Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: MzuuFZxqZh4DXLLGaYfArdmsSCb69lro5xK6QESesGM=
Subject key identifier: 8F:BC:64:F7:A6:EB:13:6B:CD:6D:D3:40:E5:75:1E:DB:E7:00:39:23
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 0196AB7A7A0D0F60E52AA1C6C7C7F00B21FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0921
Signing time: Wed 07 May 2025 16:00:52 +0000
Manifest this update: Wed 07 May 2025 16:00:52 +0000
Manifest next update: Thu 08 May 2025 16:00:52 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: P6BxxISpVGWBRHLbnpHJ2T0pAXENrck6ZVfzR09T7A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:7a:0d:0f:60:e5:2a:a1:c6:c7:c7:f0:0b:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: May 7 16:00:52 2025 GMT
Not After : May 8 16:00:52 2025 GMT
Subject: CN=8fbc64f7a6eb136bcd6dd340e5751edbe7003923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:89:be:0a:41:d1:00:b9:98:8b:7a:b2:1b:
51:da:5d:2f:53:e4:29:ae:fe:6b:7d:05:6c:1c:bf:
62:46:3a:25:3d:5d:af:bc:90:21:d5:81:5e:d2:e4:
7b:e5:01:b3:18:a1:83:59:0d:52:0f:65:22:ee:54:
ea:7f:3f:ea:b5:77:2c:21:01:58:56:69:85:28:77:
e0:72:26:71:17:67:a6:45:17:dd:b1:1f:1b:10:a2:
07:a2:5e:75:ec:3a:59:e5:80:ae:71:f7:ff:da:44:
0e:a5:a8:76:a1:63:30:55:1a:e8:79:55:6e:e9:5b:
c3:ff:97:02:73:6e:22:40:73:c7:13:86:60:f7:73:
b9:d6:e9:b5:6b:94:fd:f9:d2:5d:96:50:db:04:96:
0c:ef:43:09:9e:ad:03:90:53:80:e4:db:90:06:71:
3a:fa:c0:c7:bd:a0:02:20:f3:8e:01:d5:15:3d:fb:
39:07:2b:3c:75:95:67:21:9a:41:fd:25:e7:ae:62:
24:64:f8:01:7c:01:b5:ae:6c:46:f8:f9:40:44:fa:
a2:cc:bf:b4:2a:e5:d5:13:27:ff:66:93:ba:de:fe:
04:08:ea:4d:41:b9:2c:bd:6d:23:24:94:47:4b:f7:
72:b2:e9:8a:54:4c:7a:02:9a:7d:bc:62:e2:5e:8f:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:64:F7:A6:EB:13:6B:CD:6D:D3:40:E5:75:1E:DB:E7:00:39:23
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c8:76:de:e0:31:83:11:75:7d:52:9a:11:63:ea:c6:f3:3d:
68:cc:c0:74:3f:ab:a3:18:11:cb:e2:32:a2:d4:18:5b:18:68:
51:48:3a:84:92:94:cf:26:8d:eb:3f:74:ac:cb:79:43:38:59:
9a:55:26:5f:cf:91:76:9a:e9:41:96:87:5f:75:d1:d4:54:ce:
bd:2c:e8:7e:ab:34:88:d7:4c:77:dc:a2:bf:22:f4:62:db:7c:
ce:fd:a4:2b:f2:1c:39:12:cf:be:b9:26:a0:4b:6b:d7:00:33:
9a:91:74:7c:1f:ea:d9:61:31:2c:62:63:c4:49:75:68:6e:04:
b4:ad:22:77:52:d2:ed:8a:20:d5:86:c1:6c:e3:9a:d5:12:7d:
59:f5:24:3f:f7:e9:1f:33:e1:4c:ff:fa:38:37:bd:e5:03:12:
e5:00:09:73:2f:41:cd:38:36:13:5a:a0:8f:84:85:c3:76:62:
3a:57:44:01:02:77:35:96:87:39:f0:b6:e3:51:05:1f:3f:b9:
4e:3e:6f:56:2f:a5:56:05:07:95:5c:b6:30:b9:a8:c2:e5:ce:
5a:03:60:db:0a:6e:73:73:72:5b:20:f5:45:7c:ff:f7:1e:40:
d8:ee:34:47:a3:a4:1b:bc:ec:8b:83:60:b1:d3:af:16:c4:e8:
04:4a:28:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarenoND2DlKqHGx8fwCyH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWUzZmNhNmYxMzYyOGU2ZWI4M2NmZmU1ZWQ4YTAxZWRk
NTllOGIwHhcNMjUwNTA3MTYwMDUyWhcNMjUwNTA4MTYwMDUyWjAzMTEwLwYDVQQD
Eyg4ZmJjNjRmN2E2ZWIxMzZiY2Q2ZGQzNDBlNTc1MWVkYmU3MDAzOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiaJvgpB0QC5mIt6shtR2l0vU+Qp
rv5rfQVsHL9iRjolPV2vvJAh1YFe0uR75QGzGKGDWQ1SD2Ui7lTqfz/qtXcsIQFY
VmmFKHfgciZxF2emRRfdsR8bEKIHol517DpZ5YCucff/2kQOpah2oWMwVRroeVVu
6VvD/5cCc24iQHPHE4Zg93O51um1a5T9+dJdllDbBJYM70MJnq0DkFOA5NuQBnE6
+sDHvaACIPOOAdUVPfs5Bys8dZVnIZpB/SXnrmIkZPgBfAG1rmxG+PlARPqizL+0
KuXVEyf/ZpO63v4ECOpNQbksvW0jJJRHS/dysumKVEx6App9vGLiXo8zpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+8ZPem6xNrzW3TQOV1HtvnADkjMB8GA1UdIwQY
MBaAFDAeP8pvE2KObrg8/+XtigHt1Z6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYt
ZDBkN2YyYjJhNWUwLzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYtZDBkN2YyYjJhNWUw
LzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnch23uAx
gxF1fVKaEWPqxvM9aMzAdD+roxgRy+IyotQYWxhoUUg6hJKUzyaN6z90rMt5QzhZ
mlUmX8+RdprpQZaHX3XR1FTOvSzofqs0iNdMd9yivyL0Ytt8zv2kK/IcORLPvrkm
oEtr1wAzmpF0fB/q2WExLGJjxEl1aG4EtK0id1LS7Yog1YbBbOOa1RJ9WfUkP/fp
HzPhTP/6ODe95QMS5QAJcy9BzTg2E1qgj4SFw3ZiOldEAQJ3NZaHOfC241EFHz+5
Tj5vVi+lVgUHlVy2MLmowuXOWgNg2wpuc3NyWyD1RXz/9x5A2O40R6OkG7zsi4Ng
sdOvFsToBEoo+Q==
-----END CERTIFICATE-----
Generated at Thu May 8 01:02:56 2025 by rpki-client