Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier: xSNk9iGXGEACNGIBjy3NSCMeOSaKXIUGovuocHeu9AA=
Subject key identifier: 0C:C9:67:DA:06:FE:81:06:B4:D7:91:40:D0:02:8F:3F:CF:2F:DC:20
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 0196B9A3E69990773C920F7575D10BEFBB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number: 153C
Signing time: Sat 10 May 2025 10:00:48 +0000
Manifest this update: Sat 10 May 2025 10:00:48 +0000
Manifest next update: Sun 11 May 2025 10:00:48 +0000
Files and hashes: 1: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: x6Hn8e4sRwft9x/l/TAO+fZZ/aUkVLfYsHg2UI374t4=)
2: a9vur_G-Sv_-WDNvoaN6FO-mp_Q.roa (hash: 5mLv65w3uElW3I7UtSlBFzQFnR6wfzkGH2z+n02Go3s=)
3: ckPg9sFMxT2re8tM8nExJep_9Qs.roa (hash: DU25ajodIpeW2jQoXz2wnkJ8CRhq6NHvl6w7hFsUi60=)
4: yFSjMkcgtQ4jugHf3jpWTH9Nbv0.roa (hash: hqHHntvNx6acptoTgy50EVxfDKrmw52pRvx+yFRJ3nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:e6:99:90:77:3c:92:0f:75:75:d1:0b:ef:bb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: May 10 10:00:48 2025 GMT
Not After : May 11 10:00:48 2025 GMT
Subject: CN=0cc967da06fe8106b4d79140d0028f3fcf2fdc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:97:fe:e0:95:92:f6:b5:03:96:a4:38:3a:
d3:28:9c:d9:88:6f:20:58:af:13:16:94:50:4b:9e:
d8:7e:1a:76:20:b4:dd:ce:10:b5:2e:f6:26:34:96:
6c:04:59:d9:61:79:c7:7b:c5:eb:71:88:f1:26:57:
ae:d9:21:7e:a8:51:17:f9:16:51:7c:07:4d:02:44:
3c:26:3f:41:90:2d:fe:a8:a7:77:58:83:b2:53:24:
06:b8:d3:77:c2:9e:ad:28:27:21:fa:03:a8:4d:81:
7a:c1:ee:ab:b1:d8:87:2a:1f:ad:d3:5d:07:a3:06:
fe:44:d7:e8:09:42:d8:d8:c3:ab:9b:83:91:87:9e:
a7:0a:a7:74:22:52:aa:07:bf:05:d2:3c:dd:18:3f:
99:4f:a4:59:f8:ff:79:05:2e:6b:c8:b9:cb:08:d9:
a1:2c:54:7b:5a:6f:5a:2f:91:de:71:92:10:0a:d0:
57:65:50:f4:b4:e5:de:57:ba:95:b7:a2:2c:4e:12:
29:e6:97:fb:4f:97:7a:97:de:04:a1:71:38:6a:6f:
ce:42:d6:60:24:7d:7d:be:d2:3a:3b:0f:92:84:2b:
7c:36:0a:84:c8:ca:cc:bb:98:c0:a8:fb:17:01:83:
4e:cc:f9:2f:bf:90:72:3f:37:d8:8e:3d:fb:99:4b:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C9:67:DA:06:FE:81:06:B4:D7:91:40:D0:02:8F:3F:CF:2F:DC:20
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:33:21:ab:2c:1f:36:ed:5a:35:90:02:7c:9e:44:69:0c:b0:
0b:f6:2f:96:53:9f:66:40:c9:b9:47:b7:a8:d9:3a:37:c5:1e:
2a:59:8f:d3:8a:98:64:e5:cd:e0:75:77:c3:ac:fe:d4:0b:af:
90:b7:fd:93:31:ae:f4:76:bc:cb:5b:06:b2:d2:53:4b:ff:9b:
5c:2c:4f:97:64:19:bf:2f:4a:33:57:65:76:f8:9e:d6:31:59:
bf:a3:ef:17:bb:be:bf:5a:8f:8c:64:d1:54:84:76:68:d4:25:
f9:22:cf:22:75:52:4f:9c:85:91:87:8d:e7:8d:30:ef:a7:8c:
fd:bb:ed:b6:8a:9f:da:80:5c:d4:58:72:87:b8:c1:f3:5f:02:
54:93:5f:d1:4b:c0:15:cc:f6:eb:dd:e0:6f:a6:40:54:51:e2:
9f:23:d3:84:ae:8b:ba:12:c7:aa:16:1a:36:78:0e:00:ac:52:
40:eb:9e:7c:38:91:b2:58:79:1f:9a:a6:22:30:ad:09:f2:11:
29:e0:59:32:05:d4:ed:fc:6d:19:6a:2c:6c:02:bf:14:27:f4:
5d:5c:8e:a1:49:32:ad:18:cd:63:89:20:9f:1b:4c:0b:c0:54:
e7:dd:ec:64:7e:48:7c:f2:52:d0:2f:fc:a4:91:6f:a1:32:7c:
b3:22:1e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5o+aZkHc8kg91ddEL77uZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwOTZkN2FmYmI4YTVlMzE1YTVjNDg5YWNlYTdkY2I3NWFh
NjVkMDQwHhcNMjUwNTEwMTAwMDQ4WhcNMjUwNTExMTAwMDQ4WjAzMTEwLwYDVQQD
EygwY2M5NjdkYTA2ZmU4MTA2YjRkNzkxNDBkMDAyOGYzZmNmMmZkYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO6X/uCVkva1A5akODrTKJzZiG8g
WK8TFpRQS57Yfhp2ILTdzhC1LvYmNJZsBFnZYXnHe8XrcYjxJleu2SF+qFEX+RZR
fAdNAkQ8Jj9BkC3+qKd3WIOyUyQGuNN3wp6tKCch+gOoTYF6we6rsdiHKh+t010H
owb+RNfoCULY2MOrm4ORh56nCqd0IlKqB78F0jzdGD+ZT6RZ+P95BS5ryLnLCNmh
LFR7Wm9aL5HecZIQCtBXZVD0tOXeV7qVt6IsThIp5pf7T5d6l94EoXE4am/OQtZg
JH19vtI6Ow+ShCt8NgqEyMrMu5jAqPsXAYNOzPkvv5ByPzfYjj37mUsMMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzJZ9oG/oEGtNeRQNACjz/PL9wgMB8GA1UdIwQY
MBaAFDCW16+7il4xWlxIms6n3Ldapl0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYt
ZGY0ZThjNzM2NGZlLzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYtZGY0ZThjNzM2NGZl
LzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjMhqywf
Nu1aNZACfJ5EaQywC/YvllOfZkDJuUe3qNk6N8UeKlmP04qYZOXN4HV3w6z+1Auv
kLf9kzGu9Ha8y1sGstJTS/+bXCxPl2QZvy9KM1dldvie1jFZv6PvF7u+v1qPjGTR
VIR2aNQl+SLPInVST5yFkYeN540w76eM/bvttoqf2oBc1Fhyh7jB818CVJNf0UvA
Fcz2693gb6ZAVFHinyPThK6LuhLHqhYaNngOAKxSQOuefDiRslh5H5qmIjCtCfIR
KeBZMgXU7fxtGWosbAK/FCf0XVyOoUkyrRjNY4kgnxtMC8BU593sZH5IfPJS0C/8
pJFvoTJ8syIevQ==
-----END CERTIFICATE-----
Generated at Sat May 10 18:54:19 2025 by rpki-client