Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: lSK4OUsHM27r9SwI0tYUtxau5uoKT5RFUu9sOVVO2VU=
Subject key identifier: 8C:C8:24:3D:BD:EE:0E:6D:61:A0:1A:BC:16:40:27:A6:93:88:FB:8C
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 0196A4D383A87343B521D9BC37673639FC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0BF9
Signing time: Tue 06 May 2025 09:00:47 +0000
Manifest this update: Tue 06 May 2025 09:00:47 +0000
Manifest next update: Wed 07 May 2025 09:00:47 +0000
Files and hashes: 1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: sQACYhxPgZYO/0nCSPnTkx9+xNHbcDF7F6A/Om8k/HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:83:a8:73:43:b5:21:d9:bc:37:67:36:39:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: May 6 09:00:47 2025 GMT
Not After : May 7 09:00:47 2025 GMT
Subject: CN=8cc8243dbdee0e6d61a01abc164027a69388fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:68:31:e2:72:c4:74:ba:1f:45:68:30:6a:
e1:85:d0:24:41:c2:80:36:9b:5a:42:81:ef:0f:e8:
df:0b:16:33:e4:4d:e6:09:e5:83:ad:6d:c4:c7:91:
2a:44:00:bb:0d:95:21:ab:b3:dc:86:f7:9f:22:43:
a0:74:7a:bb:09:c6:3f:09:90:01:02:c7:03:09:2b:
86:78:29:8d:21:89:46:e0:c4:43:17:a2:3e:0b:1c:
14:6e:cd:a1:e5:b6:47:0c:0d:0d:59:ec:f1:25:6d:
25:97:3c:79:b5:19:e4:37:ac:be:1c:42:7e:aa:0a:
c3:a6:b0:de:2c:6c:0a:3d:51:93:c8:c1:1e:ff:96:
5a:b1:2a:40:10:f6:27:bc:38:e0:f2:05:50:bb:45:
71:ec:a5:b0:96:3d:63:18:62:0e:b9:ef:22:17:c0:
7b:05:05:26:30:f6:d7:f3:78:a2:fa:d0:ac:67:32:
bf:ff:0c:6b:d3:7d:49:26:42:0f:69:3b:65:16:12:
21:23:48:7a:41:a1:ce:ed:1b:ef:18:93:09:19:fd:
27:71:03:21:5e:f6:23:7b:0a:50:73:a9:a3:86:cc:
14:2c:84:7a:ed:64:0a:33:39:fa:cf:1a:13:fc:ef:
3c:bb:48:bf:03:68:9d:4f:6f:73:85:d2:9b:67:f4:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:24:3D:BD:EE:0E:6D:61:A0:1A:BC:16:40:27:A6:93:88:FB:8C
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:14:2a:c6:23:63:6c:04:12:fc:43:f0:98:ec:a2:44:64:6b:
6f:e4:cb:6d:f8:83:c9:db:be:b0:af:61:fc:76:14:ba:98:41:
a1:c6:b6:99:eb:f0:cd:65:15:05:a3:48:bc:3a:70:f2:f3:a1:
3a:cd:fe:29:87:62:83:03:73:6a:88:85:85:34:c0:bd:36:bb:
dd:e6:22:32:87:b0:33:e4:c7:24:7d:96:e8:23:94:8c:71:7b:
45:a1:c6:4e:e9:b2:00:49:69:7b:18:1f:40:86:95:0c:a5:ce:
97:1e:13:76:9c:5f:39:cf:0d:6c:e1:4d:1f:8a:19:ef:62:45:
8b:ef:c3:a6:d0:96:3e:71:98:2f:9d:ee:ba:b9:ea:31:67:01:
86:45:bd:48:50:fa:d4:97:4b:95:7b:01:e9:fa:f0:a4:57:74:
07:51:e5:9e:e6:d3:94:10:60:97:66:97:cc:2d:a1:3c:b4:5c:
8c:c5:54:b4:94:98:e0:74:6d:52:c7:a2:aa:18:5f:ef:0b:d2:
b8:4d:80:d1:e1:ae:8c:bb:be:28:68:b4:d1:03:c3:6e:57:e9:
46:67:5d:8b:2f:92:93:d0:d2:58:26:a6:bc:9f:11:8a:42:25:
4c:5d:c6:17:24:75:1a:9a:80:00:4f:cf:e0:3e:a1:02:d7:3d:
8f:65:91:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZak04Ooc0O1Idm8N2c2OfxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0
MDE2MTMwHhcNMjUwNTA2MDkwMDQ3WhcNMjUwNTA3MDkwMDQ3WjAzMTEwLwYDVQQD
Eyg4Y2M4MjQzZGJkZWUwZTZkNjFhMDFhYmMxNjQwMjdhNjkzODhmYjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUtoMeJyxHS6H0VoMGrhhdAkQcKA
NptaQoHvD+jfCxYz5E3mCeWDrW3Ex5EqRAC7DZUhq7PchvefIkOgdHq7CcY/CZAB
AscDCSuGeCmNIYlG4MRDF6I+CxwUbs2h5bZHDA0NWezxJW0llzx5tRnkN6y+HEJ+
qgrDprDeLGwKPVGTyMEe/5ZasSpAEPYnvDjg8gVQu0Vx7KWwlj1jGGIOue8iF8B7
BQUmMPbX83ii+tCsZzK//wxr031JJkIPaTtlFhIhI0h6QaHO7RvvGJMJGf0ncQMh
XvYjewpQc6mjhswULIR67WQKMzn6zxoT/O88u0i/A2idT29zhdKbZ/T7sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzIJD297g5tYaAavBZAJ6aTiPuMMB8GA1UdIwQY
MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt
ZDQ3YmQ3ZDAxOTJmLzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm
LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxQqxiNj
bAQS/EPwmOyiRGRrb+TLbfiDydu+sK9h/HYUuphBoca2mevwzWUVBaNIvDpw8vOh
Os3+KYdigwNzaoiFhTTAvTa73eYiMoewM+THJH2W6COUjHF7RaHGTumyAElpexgf
QIaVDKXOlx4TdpxfOc8NbOFNH4oZ72JFi+/DptCWPnGYL53uurnqMWcBhkW9SFD6
1JdLlXsB6frwpFd0B1HlnubTlBBgl2aXzC2hPLRcjMVUtJSY4HRtUseiqhhf7wvS
uE2A0eGujLu+KGi00QPDblfpRmddiy+Sk9DSWCamvJ8RikIlTF3GFyR1GpqAAE/P
4D6hAtc9j2WRmA==
-----END CERTIFICATE-----
Generated at Tue May 6 14:47:39 2025 by rpki-client