Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: D2wZS++ZeNB+SR9xSZ8wvEpV4dD80TH+HKOoB7u7+7c=
Subject key identifier: EC:78:90:CC:36:D8:E4:EF:B2:CC:AA:57:C9:EE:F4:40:56:BA:5F:41
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 0196B77E43C3D563CC78D9081EA712951BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 00:00:27 +0000
Manifest this update: Sat 10 May 2025 00:00:27 +0000
Manifest next update: Sun 11 May 2025 00:00:27 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: N86hSG1b94+TPBGLDQfhgj4kYA8IMm1F30YTdPt0NwU=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:43:c3:d5:63:cc:78:d9:08:1e:a7:12:95:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: May 10 00:00:27 2025 GMT
Not After : May 11 00:00:27 2025 GMT
Subject: CN=ec7890cc36d8e4efb2ccaa57c9eef44056ba5f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:b9:3e:2e:f6:0c:fe:df:ea:86:d5:64:0c:
4b:df:f1:ba:69:4d:6a:6d:ba:7d:80:d0:3f:01:66:
9d:f8:c6:d5:71:3e:19:cf:67:36:66:9e:c9:89:68:
c2:09:15:e7:1e:a2:63:1e:7d:fb:0d:05:31:89:ad:
3e:c7:cb:12:79:39:94:5f:e9:0d:32:d4:fb:c0:13:
e5:b7:83:44:cb:38:6e:4a:b7:a5:0f:d8:d4:c5:bf:
3f:53:46:b4:1a:11:45:0f:8f:74:12:1b:9c:e8:2f:
86:fa:8d:c4:13:8c:6c:6d:36:97:13:67:55:1c:13:
f3:fd:02:ce:07:5c:06:8d:16:9b:3c:8a:67:45:0b:
6d:59:fa:d0:0c:7a:f2:89:80:11:87:8a:77:d7:c8:
83:0b:9c:e1:2f:70:fd:bc:58:7a:41:75:71:ca:91:
d2:7f:03:7c:36:63:7d:f8:ac:bf:1a:3d:6d:04:c3:
0d:06:5f:36:be:4a:61:7c:ad:25:ae:65:7f:e4:6e:
93:f4:d8:1e:71:aa:d5:ed:62:d7:07:b9:ae:49:07:
db:4d:7a:f0:8d:f9:25:6a:08:e4:bb:95:f2:99:a4:
1a:f3:b8:de:47:e2:78:77:ac:dc:4b:ba:f1:28:dc:
d7:9e:c7:d1:b0:f6:40:71:c0:bc:6d:2d:74:c4:64:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:78:90:CC:36:D8:E4:EF:B2:CC:AA:57:C9:EE:F4:40:56:BA:5F:41
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d9:c9:a9:b0:87:da:fb:45:eb:01:9e:21:74:fe:7f:63:9c:
21:97:7c:03:9e:ec:0f:3a:2f:e9:6b:92:0f:04:0a:c1:76:fa:
c3:e1:df:d2:19:7b:9e:d3:cb:84:8e:38:ec:93:fc:6b:75:1c:
06:2d:52:f2:8e:2f:4a:d3:7b:bb:01:6e:dc:2a:cb:6d:eb:b8:
33:1a:85:6d:84:7c:5f:1b:a4:fa:a9:5a:33:90:e3:b7:b7:18:
7f:54:a6:d8:0e:f2:53:ba:3c:b6:62:db:96:4c:ce:60:33:ed:
25:62:a8:9c:95:e2:86:2c:fb:f2:37:ce:a2:35:e0:7f:20:a5:
c9:da:07:fa:0b:8a:2e:b5:31:bd:9f:c1:91:7f:ef:c9:4d:ed:
30:28:b5:ed:be:93:f2:d3:99:75:95:8b:cd:4d:70:9a:b7:80:
73:65:d7:aa:2e:97:2b:1f:0a:c9:ee:39:62:0a:ce:bc:13:71:
38:1d:cb:eb:66:44:79:1d:90:51:56:a2:a3:02:c8:6a:a9:b1:
6b:fc:5a:7b:8b:45:18:3d:87:b0:74:da:08:f1:47:7c:64:e6:
ee:e0:8b:b0:7c:07:95:fa:a5:89:48:0d:75:3a:6e:0b:5c:97:
f3:8a:41:7c:37:cf:88:86:ab:fe:c8:1d:ea:bf:ee:03:e3:35:
fa:74:df:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3fkPD1WPMeNkIHqcSlRujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjgyZDc3YzY2MmU2OGJiODdlODMzMzhiNzZhZDZiZWFk
OTMxODUwHhcNMjUwNTEwMDAwMDI3WhcNMjUwNTExMDAwMDI3WjAzMTEwLwYDVQQD
EyhlYzc4OTBjYzM2ZDhlNGVmYjJjY2FhNTdjOWVlZjQ0MDU2YmE1ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAska5Pi72DP7f6obVZAxL3/G6aU1q
bbp9gNA/AWad+MbVcT4Zz2c2Zp7JiWjCCRXnHqJjHn37DQUxia0+x8sSeTmUX+kN
MtT7wBPlt4NEyzhuSrelD9jUxb8/U0a0GhFFD490Ehuc6C+G+o3EE4xsbTaXE2dV
HBPz/QLOB1wGjRabPIpnRQttWfrQDHryiYARh4p318iDC5zhL3D9vFh6QXVxypHS
fwN8NmN9+Ky/Gj1tBMMNBl82vkphfK0lrmV/5G6T9NgecarV7WLXB7muSQfbTXrw
jfklagjku5XymaQa87jeR+J4d6zcS7rxKNzXnsfRsPZAccC8bS10xGQXzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx4kMw22OTvssyqV8nu9EBWul9BMB8GA1UdIwQY
MBaAFJkoLXfGYuaLuH6DM4t2rWvq2TGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGIt
MDU2YjljMjMxZjM0LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGItMDU2YjljMjMxZjM0
LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActnJqbCH
2vtF6wGeIXT+f2OcIZd8A57sDzov6WuSDwQKwXb6w+Hf0hl7ntPLhI447JP8a3Uc
Bi1S8o4vStN7uwFu3CrLbeu4MxqFbYR8Xxuk+qlaM5Djt7cYf1Sm2A7yU7o8tmLb
lkzOYDPtJWKonJXihiz78jfOojXgfyClydoH+guKLrUxvZ/BkX/vyU3tMCi17b6T
8tOZdZWLzU1wmreAc2XXqi6XKx8Kye45YgrOvBNxOB3L62ZEeR2QUVaiowLIaqmx
a/xae4tFGD2HsHTaCPFHfGTm7uCLsHwHlfqliUgNdTpuC1yX84pBfDfPiIar/sgd
6r/uA+M1+nTf+w==
-----END CERTIFICATE-----
Generated at Sat May 10 07:41:39 2025 by rpki-client