Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: OOZ10hJO3riWlwulch9IInxEchfW7poVw6RG1cxd5fg=
Subject key identifier: DA:42:C8:39:51:BE:0C:FE:D7:E1:4F:50:16:C8:3C:C8:3C:49:45:17
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 0196D889C5474AAF114EA71D24AD1443048D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1541
Signing time: Fri 16 May 2025 10:00:29 +0000
Manifest this update: Fri 16 May 2025 10:00:29 +0000
Manifest next update: Sat 17 May 2025 10:00:29 +0000
Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: xfL2gFJKIc2xPx321zilp9Noy15YihHt8rxLnlJWasU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:c5:47:4a:af:11:4e:a7:1d:24:ad:14:43:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: May 16 10:00:29 2025 GMT
Not After : May 17 10:00:29 2025 GMT
Subject: CN=da42c83951be0cfed7e14f5016c83cc83c494517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:57:91:2d:4b:19:46:72:32:20:0d:06:4a:
04:3c:02:68:1b:9b:f4:3e:bf:a7:69:e9:a7:82:fb:
a6:af:4d:40:07:6d:a4:22:c2:6f:84:15:64:21:6d:
5c:10:67:93:3f:f3:ca:e2:da:38:69:aa:65:53:65:
d3:25:93:07:cb:79:13:1b:a6:c5:32:ba:62:22:e9:
a5:ed:5e:c3:6c:cb:6e:ce:99:cc:d9:e1:49:e6:62:
af:3a:51:d7:8e:86:06:bf:c6:5b:db:ee:4e:a8:71:
5f:9c:dd:08:89:7b:6a:a2:da:f5:61:8d:29:02:8e:
68:7c:bb:54:36:0e:8e:d3:de:c8:01:1c:f9:17:c2:
92:08:e1:e7:fa:74:a4:e0:ae:1c:d7:2c:b5:1f:7c:
8d:02:bb:94:ac:fa:dd:29:11:52:a1:f7:43:7f:39:
5a:bd:55:9f:da:61:60:d1:73:ca:c3:74:6a:2e:97:
d3:26:4b:34:9b:1c:9b:06:5a:8a:15:8e:92:74:fb:
b0:68:c3:82:a2:e5:89:23:55:e3:2e:c4:f1:d0:a0:
17:2b:f6:ab:ce:9e:75:9c:e4:62:19:db:b2:f6:34:
fe:6f:7b:75:d6:dd:ec:81:cf:2f:0f:72:72:ea:c7:
c5:60:96:2b:e9:28:73:6a:a7:67:71:c2:7f:b9:aa:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:C8:39:51:BE:0C:FE:D7:E1:4F:50:16:C8:3C:C8:3C:49:45:17
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a1:5b:38:4a:31:ba:3b:55:d9:eb:49:2d:b0:be:13:15:e6:
03:f9:eb:55:d5:89:39:fa:54:60:94:30:52:c9:b0:3e:04:cd:
5f:68:28:5c:1d:7f:bd:e5:af:08:d7:df:d3:92:39:72:51:d1:
f4:d9:80:6c:65:9e:52:1d:6d:5d:21:cd:5a:9b:e4:7b:a9:57:
47:73:69:da:38:2b:ff:7b:85:c6:42:54:00:70:e1:c1:3a:18:
72:bc:c9:c1:b6:80:a7:49:97:06:c9:65:f7:eb:71:51:b1:09:
82:09:d3:3e:93:c8:79:e1:e9:09:d8:ac:4e:cf:ce:c5:82:76:
5c:a6:62:23:5f:e5:30:b6:e9:72:c2:49:f6:c7:c8:bf:8c:b1:
d2:5c:07:51:60:8c:ec:c5:15:9e:61:52:06:d4:b3:3a:bd:bb:
42:f2:e9:ca:72:06:66:4d:43:73:8d:e9:c1:af:be:09:89:19:
c5:97:80:b5:6c:4c:4d:12:20:1a:f4:f0:62:e6:1e:be:41:09:
ce:fb:65:9a:f6:b7:74:b7:65:b3:26:e9:09:f8:14:67:88:b2:
a6:3c:c7:fe:94:05:8c:fb:d7:f3:73:46:cc:ad:7b:a8:29:14:
f3:1b:a8:8b:11:5d:c5:0b:ba:0a:e7:4d:25:9f:4e:87:bc:3f:
7c:d5:3d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbYicVHSq8RTqcdJK0UQwSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1
ZDA1MzkwHhcNMjUwNTE2MTAwMDI5WhcNMjUwNTE3MTAwMDI5WjAzMTEwLwYDVQQD
EyhkYTQyYzgzOTUxYmUwY2ZlZDdlMTRmNTAxNmM4M2NjODNjNDk0NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbVXkS1LGUZyMiANBkoEPAJoG5v0
Pr+naemngvumr01AB22kIsJvhBVkIW1cEGeTP/PK4to4aaplU2XTJZMHy3kTG6bF
MrpiIuml7V7DbMtuzpnM2eFJ5mKvOlHXjoYGv8Zb2+5OqHFfnN0IiXtqotr1YY0p
Ao5ofLtUNg6O097IARz5F8KSCOHn+nSk4K4c1yy1H3yNAruUrPrdKRFSofdDfzla
vVWf2mFg0XPKw3RqLpfTJks0mxybBlqKFY6SdPuwaMOCouWJI1XjLsTx0KAXK/ar
zp51nORiGduy9jT+b3t11t3sgc8vD3Jy6sfFYJYr6ShzaqdnccJ/uaqBWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpCyDlRvgz+1+FPUBbIPMg8SUUXMB8GA1UdIwQY
MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct
YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz
LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqFbOEox
ujtV2etJLbC+ExXmA/nrVdWJOfpUYJQwUsmwPgTNX2goXB1/veWvCNff05I5clHR
9NmAbGWeUh1tXSHNWpvke6lXR3Np2jgr/3uFxkJUAHDhwToYcrzJwbaAp0mXBsll
9+txUbEJggnTPpPIeeHpCdisTs/OxYJ2XKZiI1/lMLbpcsJJ9sfIv4yx0lwHUWCM
7MUVnmFSBtSzOr27QvLpynIGZk1Dc43pwa++CYkZxZeAtWxMTRIgGvTwYuYevkEJ
zvtlmva3dLdlsybpCfgUZ4iypjzH/pQFjPvX83NGzK17qCkU8xuoixFdxQu6CudN
JZ9Oh7w/fNU9RQ==
-----END CERTIFICATE-----
Generated at Fri May 16 12:16:56 2025 by rpki-client