Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: nfAfR0r7vN/V2VvZdS65WRE722H5UB80errzxeqfVmo=
Subject key identifier: 5A:03:37:63:2A:19:E0:62:65:9B:68:93:0B:6A:EA:26:CE:32:51:52
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 0196C12668E9542165629E5F9DF33BD7B777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 1233
Signing time: Sun 11 May 2025 21:00:42 +0000
Manifest this update: Sun 11 May 2025 21:00:42 +0000
Manifest next update: Mon 12 May 2025 21:00:42 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: SAWA25CqA2Y1sPOGq3R6XRodht5jMtdsud3Fxl/P9VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:68:e9:54:21:65:62:9e:5f:9d:f3:3b:d7:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: May 11 21:00:42 2025 GMT
Not After : May 12 21:00:42 2025 GMT
Subject: CN=5a0337632a19e062659b68930b6aea26ce325152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:eb:a5:f5:ed:d4:c1:2e:95:bb:e7:c9:f9:
90:4e:0a:1a:ac:24:24:35:16:59:52:4a:e4:4d:0f:
b5:16:38:57:a1:99:59:d1:f2:00:c6:6c:62:e7:86:
6a:26:be:2e:db:62:42:34:10:f1:f8:49:75:1e:df:
bc:9f:01:28:48:1d:6c:f4:a5:f8:1e:e5:c4:99:ce:
b5:d6:2d:92:7c:cb:35:be:32:8d:3a:79:15:af:c2:
92:61:8e:0a:cb:65:c9:fa:e2:97:2d:66:6a:8e:66:
f8:6f:fa:fd:b0:89:80:dd:6a:b2:64:e6:21:22:c6:
17:19:fc:6d:f8:35:a3:2a:4c:2c:23:92:30:6a:b4:
f4:07:00:62:a5:04:9b:21:95:bf:6d:f6:62:4a:86:
2c:3e:d3:29:58:03:70:cd:d9:0c:19:10:d7:92:54:
95:1c:2e:64:65:48:45:f7:23:25:6e:52:3c:a6:60:
29:c2:6f:41:cf:44:74:58:af:22:f0:df:9b:90:7a:
4e:93:f3:f8:69:5c:0a:92:64:d2:8c:09:58:14:b3:
19:a8:42:27:2b:73:d0:fb:56:e7:6f:9d:80:2d:3e:
7a:7a:41:04:ad:32:f5:73:f4:7f:24:31:51:07:12:
2d:2c:80:f9:04:c7:ce:54:c0:d5:2c:fd:dd:61:47:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:37:63:2A:19:E0:62:65:9B:68:93:0B:6A:EA:26:CE:32:51:52
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c1:0b:ba:f6:bb:de:51:d5:be:92:99:a3:1a:86:3f:4a:8c:
ae:82:d8:11:3d:6f:45:35:a2:8c:7a:47:b2:fa:d6:32:92:fe:
4b:77:9c:e3:2b:c9:ee:ec:28:85:02:71:84:38:14:ef:0e:0e:
71:6f:16:1a:3b:f5:b4:32:83:e0:fb:4f:62:fd:d7:eb:1e:0f:
35:b8:42:af:75:c7:d1:d1:f8:ff:8b:c9:e8:11:3a:9b:ad:dc:
6e:6e:07:99:85:ff:d4:a7:27:e9:07:6b:8b:fc:4d:f0:6e:15:
5c:d5:1f:e3:b5:96:17:49:02:a5:3e:41:98:bc:4b:76:ee:9e:
b5:ae:e6:b6:d7:e7:15:e1:6d:a9:92:05:78:93:d3:5a:74:b1:
7c:3e:67:b3:43:cc:05:b7:cb:5c:bd:82:83:62:25:83:64:58:
1e:57:cf:49:2d:b6:76:b6:93:ce:a2:7a:59:1a:4a:01:6c:79:
22:ed:28:e6:55:84:49:bc:71:aa:88:f3:3e:83:4d:11:a2:fd:
9a:44:90:8e:12:66:9a:3e:52:d5:54:56:1a:89:52:9b:8a:58:
cd:45:c4:4e:21:b0:db:06:7e:ab:14:af:f0:0f:e5:27:83:f9:
15:f4:25:fc:96:d7:1f:92:a0:24:f1:f2:90:20:1e:be:85:1f:
43:df:1a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJmjpVCFlYp5fnfM717d3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjUwNTExMjEwMDQyWhcNMjUwNTEyMjEwMDQyWjAzMTEwLwYDVQQD
Eyg1YTAzMzc2MzJhMTllMDYyNjU5YjY4OTMwYjZhZWEyNmNlMzI1MTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwzrpfXt1MEulbvnyfmQTgoarCQk
NRZZUkrkTQ+1FjhXoZlZ0fIAxmxi54ZqJr4u22JCNBDx+El1Ht+8nwEoSB1s9KX4
HuXEmc611i2SfMs1vjKNOnkVr8KSYY4Ky2XJ+uKXLWZqjmb4b/r9sImA3WqyZOYh
IsYXGfxt+DWjKkwsI5IwarT0BwBipQSbIZW/bfZiSoYsPtMpWANwzdkMGRDXklSV
HC5kZUhF9yMlblI8pmApwm9Bz0R0WK8i8N+bkHpOk/P4aVwKkmTSjAlYFLMZqEIn
K3PQ+1bnb52ALT56ekEErTL1c/R/JDFRBxItLID5BMfOVMDVLP3dYUfMLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoDN2MqGeBiZZtokwtq6ibOMlFSMB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcELuva7
3lHVvpKZoxqGP0qMroLYET1vRTWijHpHsvrWMpL+S3ec4yvJ7uwohQJxhDgU7w4O
cW8WGjv1tDKD4PtPYv3X6x4PNbhCr3XH0dH4/4vJ6BE6m63cbm4HmYX/1Kcn6Qdr
i/xN8G4VXNUf47WWF0kCpT5BmLxLdu6eta7mttfnFeFtqZIFeJPTWnSxfD5ns0PM
BbfLXL2Cg2Ilg2RYHlfPSS22draTzqJ6WRpKAWx5Iu0o5lWESbxxqojzPoNNEaL9
mkSQjhJmmj5S1VRWGolSm4pYzUXETiGw2wZ+qxSv8A/lJ4P5FfQl/JbXH5KgJPHy
kCAevoUfQ98aJQ==
-----END CERTIFICATE-----
Generated at Mon May 12 04:30:30 2025 by rpki-client