2Zl9EZeGslEB5q0InQQAVHo6H641A28WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:35:a6:9d:0c:99:cf:74:b1:0d:28:7e:31:95:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: May 5 06:00:37 2025 GMT
Not After : May 6 06:00:37 2025 GMT
Subject: CN=75eb68250f7e64828c7bbc90c99aef22ec56ba5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:a4:08:d9:43:45:d1:21:a6:92:56:24:14:
c5:70:83:96:4c:b7:88:01:b9:be:51:17:0f:5f:72:
71:59:dd:ca:d8:9b:c6:df:c0:79:e2:ed:d2:50:22:
66:2f:84:25:42:31:6d:be:a0:a5:7d:81:74:90:dd:
cf:64:c3:06:79:ea:af:b9:31:5e:c4:7f:f2:4b:1a:
6e:23:77:34:99:b5:e0:e7:6a:d8:64:c4:89:d2:2b:
b8:7b:fe:76:a5:b0:4b:44:bb:8a:26:84:68:d7:02:
ea:56:f4:97:42:94:22:d8:83:98:5e:59:72:bf:8c:
91:b6:c2:c1:f1:52:25:6a:06:30:25:6d:2e:da:ea:
a6:c3:db:9d:01:ae:bf:3a:30:89:1a:5c:d6:5f:ea:
e7:44:45:25:2b:af:34:ae:13:30:60:32:ee:78:8a:
27:c8:57:9d:fa:79:70:f1:b1:17:39:3a:17:b2:85:
57:66:0a:b4:5e:51:ef:d4:69:ec:60:f7:57:66:a7:
1a:60:6b:83:ae:1b:d6:9e:de:42:fc:7b:35:88:34:
a8:5a:33:1d:6e:5c:f2:fc:e4:8f:66:ec:94:9b:b0:
1e:a6:07:73:be:31:48:fd:de:9d:8b:cf:bd:ad:61:
2c:7a:1a:9e:f6:32:31:9e:0b:98:19:aa:b8:37:61:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:68:25:0F:7E:64:82:8C:7B:BC:90:C9:9A:EF:22:EC:56:BA:5B
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:46:da:45:d3:53:c6:e7:1a:8f:19:ea:93:5c:a9:d7:19:cb:
5f:ce:75:ab:50:62:c0:8d:aa:e2:c4:54:90:ad:44:a1:86:e4:
dc:4a:45:2f:84:7b:8b:5d:f1:e9:32:2d:61:b6:1b:9d:1a:8b:
fc:7e:71:f3:23:f9:58:62:ba:dc:67:dc:2a:f0:85:06:3e:fe:
99:71:1b:ae:8a:fa:04:2d:91:32:ef:36:47:19:f8:42:db:3e:
5e:60:99:88:18:39:d8:6d:d6:47:bb:ce:6a:0e:a8:64:19:e8:
c3:9b:a9:b1:8d:60:81:83:a9:5a:7c:e5:b4:1e:2c:38:87:c9:
21:18:a2:d7:5d:78:fe:89:4c:7c:42:af:cf:16:7e:4f:fb:82:
49:c1:f0:be:cf:93:54:63:bb:b3:2d:ef:9e:83:c1:1f:47:d5:
cd:64:04:f8:d3:9c:9c:06:b3:f9:5e:07:f7:ae:20:a8:be:ac:
5c:7e:4d:b7:a3:1e:ca:a5:b7:df:bc:5d:80:94:79:fa:05:7e:
ee:ec:0d:58:32:66:51:83:ed:fd:f5:35:9e:dd:a9:be:aa:c6:
a7:a5:c4:bc:a1:22:ae:2f:3e:6c:a4:ac:48:53:a7:1e:41:d4:
ea:33:56:89:e9:a4:35:fe:ae:e1:54:87:c5:bc:69:a3:f6:09:
df:84:6d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCDWmnQyZz3SxDSh+MZW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy
NzFiNWIwHhcNMjUwNTA1MDYwMDM3WhcNMjUwNTA2MDYwMDM3WjAzMTEwLwYDVQQD
Eyg3NWViNjgyNTBmN2U2NDgyOGM3YmJjOTBjOTlhZWYyMmVjNTZiYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqqkCNlDRdEhppJWJBTFcIOWTLeI
Abm+URcPX3JxWd3K2JvG38B54u3SUCJmL4QlQjFtvqClfYF0kN3PZMMGeeqvuTFe
xH/ySxpuI3c0mbXg52rYZMSJ0iu4e/52pbBLRLuKJoRo1wLqVvSXQpQi2IOYXlly
v4yRtsLB8VIlagYwJW0u2uqmw9udAa6/OjCJGlzWX+rnREUlK680rhMwYDLueIon
yFed+nlw8bEXOToXsoVXZgq0XlHv1GnsYPdXZqcaYGuDrhvWnt5C/Hs1iDSoWjMd
blzy/OSPZuyUm7AepgdzvjFI/d6di8+9rWEsehqe9jIxnguYGaq4N2FfiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXraCUPfmSCjHu8kMma7yLsVrpbMB8GA1UdIwQY
MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt
YTY0ZGFkNjdiNzM1LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1
LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEbaRdNT
xucajxnqk1yp1xnLX851q1BiwI2q4sRUkK1EoYbk3EpFL4R7i13x6TItYbYbnRqL
/H5x8yP5WGK63GfcKvCFBj7+mXEbror6BC2RMu82Rxn4Qts+XmCZiBg52G3WR7vO
ag6oZBnow5upsY1ggYOpWnzltB4sOIfJIRii1114/olMfEKvzxZ+T/uCScHwvs+T
VGO7sy3vnoPBH0fVzWQE+NOcnAaz+V4H964gqL6sXH5Nt6MeyqW337xdgJR5+gV+
7uwNWDJmUYPt/fU1nt2pvqrGp6XEvKEiri8+bKSsSFOnHkHU6jNWiemkNf6u4VSH
xbxpo/YJ34Rt+A==
-----END CERTIFICATE-----
Generated at Mon May 5 12:23:31 2025 by rpki-client