Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier: hNFcO082lCgJYYp6LnYa8EqGBKScImJsGioQvwR15v4=
Subject key identifier: 8C:DA:61:01:9E:D8:AC:49:F1:9C:CF:B0:6C:1C:48:CF:D3:4F:6A:39
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial: 0196D32CE3683149456B9A20B202508917AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number: 153F
Signing time: Thu 15 May 2025 09:00:56 +0000
Manifest this update: Thu 15 May 2025 09:00:56 +0000
Manifest next update: Fri 16 May 2025 09:00:56 +0000
Files and hashes: 1: BFbItzgMXh2yCZ227Kwfzi1k3ME.roa (hash: 3p3Z55QLOu2JV1kUetHwILYBWmwCeLPU+vcoZy0JMPg=)
2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: PnsdTJjqeDeiSw4bEsUJ07RThplAE1XVdQ7cf03AF+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:2c:e3:68:31:49:45:6b:9a:20:b2:02:50:89:17:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Validity
Not Before: May 15 09:00:56 2025 GMT
Not After : May 16 09:00:56 2025 GMT
Subject: CN=8cda61019ed8ac49f19ccfb06c1c48cfd34f6a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:62:12:2b:cb:53:ae:ab:64:04:90:ea:e5:
82:66:5b:ea:c1:1b:59:f1:a1:ce:ef:d9:04:2d:04:
13:39:d3:6e:bd:24:ba:d3:47:c6:db:c4:35:be:58:
b3:a5:b2:59:f3:53:37:4d:98:f7:29:6c:c4:25:5c:
ae:61:9f:8f:d5:63:37:b8:2f:97:55:d3:74:8e:f3:
9e:29:9c:61:0a:66:5d:1c:e3:1b:a2:c3:1b:a3:03:
4a:73:27:40:6a:b9:a1:84:d2:ce:a7:a3:18:2f:a3:
73:34:95:9a:93:e6:ed:5b:e7:dd:d1:9a:f6:06:9d:
85:d1:77:8a:ac:5c:15:1f:ad:73:a4:0e:d7:68:48:
fe:37:6a:fe:27:e0:60:18:cd:bf:b0:47:8b:ce:3d:
a2:33:b0:bd:56:27:68:96:a6:e3:17:b4:7b:05:5c:
cf:b0:8d:a5:1b:30:07:df:ed:f7:fb:3e:84:e0:8f:
b0:d2:2b:da:90:e3:cc:2b:cf:7d:44:d4:aa:17:c6:
2f:78:b4:5a:92:81:0a:af:17:04:8d:e7:80:aa:e7:
8e:23:9a:bf:9a:59:fa:65:04:fc:e0:19:9d:4c:89:
0c:d0:f2:1c:ca:a0:a0:d1:61:6c:c6:d4:36:12:d1:
c3:1c:6f:77:01:16:78:d7:7b:24:2d:0f:23:67:7b:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:61:01:9E:D8:AC:49:F1:9C:CF:B0:6C:1C:48:CF:D3:4F:6A:39
X509v3 Authority Key Identifier:
keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:50:b8:ec:4e:6f:c1:66:35:0b:be:22:f7:57:9f:6c:f1:
e8:62:78:00:86:bb:3d:86:87:5a:ac:04:98:84:43:b0:01:49:
7a:86:cf:e6:e8:14:89:24:db:53:aa:8d:a6:dc:24:f1:48:5a:
a7:2b:33:58:94:36:99:0d:eb:72:cb:e1:9a:45:91:36:40:2d:
0a:07:25:8b:b0:46:85:e6:a9:9d:33:27:4f:77:9d:dd:92:df:
82:79:80:6f:73:f2:cc:35:1a:d0:52:31:3d:d5:5e:5f:03:c0:
e8:74:b3:01:39:c5:f2:6b:81:39:9c:95:99:32:f0:65:a9:26:
0e:f2:f6:0e:4d:c9:d8:83:22:eb:53:b9:5f:32:66:75:62:eb:
6b:0a:8c:14:b2:39:8c:e1:d3:a0:a7:74:46:af:c0:da:fd:9c:
6e:b6:26:9d:26:5a:84:d9:18:51:f7:33:e4:1a:39:1e:62:ab:
3c:a7:5b:a7:b6:94:d6:94:7a:72:03:67:3a:cb:46:18:5d:5c:
48:a1:9b:d5:39:8f:5c:29:ba:5f:e4:a5:32:b5:ef:6f:5e:93:
70:a8:d1:1a:dc:b2:55:5d:00:96:7d:15:64:d6:9a:d3:da:a2:
8f:55:3d:ec:6f:4b:95:14:b5:90:7d:79:67:89:b9:8e:a6:b2:
7c:5e:6f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbTLONoMUlFa5ogsgJQiReqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRkYTUxODIzMjMxOWY2N2EzMmZkOGFkNGMwNjUzNmM0
MWQ1YmYwHhcNMjUwNTE1MDkwMDU2WhcNMjUwNTE2MDkwMDU2WjAzMTEwLwYDVQQD
Eyg4Y2RhNjEwMTllZDhhYzQ5ZjE5Y2NmYjA2YzFjNDhjZmQzNGY2YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2tiEivLU66rZASQ6uWCZlvqwRtZ
8aHO79kELQQTOdNuvSS600fG28Q1vlizpbJZ81M3TZj3KWzEJVyuYZ+P1WM3uC+X
VdN0jvOeKZxhCmZdHOMbosMbowNKcydAarmhhNLOp6MYL6NzNJWak+btW+fd0Zr2
Bp2F0XeKrFwVH61zpA7XaEj+N2r+J+BgGM2/sEeLzj2iM7C9VidolqbjF7R7BVzP
sI2lGzAH3+33+z6E4I+w0ivakOPMK899RNSqF8YveLRakoEKrxcEjeeAqueOI5q/
mln6ZQT84BmdTIkM0PIcyqCg0WFsxtQ2EtHDHG93ARZ413skLQ8jZ3sGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzaYQGe2KxJ8ZzPsGwcSM/TT2o5MB8GA1UdIwQY
MBaAFJhU2lGCMjGfZ6Mv2K1MBlNsQdW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWIt
Njc2ZTgwZGMxZGU2LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWItNjc2ZTgwZGMxZGU2
LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOpQuOxO
b8FmNQu+IvdXn2zx6GJ4AIa7PYaHWqwEmIRDsAFJeobP5ugUiSTbU6qNptwk8Uha
pyszWJQ2mQ3rcsvhmkWRNkAtCgcli7BGheapnTMnT3ed3ZLfgnmAb3PyzDUa0FIx
PdVeXwPA6HSzATnF8muBOZyVmTLwZakmDvL2Dk3J2IMi61O5XzJmdWLrawqMFLI5
jOHToKd0Rq/A2v2cbrYmnSZahNkYUfcz5Bo5HmKrPKdbp7aU1pR6cgNnOstGGF1c
SKGb1TmPXCm6X+SlMrXvb16TcKjRGtyyVV0Aln0VZNaa09qij1U97G9LlRS1kH15
Z4m5jqayfF5vNQ==
-----END CERTIFICATE-----
Generated at Thu May 15 17:55:02 2025 by rpki-client