Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: dRvhnQB7sM+FCstzfDEz7akKgryohAN8WxjmoYHNgSY=
Subject key identifier: FF:96:2E:35:D2:15:14:56:CE:E7:90:B4:F7:56:EA:3A:BB:6D:A8:AE
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 0196BDEE7B20E00B1A259DB6BDA1FB401672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 0527
Signing time: Sun 11 May 2025 06:00:44 +0000
Manifest this update: Sun 11 May 2025 06:00:44 +0000
Manifest next update: Mon 12 May 2025 06:00:44 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: Yu0GACC12wtt6rwG+I7CqBIqgZF+MlUVwj41P/d3dmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:7b:20:e0:0b:1a:25:9d:b6:bd:a1:fb:40:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: May 11 06:00:44 2025 GMT
Not After : May 12 06:00:44 2025 GMT
Subject: CN=ff962e35d2151456cee790b4f756ea3abb6da8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:14:ef:00:13:c8:0b:92:9f:b1:e0:8f:c7:
e1:25:10:d3:c5:a5:c1:81:3b:cb:aa:1f:9b:56:78:
01:87:f3:4b:d3:6d:52:b7:32:27:ad:13:82:62:c2:
3a:42:34:62:11:21:cd:d9:dc:8f:20:d6:5f:07:eb:
6f:f9:74:40:48:37:22:b9:e7:f0:b7:1d:34:b6:c7:
ca:86:f9:97:74:df:ed:d6:c2:da:90:fb:a9:63:b9:
cc:0c:26:2b:a8:01:a4:e7:93:e4:a8:46:ec:4e:fc:
a3:96:bc:ad:fc:5f:5c:da:f3:ee:ea:7f:77:ff:b2:
a4:6b:3d:b7:89:7f:2f:9b:25:20:3e:a6:76:a5:35:
3e:84:53:5a:84:23:4a:7e:fa:d4:74:44:05:77:b6:
83:91:e7:9f:3b:7b:f3:1a:4f:49:e9:4a:8c:5e:21:
80:01:61:d1:7d:8b:e1:8d:c5:9b:ee:85:e2:21:02:
6d:3a:50:ad:53:2a:84:a4:44:64:27:99:5d:04:3b:
0c:3f:5f:3e:60:4f:f3:f6:06:44:88:69:99:50:d4:
da:4d:80:56:c7:7a:61:77:9d:15:9b:13:ab:69:0c:
0b:e2:eb:21:d7:3f:da:07:f8:ac:7b:67:67:98:75:
37:3c:1f:5e:36:93:25:a2:89:80:38:8f:68:a9:5e:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:2E:35:D2:15:14:56:CE:E7:90:B4:F7:56:EA:3A:BB:6D:A8:AE
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:42:83:16:4a:9b:18:46:39:f3:77:43:a4:a2:52:52:91:
4a:d1:a8:56:0c:7f:ea:f5:4b:24:0a:5b:9e:89:06:38:8d:42:
29:3a:71:6b:57:c6:11:0d:ca:45:7f:58:4e:c1:ec:41:d8:2d:
c1:7b:88:31:1c:8b:30:6e:63:b8:13:ac:d5:4d:77:7c:22:2e:
0c:34:0c:c8:b9:26:63:3b:9b:d6:c0:cd:86:63:94:92:9d:1d:
33:31:4d:ed:a4:df:b1:02:74:bf:91:14:b6:bb:e0:c3:6b:b2:
8c:fa:2d:68:e1:25:f0:01:5c:0c:71:22:7c:e0:cc:20:0f:04:
ad:50:f7:36:df:9c:fc:5d:7f:92:cb:6b:07:2e:fc:02:df:8b:
87:7c:a6:91:0e:ba:f5:9e:16:ce:39:ef:87:43:c1:29:b6:b0:
2b:07:55:ab:0a:1f:ec:0a:80:af:85:e2:5a:ef:93:6e:66:b9:
e7:fa:0f:66:8a:80:a3:44:08:84:0b:b3:71:03:76:21:fc:0f:
4b:39:27:c9:4a:01:7d:8f:60:05:ea:d2:60:53:62:74:c3:76:
20:e0:f1:0a:44:72:09:c7:21:13:36:4a:ed:8d:5d:3f:a8:ed:
a7:8e:46:57:a4:ed:31:17:62:8d:e7:e3:87:68:e6:06:51:2c:
eb:a9:ef:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97nsg4AsaJZ22vaH7QBZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjMzNzQzYTY1NDkwNjE0MzM5OWY5MDM3MDQ4MDE2ODI2
MzhlN2MwHhcNMjUwNTExMDYwMDQ0WhcNMjUwNTEyMDYwMDQ0WjAzMTEwLwYDVQQD
EyhmZjk2MmUzNWQyMTUxNDU2Y2VlNzkwYjRmNzU2ZWEzYWJiNmRhOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4EU7wATyAuSn7Hgj8fhJRDTxaXB
gTvLqh+bVngBh/NL021StzInrROCYsI6QjRiESHN2dyPINZfB+tv+XRASDciuefw
tx00tsfKhvmXdN/t1sLakPupY7nMDCYrqAGk55PkqEbsTvyjlryt/F9c2vPu6n93
/7Kkaz23iX8vmyUgPqZ2pTU+hFNahCNKfvrUdEQFd7aDkeefO3vzGk9J6UqMXiGA
AWHRfYvhjcWb7oXiIQJtOlCtUyqEpERkJ5ldBDsMP18+YE/z9gZEiGmZUNTaTYBW
x3phd50VmxOraQwL4ush1z/aB/ise2dnmHU3PB9eNpMloomAOI9oqV62QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+WLjXSFRRWzueQtPdW6jq7baiuMB8GA1UdIwQY
MBaAFJqzN0OmVJBhQzmfkDcEgBaCY458MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2Mjgt
ZDhmOTM1MzZhZjYzLzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2MjgtZDhmOTM1MzZhZjYz
LzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNVCgxZK
mxhGOfN3Q6SiUlKRStGoVgx/6vVLJApbnokGOI1CKTpxa1fGEQ3KRX9YTsHsQdgt
wXuIMRyLMG5juBOs1U13fCIuDDQMyLkmYzub1sDNhmOUkp0dMzFN7aTfsQJ0v5EU
trvgw2uyjPotaOEl8AFcDHEifODMIA8ErVD3Nt+c/F1/kstrBy78At+Lh3ymkQ66
9Z4Wzjnvh0PBKbawKwdVqwof7AqAr4XiWu+Tbma55/oPZoqAo0QIhAuzcQN2IfwP
SzknyUoBfY9gBerSYFNidMN2IODxCkRyCcchEzZK7Y1dP6jtp45GV6TtMRdijefj
h2jmBlEs66nvsg==
-----END CERTIFICATE-----
Generated at Sun May 11 14:42:51 2025 by rpki-client