Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: G3/en6MGJW2VTzWoyAs6igbOUHAnVesPi81/hChs1gU=
Subject key identifier: 56:44:F9:49:7A:95:63:5A:3B:9B:CD:E4:70:BF:20:C4:FF:C5:E7:B4
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 0196CBE143EA476110B8B3888A01F203975C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 23:00:59 +0000
Manifest this update: Tue 13 May 2025 23:00:59 +0000
Manifest next update: Wed 14 May 2025 23:00:59 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: hS/Qj7+DnYpvzbH19FcvzhcsoXUUHYxsfq+evoZvolE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:43:ea:47:61:10:b8:b3:88:8a:01:f2:03:97:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: May 13 23:00:59 2025 GMT
Not After : May 14 23:00:59 2025 GMT
Subject: CN=5644f9497a95635a3b9bcde470bf20c4ffc5e7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:84:da:38:be:ab:0c:2e:09:48:fa:a1:d1:
41:ff:47:72:37:cb:ec:49:7a:7b:dc:7c:03:1a:8a:
47:4c:35:39:7f:53:c4:47:4b:8b:d2:50:a6:c7:71:
ee:a6:d5:64:21:47:62:83:c9:e5:b3:f0:18:d4:c6:
e7:7d:16:98:ec:49:f7:f3:82:8e:db:65:2e:35:58:
a9:82:f9:18:33:b8:12:7c:ce:0f:dc:6d:a2:0c:34:
83:3e:30:74:ef:c7:c0:84:e5:c5:75:9c:03:df:0f:
6f:74:c4:3a:27:99:3b:e5:91:e5:33:56:49:14:77:
7a:cb:91:a1:4b:ad:f3:be:e6:31:bf:8d:b2:04:f6:
fa:94:02:dc:c3:7e:ad:53:dd:b9:62:45:3b:b0:86:
2b:17:34:2c:fb:24:af:b8:26:62:ee:89:36:db:06:
74:52:f0:9a:4f:fd:de:05:b8:b8:e1:9c:fe:42:23:
08:85:71:2a:89:27:1c:f9:05:ab:57:8b:d6:87:4d:
54:d5:84:59:a5:aa:f1:35:2d:bc:be:d0:91:8a:23:
72:a0:c6:35:c6:4c:19:34:32:f7:a2:ac:40:93:c6:
ec:60:0d:61:f9:e3:08:b7:9b:69:2e:bb:c5:03:e1:
a0:dd:b3:66:af:45:fb:0e:43:fc:5e:8e:c0:7f:e2:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:F9:49:7A:95:63:5A:3B:9B:CD:E4:70:BF:20:C4:FF:C5:E7:B4
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:72:2c:07:0b:8d:be:a7:38:ee:ad:34:ed:c1:d3:24:69:
80:42:7e:5e:f3:c4:75:01:6f:5f:a2:73:43:13:37:ff:e4:5f:
80:25:b1:e2:84:cc:45:78:26:db:f2:d9:ce:38:bb:2d:a3:e4:
69:dc:b5:a7:b8:dc:ae:25:9e:e2:06:bc:d9:69:89:5a:42:ac:
ae:7a:d7:ae:87:df:e4:af:1c:a4:aa:52:64:08:f5:10:bd:78:
20:63:2b:19:4f:41:7e:b5:2b:01:42:96:c6:63:a0:a2:69:19:
dc:61:13:94:b6:6e:30:fb:7a:0d:4b:fb:af:51:dc:53:4a:c4:
70:fc:35:ed:67:2c:64:64:27:4c:ba:c9:19:49:a7:bc:03:dd:
44:e8:b7:73:58:21:de:28:f9:0a:17:69:b9:7e:cf:f0:e6:4f:
e2:7d:35:6d:7e:8d:b3:60:69:7e:67:5a:0c:28:bb:69:69:67:
28:b8:83:3f:6e:b2:60:2f:02:b7:53:24:ad:b7:ed:72:cc:d4:
47:93:93:01:2f:0b:ea:16:01:d8:6f:af:13:5e:36:00:37:72:
f6:27:f1:00:93:70:13:c1:28:a0:54:26:86:4d:1c:48:ae:49:
c4:6d:51:59:6c:23:66:76:ae:26:92:a4:48:89:e6:09:4b:78:
fe:c1:e2:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbL4UPqR2EQuLOIigHyA5dcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDdjN2I4OTY1NmRkMzM5Y2I5OGZiN2MyYjAzNzFjNTky
NmE2NDEwHhcNMjUwNTEzMjMwMDU5WhcNMjUwNTE0MjMwMDU5WjAzMTEwLwYDVQQD
Eyg1NjQ0Zjk0OTdhOTU2MzVhM2I5YmNkZTQ3MGJmMjBjNGZmYzVlN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxaE2ji+qwwuCUj6odFB/0dyN8vs
SXp73HwDGopHTDU5f1PER0uL0lCmx3HuptVkIUdig8nls/AY1MbnfRaY7En384KO
22UuNVipgvkYM7gSfM4P3G2iDDSDPjB078fAhOXFdZwD3w9vdMQ6J5k75ZHlM1ZJ
FHd6y5GhS63zvuYxv42yBPb6lALcw36tU925YkU7sIYrFzQs+ySvuCZi7ok22wZ0
UvCaT/3eBbi44Zz+QiMIhXEqiScc+QWrV4vWh01U1YRZparxNS28vtCRiiNyoMY1
xkwZNDL3oqxAk8bsYA1h+eMIt5tpLrvFA+Gg3bNmr0X7DkP8Xo7Af+JaFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZE+Ul6lWNaO5vN5HC/IMT/xee0MB8GA1UdIwQY
MBaAFJkHx7iWVt0znLmPt8KwNxxZJqZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMt
OTNkZWM3MzVmNzE3LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMtOTNkZWM3MzVmNzE3
LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBJyLAcL
jb6nOO6tNO3B0yRpgEJ+XvPEdQFvX6JzQxM3/+RfgCWx4oTMRXgm2/LZzji7LaPk
ady1p7jcriWe4ga82WmJWkKsrnrXroff5K8cpKpSZAj1EL14IGMrGU9BfrUrAUKW
xmOgomkZ3GETlLZuMPt6DUv7r1HcU0rEcPw17WcsZGQnTLrJGUmnvAPdROi3c1gh
3ij5ChdpuX7P8OZP4n01bX6Ns2BpfmdaDCi7aWlnKLiDP26yYC8Ct1MkrbftcszU
R5OTAS8L6hYB2G+vE142ADdy9ifxAJNwE8EooFQmhk0cSK5JxG1RWWwjZnauJpKk
SInmCUt4/sHiIw==
-----END CERTIFICATE-----
Generated at Wed May 14 09:32:28 2025 by rpki-client