Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: 8joQliM677ZAqAS/3F+jKZCXzPZvycuuPXOgB8ea5Mo=
Subject key identifier: 0D:55:7E:1E:72:C6:FA:10:E1:E1:B3:21:10:57:88:02:11:33:66:53
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 0196BCDC07BFFF4B69AE938D3D450A71744A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 123A
Signing time: Sun 11 May 2025 01:00:58 +0000
Manifest this update: Sun 11 May 2025 01:00:58 +0000
Manifest next update: Mon 12 May 2025 01:00:58 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: LLhs152utnvUJygkjmqjb5MwfmwEp9JcqSjxha+Edcw=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:dc:07:bf:ff:4b:69:ae:93:8d:3d:45:0a:71:74:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: May 11 01:00:58 2025 GMT
Not After : May 12 01:00:58 2025 GMT
Subject: CN=0d557e1e72c6fa10e1e1b3211057880211336653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:5e:77:45:fb:8e:f5:92:66:8c:68:de:9e:
ea:64:7c:62:0c:d6:fd:ed:6e:79:a0:53:e7:17:fa:
f8:cf:45:61:62:a4:e3:af:86:30:3c:7a:98:9b:f7:
d5:94:7c:79:ba:09:35:9e:b6:34:f0:0e:fe:63:c7:
7f:9d:91:75:3c:da:20:fc:c7:e0:e5:60:b3:43:f2:
d2:dc:f2:7b:7f:55:f6:5e:74:af:9b:c1:80:2a:65:
29:fe:7b:1f:06:1a:aa:07:c9:97:80:61:56:35:2a:
32:7e:b2:c1:a6:8e:93:9a:b5:ea:c6:91:74:f1:5c:
20:ba:6e:fb:d6:12:43:26:d5:b3:31:ed:32:d2:99:
d3:c1:51:f1:57:c8:e7:e3:33:87:21:38:81:d9:d7:
3c:52:22:9f:af:77:a9:3e:7e:bd:03:e0:66:33:97:
e4:ac:1c:64:0e:7a:f6:ab:8f:71:17:e4:39:9e:85:
23:6e:fa:35:aa:d1:a3:bd:9e:4d:09:8f:5c:a2:8e:
9f:0d:af:cf:a0:ee:78:b7:11:96:21:69:2c:d9:63:
d3:6a:10:b7:a2:fa:fc:cb:81:07:9a:45:b7:3d:8e:
10:6b:6c:11:66:b1:c9:40:9b:b4:a8:f4:48:f7:18:
19:65:75:3c:7a:29:81:90:c2:13:86:1e:8b:f7:ff:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:7E:1E:72:C6:FA:10:E1:E1:B3:21:10:57:88:02:11:33:66:53
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:47:93:35:63:ca:07:b7:c6:e4:bd:d6:53:ab:c2:83:db:c2:
52:40:1a:f2:8c:b2:f6:45:68:a9:10:14:24:d9:43:a5:f6:1f:
5c:c7:80:6a:1a:ba:69:30:4e:3e:b5:77:df:d6:a4:96:b0:4a:
ff:1f:96:bd:c8:63:ba:9d:43:13:e5:bc:ec:a5:48:f1:02:58:
1c:09:ef:1b:75:6c:4e:44:75:a7:0e:55:d8:90:af:5f:21:2c:
9a:f3:dd:f6:56:31:0d:b1:e1:a2:3d:de:59:20:5e:c4:7b:44:
61:61:5f:4c:16:40:9c:9b:0a:fe:b6:2a:d5:95:27:bb:62:60:
f3:da:09:ca:5c:72:ce:81:59:46:31:75:48:ae:e3:9a:30:ee:
f6:dc:b9:ff:37:2c:a2:fd:de:13:ca:43:81:e9:74:d4:91:88:
64:7a:4a:0e:c1:13:38:a1:93:2b:1f:e9:39:66:d4:f7:27:ed:
fa:63:39:d1:e0:0f:85:e4:df:3d:e9:1c:9e:ed:e6:73:19:c9:
5d:62:a2:5b:a9:7a:63:a6:ee:01:4e:e4:c7:f1:89:c8:cb:b4:
17:ab:4c:56:8e:73:18:af:52:de:5f:ab:0d:37:0a:cf:b1:f0:
b6:8b:97:16:a7:9b:86:01:9e:a2:62:55:f0:cd:ab:d9:a9:5e:
34:36:3b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa83Ae//0tprpONPUUKcXRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjUwNTExMDEwMDU4WhcNMjUwNTEyMDEwMDU4WjAzMTEwLwYDVQQD
EygwZDU1N2UxZTcyYzZmYTEwZTFlMWIzMjExMDU3ODgwMjExMzM2NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAled0X7jvWSZoxo3p7qZHxiDNb9
7W55oFPnF/r4z0VhYqTjr4YwPHqYm/fVlHx5ugk1nrY08A7+Y8d/nZF1PNog/Mfg
5WCzQ/LS3PJ7f1X2XnSvm8GAKmUp/nsfBhqqB8mXgGFWNSoyfrLBpo6TmrXqxpF0
8Vwgum771hJDJtWzMe0y0pnTwVHxV8jn4zOHITiB2dc8UiKfr3epPn69A+BmM5fk
rBxkDnr2q49xF+Q5noUjbvo1qtGjvZ5NCY9coo6fDa/PoO54txGWIWks2WPTahC3
ovr8y4EHmkW3PY4Qa2wRZrHJQJu0qPRI9xgZZXU8eimBkMIThh6L9/+utwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1Vfh5yxvoQ4eGzIRBXiAIRM2ZTMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUeTNWPK
B7fG5L3WU6vCg9vCUkAa8oyy9kVoqRAUJNlDpfYfXMeAahq6aTBOPrV339aklrBK
/x+Wvchjup1DE+W87KVI8QJYHAnvG3VsTkR1pw5V2JCvXyEsmvPd9lYxDbHhoj3e
WSBexHtEYWFfTBZAnJsK/rYq1ZUnu2Jg89oJylxyzoFZRjF1SK7jmjDu9ty5/zcs
ov3eE8pDgel01JGIZHpKDsETOKGTKx/pOWbU9yft+mM50eAPheTfPekcnu3mcxnJ
XWKiW6l6Y6buAU7kx/GJyMu0F6tMVo5zGK9S3l+rDTcKz7HwtouXFqebhgGeomJV
8M2r2aleNDY7Vg==
-----END CERTIFICATE-----
Generated at Sun May 11 06:20:38 2025 by rpki-client