Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: SRCnxP1wxDM6/M4F4W5n3xq+LSKXq91sX7KaN7kZDkE=
Subject key identifier: F0:F5:3F:40:BF:AC:C6:FB:56:6F:13:5F:F4:E3:8E:EF:EF:8F:E8:D7
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 0196B3D89585FF03C6913568D8AD15C5EB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0AF4
Signing time: Fri 09 May 2025 07:00:37 +0000
Manifest this update: Fri 09 May 2025 07:00:37 +0000
Manifest next update: Sat 10 May 2025 07:00:37 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: FZ85cEwT8Wr8ivEXr4HGoOK/PzgX9eH5v1W3/TmiCdI=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:95:85:ff:03:c6:91:35:68:d8:ad:15:c5:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: May 9 07:00:37 2025 GMT
Not After : May 10 07:00:37 2025 GMT
Subject: CN=f0f53f40bfacc6fb566f135ff4e38eefef8fe8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:7d:03:cc:66:89:d4:20:e5:48:66:7c:7e:
4d:b0:1c:5e:08:73:d0:1b:2a:10:2c:b0:54:5d:3d:
99:4e:29:c4:bf:6b:27:3e:b6:5f:c8:1f:be:ca:06:
57:48:b4:2c:5c:5b:99:41:b8:12:78:3f:79:23:fc:
b0:31:06:38:9b:f0:e9:ae:4a:65:9d:ba:b6:14:2b:
fe:81:bb:b6:5a:0b:ec:75:e6:b3:92:ad:88:07:50:
4c:05:03:12:7f:38:aa:66:ba:22:df:5e:34:ec:99:
07:e1:50:d2:79:3d:b3:f2:4c:8b:1b:3c:ee:5e:3f:
31:b6:27:2f:01:27:ea:95:64:9e:83:39:75:54:35:
6e:e8:0a:b7:13:1c:1e:60:80:10:01:3a:8a:a8:32:
40:2e:9f:41:25:b2:2a:8a:e5:69:0d:c5:24:30:59:
d7:ea:43:ba:4d:d1:01:00:71:2f:71:ab:88:fa:aa:
a9:2c:2c:22:01:9b:98:e3:f0:f2:37:95:bf:4a:10:
85:7e:22:b8:10:98:a2:77:5f:c8:b4:1e:82:46:44:
e2:fa:6b:ec:2e:b2:83:b5:bf:c9:26:c9:8c:1b:22:
da:28:80:37:cb:b1:82:3e:44:b3:61:58:62:fc:26:
3b:30:30:60:9c:96:ca:b4:d9:f3:02:54:b6:73:46:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:3F:40:BF:AC:C6:FB:56:6F:13:5F:F4:E3:8E:EF:EF:8F:E8:D7
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:21:fc:23:f2:7b:54:82:3f:8a:17:7f:5b:39:0e:3a:dd:
89:31:ee:b4:9a:69:ee:98:96:93:69:1a:31:27:f0:1c:5c:c1:
7f:60:d6:24:65:e6:a8:01:f8:cd:bd:ff:47:2b:75:ca:4c:06:
4c:c3:dd:b6:2e:e7:85:13:50:9a:58:56:06:86:92:2e:9d:b8:
94:cd:fc:4f:f0:19:2d:cf:90:41:d7:e3:9c:12:57:0a:e1:39:
2e:18:dd:03:9f:1e:b2:91:62:19:e7:17:e0:97:53:67:51:46:
2e:0f:63:82:a6:72:fe:35:7b:b0:c4:22:6b:cf:bd:76:e8:aa:
a5:a8:52:55:24:33:b7:81:5c:f4:72:a2:c5:7e:a7:58:7d:14:
60:5c:f4:38:54:f7:28:d3:e5:5d:81:c2:3f:fe:4e:36:03:8f:
1a:75:07:9a:46:cb:1c:01:2a:70:c3:de:50:21:6a:7d:9d:22:
5e:aa:34:b6:5a:f8:9d:63:4d:db:84:d0:10:3f:b2:46:2f:b1:
df:bc:61:0e:41:4d:d0:05:49:52:a4:62:60:42:da:5e:f4:56:
18:19:b2:8a:e6:8e:45:28:d2:ab:68:0c:08:b2:9a:29:3c:b7:
6c:8e:38:66:b4:4d:43:61:6c:17:07:9b:97:73:5d:5c:ac:2a:
29:af:6b:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2JWF/wPGkTVo2K0VxesoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTQ1NzY4ZjQ3YzM1Nzg1ZWViYWQ3YTM0MzhhNGIxYzRm
OGRjMzAwHhcNMjUwNTA5MDcwMDM3WhcNMjUwNTEwMDcwMDM3WjAzMTEwLwYDVQQD
EyhmMGY1M2Y0MGJmYWNjNmZiNTY2ZjEzNWZmNGUzOGVlZmVmOGZlOGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hd9A8xmidQg5UhmfH5NsBxeCHPQ
GyoQLLBUXT2ZTinEv2snPrZfyB++ygZXSLQsXFuZQbgSeD95I/ywMQY4m/Dprkpl
nbq2FCv+gbu2Wgvsdeazkq2IB1BMBQMSfziqZroi31407JkH4VDSeT2z8kyLGzzu
Xj8xticvASfqlWSegzl1VDVu6Aq3ExweYIAQATqKqDJALp9BJbIqiuVpDcUkMFnX
6kO6TdEBAHEvcauI+qqpLCwiAZuY4/DyN5W/ShCFfiK4EJiid1/ItB6CRkTi+mvs
LrKDtb/JJsmMGyLaKIA3y7GCPkSzYVhi/CY7MDBgnJbKtNnzAlS2c0YzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD1P0C/rMb7Vm8TX/Tjju/vj+jXMB8GA1UdIwQY
MBaAFDJUV2j0fDV4XuutejQ4pLHE+NwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2JjNzYtOTc0ZS00MDE4LTk0ZmQt
N2Y0NmM4YzY4ZTdlLzEvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80N2JjNzYtOTc0ZS00MDE4LTk0ZmQtN2Y0NmM4YzY4ZTdl
LzEvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUM8h/CPy
e1SCP4oXf1s5DjrdiTHutJpp7piWk2kaMSfwHFzBf2DWJGXmqAH4zb3/Ryt1ykwG
TMPdti7nhRNQmlhWBoaSLp24lM38T/AZLc+QQdfjnBJXCuE5LhjdA58espFiGecX
4JdTZ1FGLg9jgqZy/jV7sMQia8+9duiqpahSVSQzt4Fc9HKixX6nWH0UYFz0OFT3
KNPlXYHCP/5ONgOPGnUHmkbLHAEqcMPeUCFqfZ0iXqo0tlr4nWNN24TQED+yRi+x
37xhDkFN0AVJUqRiYELaXvRWGBmyiuaORSjSq2gMCLKaKTy3bI44ZrRNQ2FsFweb
l3NdXKwqKa9rtQ==
-----END CERTIFICATE-----
Generated at Fri May 9 14:23:09 2025 by rpki-client