Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier: 2gF/eb4KDev1O/CRqJnK1m7/zYdWoaQ0mJvEn40DdyI=
Subject key identifier: 54:DF:AC:9C:47:D1:18:BD:0A:3B:13:EE:E5:CC:DC:0D:70:BE:98:62
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial: 01969E63802981B9B5425C5EFA8DDEB85CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number: 0420
Signing time: Mon 05 May 2025 03:00:43 +0000
Manifest this update: Mon 05 May 2025 03:00:43 +0000
Manifest next update: Tue 06 May 2025 03:00:43 +0000
Files and hashes: 1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: guFZzvdo1beTZBbtdpprPLKQlmkCOc3YoLdXlt6AU40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:80:29:81:b9:b5:42:5c:5e:fa:8d:de:b8:5c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Validity
Not Before: May 5 03:00:43 2025 GMT
Not After : May 6 03:00:43 2025 GMT
Subject: CN=54dfac9c47d118bd0a3b13eee5ccdc0d70be9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:46:30:0e:b5:34:97:d7:40:5c:14:05:d9:
5a:9b:54:cf:1e:4b:90:1a:e6:7c:7e:1c:81:ab:b6:
7b:fb:28:fb:4d:46:e3:76:9f:93:32:9c:58:1b:97:
b9:a0:f8:e8:51:ef:dc:7d:72:8c:d1:79:23:41:af:
83:11:8a:04:8a:0e:b1:06:60:cb:8e:8b:b9:6b:9e:
d1:09:5d:41:7f:3e:f3:dd:b3:34:e7:66:69:d9:e6:
37:a7:5e:b9:30:62:2a:03:84:29:ec:9e:66:6c:20:
24:e0:27:3b:24:dc:20:f5:a7:f0:99:b6:ba:51:94:
f1:f4:f2:16:29:c6:2f:c6:3f:f5:bb:a5:5a:fe:dd:
90:cb:17:1a:9a:8e:6b:37:a4:a3:ab:68:47:38:ce:
ec:d0:ba:da:27:d0:ea:e6:a9:a5:71:5a:72:c0:66:
88:47:06:4a:1a:08:77:80:0f:15:83:d7:ec:64:35:
5b:3c:27:5d:34:c7:36:e7:9e:18:27:f5:60:81:dd:
03:11:c8:92:08:b6:b3:e4:24:aa:7d:81:dc:15:07:
59:17:30:09:c8:90:29:de:29:81:ff:5c:20:1e:3b:
62:68:f1:0b:e5:ff:88:6b:e9:7e:e7:6c:80:26:40:
d2:a9:3b:d5:c3:f2:8a:2c:da:08:82:34:fd:9e:bb:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DF:AC:9C:47:D1:18:BD:0A:3B:13:EE:E5:CC:DC:0D:70:BE:98:62
X509v3 Authority Key Identifier:
keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f5:eb:80:90:c8:86:b8:8b:8d:85:92:98:30:f6:8c:d5:79:
bc:1b:6b:df:98:0e:3c:53:50:4a:a4:14:cd:f9:80:b3:2c:b3:
05:43:ae:d0:d5:3f:cb:8b:d5:27:db:52:93:f5:c5:6a:ad:38:
4a:9f:6e:4a:87:09:fa:b6:c2:1b:e5:67:ec:a4:bd:0d:f2:e8:
ed:d7:d4:4a:57:53:04:a9:86:b3:4b:03:33:24:b5:61:a1:39:
90:30:23:3d:d4:10:87:f7:86:2d:ed:6f:69:b2:fd:48:fc:68:
51:af:1e:a2:2f:22:5b:c3:ee:7f:03:92:1a:6c:76:76:9d:d7:
26:94:54:2c:f3:b4:cf:9b:02:d7:c9:5c:3c:6a:2d:13:f6:e6:
f6:59:b8:2a:9f:8f:83:3c:16:ab:d3:59:39:f2:e7:43:78:29:
8c:e0:00:75:6b:f7:fd:18:62:60:99:e1:0c:9e:b1:72:c0:a4:
97:16:b3:00:c0:84:ff:51:d8:ca:e6:7b:da:e1:c1:15:92:e7:
bc:44:07:97:31:f2:5c:95:f1:54:f9:aa:d4:85:ea:cb:bb:9e:
a4:ca:0c:4c:49:81:9d:8f:a7:a1:4a:71:2b:d2:c2:b2:ac:c9:
a4:06:63:57:db:58:18:19:a2:eb:39:de:f8:73:6e:ae:ec:2e:
da:14:24:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY4Apgbm1Qlxe+o3euFzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjNkMTA0MGMwNWYwOTlmYjRmZWRiNDk4YmI0YTE0ODMy
Nzk4ZmEwHhcNMjUwNTA1MDMwMDQzWhcNMjUwNTA2MDMwMDQzWjAzMTEwLwYDVQQD
Eyg1NGRmYWM5YzQ3ZDExOGJkMGEzYjEzZWVlNWNjZGMwZDcwYmU5ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirBGMA61NJfXQFwUBdlam1TPHkuQ
GuZ8fhyBq7Z7+yj7TUbjdp+TMpxYG5e5oPjoUe/cfXKM0XkjQa+DEYoEig6xBmDL
jou5a57RCV1Bfz7z3bM052Zp2eY3p165MGIqA4Qp7J5mbCAk4Cc7JNwg9afwmba6
UZTx9PIWKcYvxj/1u6Va/t2Qyxcamo5rN6Sjq2hHOM7s0LraJ9Dq5qmlcVpywGaI
RwZKGgh3gA8Vg9fsZDVbPCddNMc2554YJ/Vggd0DEciSCLaz5CSqfYHcFQdZFzAJ
yJAp3imB/1wgHjtiaPEL5f+Ia+l+52yAJkDSqTvVw/KKLNoIgjT9nrsKmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTfrJxH0Ri9CjsT7uXM3A1wvphiMB8GA1UdIwQY
MBaAFJkj0QQMBfCZ+0/ttJi7ShSDJ5j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMt
MjA2ZTgyMzM2Y2RlLzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMtMjA2ZTgyMzM2Y2Rl
LzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPXrgJDI
hriLjYWSmDD2jNV5vBtr35gOPFNQSqQUzfmAsyyzBUOu0NU/y4vVJ9tSk/XFaq04
Sp9uSocJ+rbCG+Vn7KS9DfLo7dfUSldTBKmGs0sDMyS1YaE5kDAjPdQQh/eGLe1v
abL9SPxoUa8eoi8iW8PufwOSGmx2dp3XJpRULPO0z5sC18lcPGotE/bm9lm4Kp+P
gzwWq9NZOfLnQ3gpjOAAdWv3/RhiYJnhDJ6xcsCklxazAMCE/1HYyuZ72uHBFZLn
vEQHlzHyXJXxVPmq1IXqy7uepMoMTEmBnY+noUpxK9LCsqzJpAZjV9tYGBmi6zne
+HNuruwu2hQkug==
-----END CERTIFICATE-----
Generated at Mon May 5 11:58:23 2025 by rpki-client