Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier: vc30WRMjvEzuhy40Wy6XLEePPkv710F192DngAb9kd8=
Subject key identifier: F1:6F:D8:7D:02:DB:95:86:D2:3A:B1:35:42:18:56:86:DA:D8:E1:E5
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 0196C04AA826485BB96B6F6299A63B88E9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number: 0AD7
Signing time: Sun 11 May 2025 17:00:40 +0000
Manifest this update: Sun 11 May 2025 17:00:40 +0000
Manifest next update: Mon 12 May 2025 17:00:40 +0000
Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: KFTTUfvPNJU/1rrBlc/Ad1bosYLEaZnnCiP3zCIUzfs=)
2: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (hash: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:a8:26:48:5b:b9:6b:6f:62:99:a6:3b:88:e9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: May 11 17:00:40 2025 GMT
Not After : May 12 17:00:40 2025 GMT
Subject: CN=f16fd87d02db9586d23ab13542185686dad8e1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:cc:e6:a8:85:0e:88:88:5f:21:2c:71:f4:
d9:ba:54:ef:b4:b3:f4:1d:ed:d0:d5:03:36:b0:33:
7c:62:63:55:eb:14:68:72:75:d9:bd:b6:52:8e:93:
a9:4b:83:68:98:8d:22:0c:84:f1:29:40:ad:d7:55:
a5:1c:7b:88:3a:39:36:69:f4:e9:c2:e8:0e:44:d0:
4d:5e:f4:c8:f1:e1:5b:3c:95:bb:0a:f6:a9:a7:c1:
bf:07:8d:eb:c0:c2:17:8a:69:d9:0e:4a:21:22:ad:
36:29:df:1d:21:d1:4d:a5:db:ea:41:5c:c0:dd:5c:
a8:12:4d:d5:3f:26:80:74:0b:ae:f7:11:3c:6f:d0:
2a:3d:cc:b2:a5:9c:6c:62:10:b2:24:7d:64:2e:ac:
d6:d5:81:3c:49:83:b1:9b:53:95:8a:b1:dd:84:87:
2a:ff:28:71:5f:70:05:f5:e9:da:50:9c:c9:f1:23:
6e:0e:cb:f8:ea:e9:c6:00:5a:f0:7c:82:4c:d8:56:
89:9e:69:0a:06:a3:f6:c9:33:f2:95:30:4e:4a:ce:
b5:54:fb:88:e7:60:22:87:f5:10:85:f6:73:60:41:
e8:65:73:48:9e:0f:c5:a3:9c:81:66:20:f9:ae:49:
a2:f7:b2:b2:af:12:bc:92:0b:ab:92:df:86:f6:2d:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6F:D8:7D:02:DB:95:86:D2:3A:B1:35:42:18:56:86:DA:D8:E1:E5
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:1b:16:77:67:9f:78:f0:44:11:08:c2:51:c3:fa:3a:c5:
5a:9d:f8:7a:97:8f:16:97:89:3a:33:ef:d5:a9:4d:88:9e:cc:
a9:e9:c3:50:de:29:61:b6:e6:56:1a:0b:ed:dd:77:e2:af:5d:
01:e6:be:20:db:1c:ef:90:d6:9d:45:c7:19:c6:8f:37:03:ca:
c2:19:fc:a9:d6:f0:b7:63:1c:77:01:0c:93:da:26:c7:ef:51:
8d:19:36:fe:37:97:a3:a1:6c:0a:bd:83:ae:ad:55:99:ea:61:
89:36:f8:45:b3:11:9d:34:ec:53:d1:f7:88:d1:2e:50:3c:dd:
87:c1:b0:9f:55:c9:15:ab:98:4b:ca:5f:aa:11:1b:bf:ef:16:
55:f7:fa:29:7d:7f:03:45:0d:0e:60:8c:05:b6:09:07:53:8c:
da:80:82:da:a5:9e:41:3d:26:27:23:30:2d:7e:4d:ce:6f:3e:
03:69:75:b6:2d:0f:68:57:8e:2b:15:50:94:6a:62:11:d6:7d:
5f:d5:58:11:e6:ab:d7:82:bf:e9:1d:62:ac:28:43:64:be:23:
c7:79:83:5c:fe:8c:6d:84:6b:32:d6:ff:0c:2e:d6:f3:47:cf:
1b:5c:b8:1e:0a:0d:c1:a4:34:6c:fe:92:41:6f:c6:74:73:67:
6d:e1:68:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASqgmSFu5a29imaY7iOnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNTMyZTNkYzM3MThmMmUxYjU1NmE2OTQ3MGIxZTczOWRk
MzkwMjIwHhcNMjUwNTExMTcwMDQwWhcNMjUwNTEyMTcwMDQwWjAzMTEwLwYDVQQD
EyhmMTZmZDg3ZDAyZGI5NTg2ZDIzYWIxMzU0MjE4NTY4NmRhZDhlMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjTM5qiFDoiIXyEscfTZulTvtLP0
He3Q1QM2sDN8YmNV6xRocnXZvbZSjpOpS4NomI0iDITxKUCt11WlHHuIOjk2afTp
wugORNBNXvTI8eFbPJW7Cvapp8G/B43rwMIXimnZDkohIq02Kd8dIdFNpdvqQVzA
3VyoEk3VPyaAdAuu9xE8b9AqPcyypZxsYhCyJH1kLqzW1YE8SYOxm1OVirHdhIcq
/yhxX3AF9enaUJzJ8SNuDsv46unGAFrwfIJM2FaJnmkKBqP2yTPylTBOSs61VPuI
52Aih/UQhfZzYEHoZXNIng/Fo5yBZiD5rkmi97KyrxK8kgurkt+G9i1l8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFv2H0C25WG0jqxNUIYVoba2OHlMB8GA1UdIwQY
MBaAFDBTLj3DcY8uG1VqaUcLHnOd05AiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODct
NjZhZDFkYzg3MzYzLzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODctNjZhZDFkYzg3MzYz
LzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0wbFndn
n3jwRBEIwlHD+jrFWp34epePFpeJOjPv1alNiJ7MqenDUN4pYbbmVhoL7d134q9d
Aea+INsc75DWnUXHGcaPNwPKwhn8qdbwt2McdwEMk9omx+9RjRk2/jeXo6FsCr2D
rq1VmephiTb4RbMRnTTsU9H3iNEuUDzdh8Gwn1XJFauYS8pfqhEbv+8WVff6KX1/
A0UNDmCMBbYJB1OM2oCC2qWeQT0mJyMwLX5Nzm8+A2l1ti0PaFeOKxVQlGpiEdZ9
X9VYEear14K/6R1irChDZL4jx3mDXP6MbYRrMtb/DC7W80fPG1y4HgoNwaQ0bP6S
QW/GdHNnbeFoZA==
-----END CERTIFICATE-----
Generated at Sun May 11 22:18:36 2025 by rpki-client