Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: 9exvLjJbAeNaDHvwreKCEKndiqb0+9Cj/3r3ZRJd0n0=
Subject key identifier: 42:69:B7:BD:A5:F9:3B:CE:DB:01:AE:BB:0A:74:1A:73:E9:AB:FB:DA
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 0196B823BC0825156B19E423D86CC4290A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 06DB
Signing time: Sat 10 May 2025 03:01:11 +0000
Manifest this update: Sat 10 May 2025 03:01:11 +0000
Manifest next update: Sun 11 May 2025 03:01:11 +0000
Files and hashes: 1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=)
2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: ZbExfbMi6p3MEGTGANXSIYnVM1FtRbsj5e497frzmxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:bc:08:25:15:6b:19:e4:23:d8:6c:c4:29:0a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: May 10 03:01:11 2025 GMT
Not After : May 11 03:01:11 2025 GMT
Subject: CN=4269b7bda5f93bcedb01aebb0a741a73e9abfbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:b4:a5:ce:e4:fe:f4:55:7e:40:53:85:07:
10:4b:e8:a2:37:ec:04:d2:64:ff:9d:97:89:cc:af:
65:fc:17:99:c5:74:5f:12:80:e1:19:d2:06:e2:2d:
9b:19:5f:97:b3:ba:68:e1:14:de:d0:b2:52:bc:c3:
9b:77:4b:34:11:fd:3d:78:87:a6:aa:72:5a:c5:5e:
09:3c:10:79:39:27:30:45:a1:fb:d8:54:8b:da:63:
b5:64:e1:d6:34:2c:28:94:67:25:8d:16:d3:76:bb:
3a:b0:2e:8a:7f:e5:49:54:27:bc:d5:df:80:2f:30:
ae:fa:ee:ee:18:9f:2d:27:d8:4a:d1:ad:fd:e9:9f:
2e:ed:30:88:78:ca:b8:b4:c1:e9:a0:a8:6d:8b:91:
4e:e4:11:53:07:ee:b5:41:fd:ab:1a:1a:a6:b4:05:
c7:03:28:6f:fa:91:ac:6d:46:d6:aa:86:ef:78:68:
d6:7e:c0:aa:fb:af:7a:89:d1:c1:4e:44:20:d9:45:
e8:a1:31:59:22:ee:a7:22:1c:6b:9e:b0:1a:0a:76:
a6:10:1f:72:49:49:0a:02:67:a7:b1:66:92:ea:e1:
09:5c:02:81:aa:d4:07:5d:70:93:bc:0b:bc:41:11:
52:b5:a1:4b:a5:78:d6:20:8a:b2:63:95:87:55:dd:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:B7:BD:A5:F9:3B:CE:DB:01:AE:BB:0A:74:1A:73:E9:AB:FB:DA
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:80:7b:e8:0c:61:31:8d:f4:2e:89:07:96:02:6d:0a:26:
8e:1f:f9:b4:2c:d9:1e:e9:90:03:72:e8:fd:eb:45:8e:17:c8:
b7:7b:f1:3a:1f:aa:c9:cc:26:e4:2e:ae:61:4a:71:a3:cc:9e:
96:2a:e2:f9:79:2d:25:1a:3b:e5:af:80:87:71:c7:12:20:0a:
c9:fe:cc:14:a4:d9:6f:68:79:61:8c:62:d5:35:e5:ea:6e:7e:
63:77:69:6c:98:57:5c:04:f9:a2:79:4a:c2:7e:9b:f8:ae:5f:
11:4d:c3:2f:a8:ec:11:c3:b9:7b:69:fd:53:ac:20:b2:b6:cd:
b8:ce:88:2d:56:0f:22:78:55:3d:a5:d1:f9:bd:cf:b8:52:b1:
fb:0f:cf:51:dc:27:80:5e:13:47:47:13:07:4b:38:79:78:03:
6a:7f:94:ca:2f:28:3e:98:0b:60:23:94:91:65:84:0e:40:88:
1b:97:2c:11:c0:24:3b:4f:ff:2d:78:44:f9:ab:89:e9:46:8b:
da:29:2a:b8:33:3b:94:de:69:2e:e8:35:88:fa:04:6d:84:17:
69:35:08:8b:9a:90:2a:24:bf:89:03:8e:fb:14:3d:31:1d:d8:
f8:33:7f:b0:32:9a:23:39:45:24:36:82:06:3a:cf:3d:9a:8f:
2f:c2:2f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I7wIJRVrGeQj2GzEKQouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQ1ZmMzMTQ3MTAyODI0ZjlkMmQ1NDc3NjZhODA5YWVh
ZjI0NWEwHhcNMjUwNTEwMDMwMTExWhcNMjUwNTExMDMwMTExWjAzMTEwLwYDVQQD
Eyg0MjY5YjdiZGE1ZjkzYmNlZGIwMWFlYmIwYTc0MWE3M2U5YWJmYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyC0pc7k/vRVfkBThQcQS+iiN+wE
0mT/nZeJzK9l/BeZxXRfEoDhGdIG4i2bGV+Xs7po4RTe0LJSvMObd0s0Ef09eIem
qnJaxV4JPBB5OScwRaH72FSL2mO1ZOHWNCwolGcljRbTdrs6sC6Kf+VJVCe81d+A
LzCu+u7uGJ8tJ9hK0a396Z8u7TCIeMq4tMHpoKhti5FO5BFTB+61Qf2rGhqmtAXH
Ayhv+pGsbUbWqobveGjWfsCq+696idHBTkQg2UXooTFZIu6nIhxrnrAaCnamEB9y
SUkKAmensWaS6uEJXAKBqtQHXXCTvAu8QRFStaFLpXjWIIqyY5WHVd0oMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJpt72l+TvO2wGuuwp0GnPpq/vaMB8GA1UdIwQY
MBaAFDDEX8MUcQKCT50tVHdmqAmuryRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYt
M2I1NDBhNmJjM2RjLzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYtM2I1NDBhNmJjM2Rj
LzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7+Ae+gM
YTGN9C6JB5YCbQomjh/5tCzZHumQA3Lo/etFjhfIt3vxOh+qycwm5C6uYUpxo8ye
liri+XktJRo75a+Ah3HHEiAKyf7MFKTZb2h5YYxi1TXl6m5+Y3dpbJhXXAT5onlK
wn6b+K5fEU3DL6jsEcO5e2n9U6wgsrbNuM6ILVYPInhVPaXR+b3PuFKx+w/PUdwn
gF4TR0cTB0s4eXgDan+Uyi8oPpgLYCOUkWWEDkCIG5csEcAkO0//LXhE+auJ6UaL
2ikquDM7lN5pLug1iPoEbYQXaTUIi5qQKiS/iQOO+xQ9MR3Y+DN/sDKaIzlFJDaC
BjrPPZqPL8Iv1w==
-----END CERTIFICATE-----
Generated at Sat May 10 08:30:24 2025 by rpki-client