Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File: mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier: AdMiIWXOjyPmYRorATF41biaHEQUsqaXcK5jQ7BqGSY=
Subject key identifier: 00:5E:2C:70:B5:DB:E6:C1:4D:C2:C6:F4:97:21:78:10:CF:C1:D2:16
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer: /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial: 0196AC8D65DA75DD9F133CD01E65155B319F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number: 0350
Signing time: Wed 07 May 2025 21:01:09 +0000
Manifest this update: Wed 07 May 2025 21:01:09 +0000
Manifest next update: Thu 08 May 2025 21:01:09 +0000
Files and hashes: 1: 022L9fV8F1ZZ2EE1EuaAsn4eywo.roa (hash: XmLPJO8dC104vud5SObyJBz1K1qN+7X4uqFqIhLIBZ4=)
2: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: a4nRYfCy3mN3yiuKrXvWDiF8lUPOeZDfokwahrcfVoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:65:da:75:dd:9f:13:3c:d0:1e:65:15:5b:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Validity
Not Before: May 7 21:01:09 2025 GMT
Not After : May 8 21:01:09 2025 GMT
Subject: CN=005e2c70b5dbe6c14dc2c6f497217810cfc1d216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:26:72:51:b3:83:a9:44:e2:45:9c:12:c1:
44:61:d2:24:70:dc:58:07:65:67:d3:d9:37:1b:01:
64:d8:f3:a9:25:47:9c:07:f7:1f:98:15:c2:12:61:
85:9e:a5:1a:50:cc:91:74:1f:6d:4c:d1:89:db:aa:
7b:3b:e2:5b:f1:e5:95:d3:b8:b5:e3:e2:c1:4b:24:
ab:fd:00:da:bd:a3:43:31:fb:26:41:c8:a9:9e:b2:
d8:07:44:9b:b2:ce:21:b2:6b:62:f4:86:da:4b:f8:
03:e6:13:b7:b8:14:62:e3:db:3a:c0:a0:72:dd:40:
0f:73:e8:0f:d5:28:f6:24:1f:79:14:da:5c:b0:b2:
ae:d6:e1:f9:e4:48:58:9b:bc:41:c3:fc:48:cb:c8:
da:92:72:96:57:4f:7a:77:6c:c1:82:53:d5:13:f6:
9b:62:62:7d:83:c6:a4:fe:7a:6e:1a:c1:7b:2e:c9:
99:64:c1:26:b0:78:67:77:51:d2:82:c1:96:20:88:
e3:5a:e7:dc:05:a0:75:a2:36:c3:81:03:c1:2c:3f:
c4:fe:68:5d:74:67:1b:0d:d7:64:50:0d:2d:4e:ad:
18:66:ee:f9:11:50:42:54:5b:3c:0d:9a:a8:94:ba:
f9:2a:ef:b7:b3:b5:cc:26:43:f6:e5:f3:14:19:f7:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:2C:70:B5:DB:E6:C1:4D:C2:C6:F4:97:21:78:10:CF:C1:D2:16
X509v3 Authority Key Identifier:
keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e2:65:28:81:8c:b4:e9:5d:c7:86:d6:69:fb:2e:c9:d7:45:
ad:42:eb:07:b0:73:c9:2a:9f:d6:8e:f8:dd:7f:cb:5f:0f:9c:
b0:41:3b:03:c9:15:3a:90:4a:81:61:6e:37:8d:c9:20:71:ff:
bc:56:e9:bc:23:16:ca:14:c4:9d:53:4d:a7:47:a4:8e:6b:98:
38:1a:4e:b6:01:67:bf:b1:68:31:7b:15:00:5e:05:97:dc:49:
b5:f6:7e:de:40:ee:9a:af:cd:39:32:6e:24:1d:39:d8:6c:8e:
28:17:9a:6a:00:18:04:3d:c7:b8:cc:2f:6d:52:a3:69:18:6b:
6e:14:07:f2:a8:70:73:eb:66:60:ea:80:2d:33:13:97:11:15:
1b:84:07:b0:5a:93:64:bd:84:97:8d:77:96:30:97:55:7c:74:
19:de:1e:bd:58:b4:38:99:a7:bf:2d:bb:7f:34:ce:8d:3d:74:
97:a6:bf:60:f6:fa:87:00:d8:cc:7c:41:26:7d:66:1f:b6:3c:
62:63:34:30:e5:d7:3d:1a:80:99:6b:3e:8c:94:79:10:0a:d1:
8f:4c:89:5e:d3:4c:4a:cc:14:02:24:8c:87:7f:7b:93:13:b3:
a7:df:90:a9:84:30:cd:77:37:06:fa:7d:a6:ba:6e:c1:fe:53:
93:63:5b:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasjWXadd2fEzzQHmUVWzGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWZlOTY5Y2YwZWE5M2EwZThlNTdlZTk1ODhjYWY1NTcy
YjNiMjIwHhcNMjUwNTA3MjEwMTA5WhcNMjUwNTA4MjEwMTA5WjAzMTEwLwYDVQQD
EygwMDVlMmM3MGI1ZGJlNmMxNGRjMmM2ZjQ5NzIxNzgxMGNmYzFkMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oomclGzg6lE4kWcEsFEYdIkcNxY
B2Vn09k3GwFk2POpJUecB/cfmBXCEmGFnqUaUMyRdB9tTNGJ26p7O+Jb8eWV07i1
4+LBSySr/QDavaNDMfsmQcipnrLYB0Sbss4hsmti9IbaS/gD5hO3uBRi49s6wKBy
3UAPc+gP1Sj2JB95FNpcsLKu1uH55EhYm7xBw/xIy8jaknKWV096d2zBglPVE/ab
YmJ9g8ak/npuGsF7LsmZZMEmsHhnd1HSgsGWIIjjWufcBaB1ojbDgQPBLD/E/mhd
dGcbDddkUA0tTq0YZu75EVBCVFs8DZqolLr5Ku+3s7XMJkP25fMUGfceQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABeLHC12+bBTcLG9JcheBDPwdIWMB8GA1UdIwQY
MBaAFJiv6WnPDqk6Do5X7pWIyvVXKzsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MmJkMDctM2NmMS00NWIxLTllZWYt
Yjg0N2ViNzdhZmM4LzEvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MmJkMDctM2NmMS00NWIxLTllZWYtYjg0N2ViNzdhZmM4
LzEvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+JlKIGM
tOldx4bWafsuyddFrULrB7BzySqf1o743X/LXw+csEE7A8kVOpBKgWFuN43JIHH/
vFbpvCMWyhTEnVNNp0ekjmuYOBpOtgFnv7FoMXsVAF4Fl9xJtfZ+3kDumq/NOTJu
JB052GyOKBeaagAYBD3HuMwvbVKjaRhrbhQH8qhwc+tmYOqALTMTlxEVG4QHsFqT
ZL2El413ljCXVXx0Gd4evVi0OJmnvy27fzTOjT10l6a/YPb6hwDYzHxBJn1mH7Y8
YmM0MOXXPRqAmWs+jJR5EArRj0yJXtNMSswUAiSMh397kxOzp9+QqYQwzXc3Bvp9
prpuwf5Tk2NbKg==
-----END CERTIFICATE-----
Generated at Thu May 8 00:34:15 2025 by rpki-client