Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: 1Is2FhB7KYf2OYGkSyKs5xcgjx7GSdgTis/numNrHcg=
Subject key identifier: 55:30:8F:AE:E6:C7:B6:C4:E5:B8:33:41:5D:DC:92:52:92:9F:17:D8
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 0196A0BFD192BB62BF1DADC8AF846E3B6029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1274
Signing time: Mon 05 May 2025 14:00:47 +0000
Manifest this update: Mon 05 May 2025 14:00:47 +0000
Manifest next update: Tue 06 May 2025 14:00:47 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: XfEGX5f56+O+pFrG4dVRT0kM+AKI71xnL7gPegXQH94=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:d1:92:bb:62:bf:1d:ad:c8:af:84:6e:3b:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: May 5 14:00:47 2025 GMT
Not After : May 6 14:00:47 2025 GMT
Subject: CN=55308faee6c7b6c4e5b833415ddc9252929f17d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:52:de:47:a6:c4:9b:c0:4b:d4:fd:05:b6:
16:64:a9:c9:58:fb:3a:4b:c8:2a:d3:fc:3b:bb:3d:
ce:a0:60:b0:cf:4a:81:94:5e:b2:5c:39:87:70:f7:
46:e8:32:3a:e2:b3:54:f0:a3:93:b8:a2:d0:08:99:
74:b0:22:00:67:ba:ee:db:e0:0a:e2:54:a0:d4:9b:
54:5c:a9:e6:b5:5b:ab:5c:61:e6:c4:7f:dd:f6:6a:
aa:1a:33:27:1a:e7:71:a9:29:89:5e:15:c7:9b:0c:
c1:23:c7:46:bb:85:5c:5c:d1:cc:3d:51:48:39:ce:
ba:6f:58:c1:c2:10:83:d8:7a:3e:bb:56:cc:d4:72:
d8:05:30:4b:8f:d7:b3:c4:f6:d1:d5:cb:f7:fe:c1:
4b:c4:4a:f3:74:95:df:4e:39:a0:ae:eb:43:bc:13:
41:41:d8:da:58:3b:a1:6e:9c:d2:6f:91:ff:88:7b:
a7:8a:6d:d0:cb:81:e7:af:5d:c3:3d:de:3b:75:f6:
c5:99:dc:95:df:8c:55:f1:76:46:9c:22:e0:54:2f:
39:cf:44:0f:ff:2d:75:7d:a2:4f:b8:ad:3a:9c:77:
bc:1a:20:38:5e:da:58:b3:27:cc:f5:46:53:96:60:
75:23:8b:2b:6c:23:fe:90:6c:01:0d:45:7b:13:e5:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:30:8F:AE:E6:C7:B6:C4:E5:B8:33:41:5D:DC:92:52:92:9F:17:D8
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:08:8e:07:59:95:0d:af:74:83:c6:9c:c3:3e:ad:e5:8e:45:
50:84:11:b7:bc:85:8f:b2:50:a5:c5:4e:b6:66:db:b2:f7:f5:
4e:13:3a:c3:a8:de:13:1c:aa:50:9e:cc:75:c5:e5:bb:24:20:
32:0f:e0:79:1a:ca:fa:73:67:ae:cf:68:8e:bb:db:fb:05:84:
42:28:da:b9:ea:cb:ce:bc:e3:49:00:2c:28:41:b7:82:e6:4b:
2b:48:9f:8f:44:d9:29:b9:5e:01:02:08:46:24:51:15:94:c0:
7f:09:3e:a4:5e:17:fb:a1:33:44:6a:c2:ec:7a:eb:8a:e2:1a:
2d:0b:7a:6f:67:5c:21:db:f2:a0:19:af:5e:29:a7:df:2c:9e:
72:fd:f8:95:b6:1c:e1:ac:bd:55:81:c5:b9:17:ff:3e:33:5f:
24:a5:ff:76:19:f8:43:0c:b7:ec:43:d6:7d:80:13:a8:17:e4:
40:c7:70:5b:ae:8f:5a:bf:59:99:3c:ee:2e:36:92:7b:b1:61:
63:ac:b7:62:4b:6f:25:58:93:d2:b8:79:6d:fb:f6:30:8b:ba:
0f:88:d1:49:33:cc:5b:a1:61:25:4c:5a:a0:01:86:4b:d3:4f:
89:ec:76:09:82:03:c6:19:5f:3d:40:01:dd:fa:08:87:4e:05:
e8:27:24:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagv9GSu2K/Ha3Ir4RuO2ApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5
OThiNGYwHhcNMjUwNTA1MTQwMDQ3WhcNMjUwNTA2MTQwMDQ3WjAzMTEwLwYDVQQD
Eyg1NTMwOGZhZWU2YzdiNmM0ZTViODMzNDE1ZGRjOTI1MjkyOWYxN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5whS3kemxJvAS9T9BbYWZKnJWPs6
S8gq0/w7uz3OoGCwz0qBlF6yXDmHcPdG6DI64rNU8KOTuKLQCJl0sCIAZ7ru2+AK
4lSg1JtUXKnmtVurXGHmxH/d9mqqGjMnGudxqSmJXhXHmwzBI8dGu4VcXNHMPVFI
Oc66b1jBwhCD2Ho+u1bM1HLYBTBLj9ezxPbR1cv3/sFLxErzdJXfTjmgrutDvBNB
QdjaWDuhbpzSb5H/iHunim3Qy4Hnr13DPd47dfbFmdyV34xV8XZGnCLgVC85z0QP
/y11faJPuK06nHe8GiA4XtpYsyfM9UZTlmB1I4srbCP+kGwBDUV7E+W8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUwj67mx7bE5bgzQV3cklKSnxfYMB8GA1UdIwQY
MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt
OWU0ZTQ2ZjYwYTY4LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4
LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwiOB1mV
Da90g8acwz6t5Y5FUIQRt7yFj7JQpcVOtmbbsvf1ThM6w6jeExyqUJ7MdcXluyQg
Mg/geRrK+nNnrs9ojrvb+wWEQijauerLzrzjSQAsKEG3guZLK0ifj0TZKbleAQII
RiRRFZTAfwk+pF4X+6EzRGrC7HrriuIaLQt6b2dcIdvyoBmvXimn3yyecv34lbYc
4ay9VYHFuRf/PjNfJKX/dhn4Qwy37EPWfYATqBfkQMdwW66PWr9ZmTzuLjaSe7Fh
Y6y3YktvJViT0rh5bfv2MIu6D4jRSTPMW6FhJUxaoAGGS9NPiex2CYIDxhlfPUAB
3foIh04F6Cckvg==
-----END CERTIFICATE-----
Generated at Mon May 5 16:26:33 2025 by rpki-client