Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: 1V32qyXNTQAXfwgnqYSAxOTZyX001Zqm6Gped+B7LNo=
Subject key identifier: 0C:2E:48:9A:2A:24:EC:4E:26:08:34:A9:29:C3:33:7B:B6:DF:FC:39
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 0196C23959EABB990136C562ABA4234CAC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 1207
Signing time: Mon 12 May 2025 02:01:00 +0000
Manifest this update: Mon 12 May 2025 02:01:00 +0000
Manifest next update: Tue 13 May 2025 02:01:00 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: uBzPqYQeZQfIc+a9gbk9NttqP1W52nsVYt1cj6GmcRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:59:ea:bb:99:01:36:c5:62:ab:a4:23:4c:ac:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: May 12 02:01:00 2025 GMT
Not After : May 13 02:01:00 2025 GMT
Subject: CN=0c2e489a2a24ec4e260834a929c3337bb6dffc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:48:fa:ca:44:a5:ab:a1:3b:ef:dc:1a:98:
95:c7:1b:58:e1:1f:49:a3:06:35:c9:4a:3a:a4:b3:
ea:0c:91:d9:5c:fb:e9:e1:79:1c:af:32:35:ff:97:
ca:88:a9:ab:15:16:5b:d0:d4:3d:55:10:ee:7e:f2:
96:52:54:50:02:b2:88:73:be:72:f1:ee:1d:6a:57:
71:52:5c:56:f0:dc:94:fd:dd:c1:28:e8:3b:26:7a:
0b:1e:73:11:bd:22:a1:9e:84:ae:4a:c1:f0:3f:4d:
4d:87:e6:84:d7:31:30:21:17:dd:ea:78:0e:98:0d:
e6:46:ff:8a:51:ce:36:d6:c4:c1:17:a5:db:6a:2b:
7c:0e:1a:a3:21:44:36:50:b5:fc:3f:7f:e0:0f:80:
79:18:8f:c6:57:c4:b6:e4:73:cd:de:98:b3:15:45:
9c:7d:e0:bb:e2:d0:ec:ee:40:00:75:61:e4:2e:58:
a2:c6:71:54:72:f2:c1:33:01:f4:8d:77:12:0e:8d:
ff:80:40:ae:10:94:d0:d1:e6:17:73:b5:b0:30:1a:
9c:54:a2:fe:76:11:ee:1b:69:71:14:bc:67:2d:42:
d2:d0:27:ef:c7:37:9d:f5:bd:63:ad:19:87:7f:ef:
87:48:2b:af:68:34:4c:58:9e:55:86:8d:79:2a:89:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:48:9A:2A:24:EC:4E:26:08:34:A9:29:C3:33:7B:B6:DF:FC:39
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ba:c6:f6:c2:fc:35:ae:db:e7:b0:c1:3d:e7:d3:a2:b7:ee:
24:1d:aa:25:26:ae:ca:0b:cd:24:22:f2:aa:2d:f8:90:0e:f1:
a6:30:c2:52:da:9a:1b:99:97:2f:ab:f5:4b:1d:e6:24:de:d7:
1f:26:99:e8:e0:d7:a6:f0:ef:46:0d:6d:59:28:3a:29:c2:0c:
6d:db:e2:5d:45:69:72:d2:6e:ef:00:aa:de:b5:8b:44:a7:c2:
ca:92:d7:49:f2:81:3d:56:e0:a3:77:24:80:6c:16:84:d4:7c:
eb:66:7e:69:dc:ee:d6:ea:11:bf:09:72:07:f4:85:ee:ea:96:
11:b9:9f:b8:08:0f:4a:d3:c1:41:ef:c6:83:36:a7:7a:78:41:
47:cf:1e:97:47:f0:58:48:04:44:39:cc:dc:0f:0b:e3:a0:3d:
17:5e:da:89:99:e1:60:12:00:a9:a2:f5:51:46:17:0b:2c:a7:
ca:a2:8b:f1:22:e7:76:fd:5a:4c:8b:2d:6e:b0:a5:b2:65:24:
b4:f7:02:d1:dc:70:ce:1f:63:6c:2e:80:92:04:c0:b6:96:87:
dd:78:59:3d:99:fe:73:c1:db:4f:4f:bb:e8:db:0e:05:82:f5:
5c:dc:38:9e:da:76:50:53:c2:97:c4:37:cf:74:c4:76:97:82:
c0:12:e8:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOVnqu5kBNsViq6QjTKwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyODZmMWMyMDVlZTMxODdlMmFjMWE0YTViYzA0OWYzNDQ5
ZmY2NjcwHhcNMjUwNTEyMDIwMTAwWhcNMjUwNTEzMDIwMTAwWjAzMTEwLwYDVQQD
EygwYzJlNDg5YTJhMjRlYzRlMjYwODM0YTkyOWMzMzM3YmI2ZGZmYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6dI+spEpauhO+/cGpiVxxtY4R9J
owY1yUo6pLPqDJHZXPvp4XkcrzI1/5fKiKmrFRZb0NQ9VRDufvKWUlRQArKIc75y
8e4daldxUlxW8NyU/d3BKOg7JnoLHnMRvSKhnoSuSsHwP01Nh+aE1zEwIRfd6ngO
mA3mRv+KUc421sTBF6Xbait8DhqjIUQ2ULX8P3/gD4B5GI/GV8S25HPN3pizFUWc
feC74tDs7kAAdWHkLliixnFUcvLBMwH0jXcSDo3/gECuEJTQ0eYXc7WwMBqcVKL+
dhHuG2lxFLxnLULS0Cfvxzed9b1jrRmHf++HSCuvaDRMWJ5Vho15KokfxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwuSJoqJOxOJgg0qSnDM3u23/w5MB8GA1UdIwQY
MBaAFDKG8cIF7jGH4qwaSlvASfNEn/ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDIt
MzI0ZWYzNGViZWEyLzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDItMzI0ZWYzNGViZWEy
LzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbrG9sL8
Na7b57DBPefTorfuJB2qJSauygvNJCLyqi34kA7xpjDCUtqaG5mXL6v1Sx3mJN7X
HyaZ6ODXpvDvRg1tWSg6KcIMbdviXUVpctJu7wCq3rWLRKfCypLXSfKBPVbgo3ck
gGwWhNR862Z+adzu1uoRvwlyB/SF7uqWEbmfuAgPStPBQe/GgzanenhBR88el0fw
WEgERDnM3A8L46A9F17aiZnhYBIAqaL1UUYXCyynyqKL8SLndv1aTIstbrClsmUk
tPcC0dxwzh9jbC6AkgTAtpaH3XhZPZn+c8HbT0+76NsOBYL1XNw4ntp2UFPCl8Q3
z3TEdpeCwBLoTA==
-----END CERTIFICATE-----
Generated at Mon May 12 11:19:23 2025 by rpki-client