Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: xtwJpEui+npnlGpafd11as9dDOlYuYliQcOQVdgimwc=
Subject key identifier: EC:22:4B:37:A8:E2:BB:5C:E0:16:4F:6E:47:AB:2B:C8:AF:38:78:AE
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 0196A98C1393E20D3088BB406321E8A0F49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 0457
Signing time: Wed 07 May 2025 07:00:51 +0000
Manifest this update: Wed 07 May 2025 07:00:51 +0000
Manifest next update: Thu 08 May 2025 07:00:51 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: fcWA4QQ/cgaMfyAwFm5VCzjxjWtB2cTR0eh5t/WO8D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:13:93:e2:0d:30:88:bb:40:63:21:e8:a0:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: May 7 07:00:51 2025 GMT
Not After : May 8 07:00:51 2025 GMT
Subject: CN=ec224b37a8e2bb5ce0164f6e47ab2bc8af3878ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:cb:71:0b:19:a5:86:df:99:41:a2:f1:4d:
4f:0b:9c:f5:6b:62:af:d8:df:c0:7d:ce:e6:82:38:
87:15:93:dd:bc:db:78:a7:81:05:a8:1a:ec:27:c2:
fd:15:4a:e5:cc:08:09:d4:21:da:b5:cb:5e:97:a8:
23:e9:0e:57:f8:e8:dc:29:9a:27:2d:7e:1a:85:30:
33:78:a7:08:61:ef:27:2c:e2:18:fc:13:ff:32:62:
36:64:48:8f:5b:fc:da:87:d9:06:80:f0:2d:db:3e:
44:4b:33:e8:79:2c:fe:ba:85:05:80:40:7f:91:03:
a1:bd:c4:53:00:0b:73:f9:cf:32:cd:95:06:19:e9:
54:35:b3:07:e2:a2:d1:9d:c5:ea:3d:aa:42:b1:7e:
a1:99:db:fa:af:44:c8:c0:61:cb:f0:db:4e:cf:f2:
3f:2b:d7:97:00:6b:a1:7b:6a:f4:b8:e9:11:2c:78:
69:ae:90:7b:c6:6e:52:66:84:96:85:9a:c7:6c:b6:
96:f4:d3:03:00:50:47:c1:47:3c:20:b3:72:39:57:
ef:93:ed:44:1c:6d:a9:64:51:97:a9:d9:7b:75:32:
7e:73:e8:73:c5:7b:35:41:5b:3d:b0:ed:19:6b:22:
04:a6:7c:46:5f:b0:90:9d:87:45:61:3e:04:5b:e6:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:4B:37:A8:E2:BB:5C:E0:16:4F:6E:47:AB:2B:C8:AF:38:78:AE
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:82:f1:a5:30:2f:2b:cb:a4:40:8b:cf:2a:b7:40:bf:d4:8c:
9b:a6:63:49:5d:07:a2:39:43:16:0d:75:e9:d3:c4:46:53:6a:
90:d7:be:85:2a:8b:88:35:ec:44:be:00:7c:bf:17:a8:47:67:
0e:66:7f:93:13:c4:bf:18:a4:29:62:fe:c9:8a:2a:a3:0a:b2:
fa:7f:65:6e:8a:4b:76:df:c0:94:81:f3:e1:35:a1:86:0f:20:
f9:b2:64:c0:d9:30:7e:d6:bf:83:85:73:2d:2c:66:f0:39:8c:
67:b6:d0:31:13:27:85:36:e7:98:a0:7d:bb:36:5c:59:e5:89:
d6:f7:f2:6e:a2:63:3a:58:2e:97:3a:5b:2f:84:3d:43:07:f8:
b3:25:0b:8a:e6:23:85:d6:76:62:4f:40:ae:fb:0a:04:ff:83:
c0:1b:6a:f2:dc:54:af:73:44:df:f4:5d:26:e8:ab:42:44:da:
4d:da:69:e5:d0:99:d7:86:96:c2:ab:dd:65:b3:fa:70:26:33:
39:92:ce:b3:9e:01:cc:8e:b4:ce:ea:61:68:56:a4:2a:37:af:
30:84:5d:48:76:39:b6:fc:2d:d0:59:30:f2:25:a6:ec:a1:63:
34:d2:c2:82:32:bb:a8:29:e2:e6:23:76:55:53:2e:03:76:af:
0b:f0:99:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapjBOT4g0wiLtAYyHooPSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTc1MTU2NTcxNzVhOTQ2Y2M4ZGI2MTk2Y2ExYjIxNTRl
MzgxMTQwHhcNMjUwNTA3MDcwMDUxWhcNMjUwNTA4MDcwMDUxWjAzMTEwLwYDVQQD
EyhlYzIyNGIzN2E4ZTJiYjVjZTAxNjRmNmU0N2FiMmJjOGFmMzg3OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDLcQsZpYbfmUGi8U1PC5z1a2Kv
2N/Afc7mgjiHFZPdvNt4p4EFqBrsJ8L9FUrlzAgJ1CHatctel6gj6Q5X+OjcKZon
LX4ahTAzeKcIYe8nLOIY/BP/MmI2ZEiPW/zah9kGgPAt2z5ESzPoeSz+uoUFgEB/
kQOhvcRTAAtz+c8yzZUGGelUNbMH4qLRncXqPapCsX6hmdv6r0TIwGHL8NtOz/I/
K9eXAGuhe2r0uOkRLHhprpB7xm5SZoSWhZrHbLaW9NMDAFBHwUc8ILNyOVfvk+1E
HG2pZFGXqdl7dTJ+c+hzxXs1QVs9sO0ZayIEpnxGX7CQnYdFYT4EW+aydwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwiSzeo4rtc4BZPbkerK8ivOHiuMB8GA1UdIwQY
MBaAFJqXUVZXF1qUbMjbYZbKGyFU44EUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgt
NTZlNmUyZGM4ODg1LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgtNTZlNmUyZGM4ODg1
LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnILxpTAv
K8ukQIvPKrdAv9SMm6ZjSV0HojlDFg116dPERlNqkNe+hSqLiDXsRL4AfL8XqEdn
DmZ/kxPEvxikKWL+yYoqowqy+n9lbopLdt/AlIHz4TWhhg8g+bJkwNkwfta/g4Vz
LSxm8DmMZ7bQMRMnhTbnmKB9uzZcWeWJ1vfybqJjOlgulzpbL4Q9Qwf4syULiuYj
hdZ2Yk9ArvsKBP+DwBtq8txUr3NE3/RdJuirQkTaTdpp5dCZ14aWwqvdZbP6cCYz
OZLOs54BzI60zuphaFakKjevMIRdSHY5tvwt0Fkw8iWm7KFjNNLCgjK7qCni5iN2
VVMuA3avC/CZ0Q==
-----END CERTIFICATE-----
Generated at Wed May 7 13:44:04 2025 by rpki-client