Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: 6PLfb1dMYKuTfO/l+fYF9eKky3cxzdXXe/AF1jsvw1g=
Subject key identifier: B7:02:D4:44:D9:A1:FD:5B:76:0E:10:B4:81:45:43:0A:F8:B8:6E:66
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 0196A843154E076BE25D23A8ADFFE40D606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0E68
Signing time: Wed 07 May 2025 01:01:30 +0000
Manifest this update: Wed 07 May 2025 01:01:30 +0000
Manifest next update: Thu 08 May 2025 01:01:30 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: W479dcMfeDPWBzw6Izkn4H8B/hnxn+Z3tZ/WwinJyrs=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:43:15:4e:07:6b:e2:5d:23:a8:ad:ff:e4:0d:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: May 7 01:01:30 2025 GMT
Not After : May 8 01:01:30 2025 GMT
Subject: CN=b702d444d9a1fd5b760e10b48145430af8b86e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cf:ae:2d:bf:d6:67:4e:78:86:b7:ff:01:c3:
2f:ff:95:f8:63:a6:38:b9:3f:83:98:0b:c3:59:9d:
a3:69:c3:72:cf:8e:6a:fe:8d:23:a4:db:7f:50:f3:
00:10:ad:48:46:0d:31:e1:c2:de:5b:46:4d:65:73:
28:ca:c2:36:96:88:00:4a:ce:07:54:4b:13:87:2c:
3f:77:77:e2:9d:a6:9b:37:42:f2:ae:87:e6:23:77:
8a:f1:e3:07:ef:6e:e6:73:33:3e:15:63:be:7c:13:
8e:43:97:5e:f8:df:8e:7a:00:9c:84:5d:44:6c:c4:
7a:48:ab:58:e0:04:4b:0c:00:56:fc:44:05:56:84:
ac:6f:43:06:4f:b8:ce:19:f6:9a:a2:69:0a:3d:c2:
98:3b:96:33:bd:1c:88:06:5c:b6:21:c1:1b:17:44:
11:68:bc:a3:46:96:94:9d:db:fe:26:5b:5c:a3:0f:
f9:6e:1e:d4:40:b4:52:9b:b7:94:5e:39:ea:49:91:
5e:33:13:6b:08:b6:58:29:7a:c0:15:6e:3e:de:ed:
df:c0:4e:76:01:89:27:8e:79:28:7e:eb:54:9a:be:
20:06:c2:40:55:9d:57:b2:a8:4f:3d:32:21:6f:e0:
07:3f:f9:e9:37:06:64:06:c2:6a:43:4f:b0:ab:72:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:02:D4:44:D9:A1:FD:5B:76:0E:10:B4:81:45:43:0A:F8:B8:6E:66
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:29:37:56:6d:e0:61:47:e5:73:25:67:16:f9:71:40:e7:a0:
59:cc:c4:e6:18:f6:d3:3c:9b:0f:92:5a:da:e8:22:4d:3a:70:
53:92:93:2f:f0:64:a1:80:fd:61:f4:f3:c3:49:b2:41:86:d8:
7b:26:c6:3a:df:9d:db:e2:1e:74:bd:fa:92:a4:ee:25:2d:46:
38:f0:0f:18:d2:77:24:a1:5a:1f:db:fb:f8:2b:66:ce:d3:c7:
8b:02:5d:71:ba:b4:fc:a4:ea:f3:89:69:a7:e9:89:a5:0e:2d:
51:d2:e3:26:c5:f7:40:0e:1f:19:cb:51:ef:3d:bf:15:2c:5b:
c6:34:c9:02:a5:29:5a:ae:8b:33:24:b6:63:fa:13:0a:bf:ea:
a8:d5:4f:9f:82:6b:d3:6d:88:03:55:49:5c:82:06:aa:f5:a0:
3d:ec:0b:bb:96:03:f3:da:0c:f7:32:ea:fe:5a:a2:36:61:82:
96:8d:97:65:28:2d:a0:f3:be:07:42:31:2e:fc:f7:04:ce:21:
4d:d5:98:62:d9:c4:00:03:bc:7f:35:22:2a:96:e2:30:65:39:
0a:0d:e6:29:e8:fd:a7:48:cc:df:38:71:7e:55:7b:a0:33:e1:
cc:2a:0a:fa:f1:65:74:e3:71:96:0b:ef:c4:24:da:2e:5a:41:
3b:70:5a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoQxVOB2viXSOorf/kDWBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjUwNTA3MDEwMTMwWhcNMjUwNTA4MDEwMTMwWjAzMTEwLwYDVQQD
EyhiNzAyZDQ0NGQ5YTFmZDViNzYwZTEwYjQ4MTQ1NDMwYWY4Yjg2ZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M+uLb/WZ054hrf/AcMv/5X4Y6Y4
uT+DmAvDWZ2jacNyz45q/o0jpNt/UPMAEK1IRg0x4cLeW0ZNZXMoysI2logASs4H
VEsThyw/d3finaabN0LyrofmI3eK8eMH727mczM+FWO+fBOOQ5de+N+OegCchF1E
bMR6SKtY4ARLDABW/EQFVoSsb0MGT7jOGfaaomkKPcKYO5YzvRyIBly2IcEbF0QR
aLyjRpaUndv+Jltcow/5bh7UQLRSm7eUXjnqSZFeMxNrCLZYKXrAFW4+3u3fwE52
AYknjnkofutUmr4gBsJAVZ1XsqhPPTIhb+AHP/npNwZkBsJqQ0+wq3KHvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcC1ETZof1bdg4QtIFFQwr4uG5mMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSk3Vm3g
YUflcyVnFvlxQOegWczE5hj20zybD5Ja2ugiTTpwU5KTL/BkoYD9YfTzw0myQYbY
eybGOt+d2+IedL36kqTuJS1GOPAPGNJ3JKFaH9v7+CtmztPHiwJdcbq0/KTq84lp
p+mJpQ4tUdLjJsX3QA4fGctR7z2/FSxbxjTJAqUpWq6LMyS2Y/oTCr/qqNVPn4Jr
022IA1VJXIIGqvWgPewLu5YD89oM9zLq/lqiNmGClo2XZSgtoPO+B0IxLvz3BM4h
TdWYYtnEAAO8fzUiKpbiMGU5Cg3mKej9p0jM3zhxflV7oDPhzCoK+vFldONxlgvv
xCTaLlpBO3Ba9A==
-----END CERTIFICATE-----
Generated at Wed May 7 09:14:59 2025 by rpki-client