Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: mYYdefHBopqyO7IFwV4N/vEI0pO/ec22YZXTgS3Ao6k=
Subject key identifier: E4:52:1C:97:47:8E:ED:8F:D8:42:E8:1F:81:CC:6A:1F:57:C3:B0:F0
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 0196C2A6AD4AE1D8D18D3036E6E48A2A2CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 0229
Signing time: Mon 12 May 2025 04:00:25 +0000
Manifest this update: Mon 12 May 2025 04:00:25 +0000
Manifest next update: Tue 13 May 2025 04:00:25 +0000
Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=)
2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: a7NHxUO4A83utszx3Y51uiY1uuUN7xyI+gOy9DQ8uQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:ad:4a:e1:d8:d1:8d:30:36:e6:e4:8a:2a:2c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: May 12 04:00:25 2025 GMT
Not After : May 13 04:00:25 2025 GMT
Subject: CN=e4521c97478eed8fd842e81f81cc6a1f57c3b0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:42:ca:8c:0d:9c:14:e1:ef:1d:5f:8c:9f:
13:4d:71:f4:06:ce:67:63:20:8d:6e:7b:16:6f:f3:
54:06:db:14:13:74:3e:5c:97:48:46:c5:6a:36:be:
c3:54:d5:9e:d5:80:49:56:9d:4a:15:ad:26:eb:96:
d1:3f:4b:f7:30:e6:7d:ad:a5:5a:2a:86:25:f3:10:
d9:ef:bd:71:6a:54:34:90:85:7d:62:19:4c:bd:33:
af:96:d8:1c:08:90:6e:dd:28:2b:94:7a:17:fe:8b:
42:7e:1a:a8:32:a3:51:1e:25:56:fa:c0:a7:38:c2:
0b:47:31:ad:a0:d1:cf:71:96:63:e8:09:26:7d:8d:
e8:01:9a:39:45:58:4a:2b:dd:56:b7:8d:6f:e6:d4:
4e:d6:04:e2:34:29:d1:2f:4f:4c:1f:f1:29:58:93:
3a:c5:16:f8:cc:f9:4c:12:10:a5:5d:d4:a6:17:50:
d1:f7:99:0f:2b:61:7a:55:87:15:1f:d9:a7:a8:b3:
69:30:fe:52:d5:41:bd:18:a5:47:26:90:78:47:ae:
b6:0a:75:96:bb:f9:5c:84:fc:85:1e:a2:52:6b:c2:
a0:88:34:89:69:81:5b:64:92:71:97:a5:75:18:e9:
a5:87:46:a2:ce:7f:99:68:fe:ce:f1:df:4a:e6:66:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:1C:97:47:8E:ED:8F:D8:42:E8:1F:81:CC:6A:1F:57:C3:B0:F0
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ff:6e:ce:00:da:e2:27:3d:f1:da:b7:c4:54:63:71:62:d8:
c6:81:98:85:58:38:19:89:fd:2f:b0:a2:70:17:27:53:c5:03:
cf:2e:40:34:15:8f:5e:bb:94:41:7f:4f:a7:d7:06:ba:d0:25:
03:5d:96:9e:f8:32:ed:cd:96:d1:aa:a3:46:51:94:6c:11:42:
e6:90:b0:1e:07:ae:81:3b:1b:0e:82:89:1e:75:2c:ae:2c:d9:
55:75:9a:8f:81:76:b9:5d:10:77:58:bc:28:29:c3:76:20:87:
21:8f:78:a6:8a:5e:60:4b:4f:20:c9:ff:de:ad:89:3a:a9:18:
10:24:1d:eb:d7:56:ea:6c:19:4c:26:4a:6e:25:51:a5:8b:3b:
aa:79:35:03:6c:20:87:df:ff:29:7f:6e:e2:85:07:0e:1b:ed:
93:5e:2b:40:3f:23:44:4d:fd:eb:f0:97:36:72:4f:dc:fb:63:
10:14:da:15:94:30:b1:68:3c:bb:eb:c2:d9:c4:10:a3:43:0f:
46:76:09:94:c4:6a:96:6a:45:80:2e:40:1d:f0:a4:45:55:df:
cf:52:7d:63:c7:f5:94:d5:f8:32:ba:89:ca:0d:a7:e1:9a:61:
84:23:9b:67:26:99:c6:d9:e0:e3:4f:e8:cb:88:80:de:52:15:
0f:7d:9e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpq1K4djRjTA25uSKKiykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm
ZmM4ZDUwHhcNMjUwNTEyMDQwMDI1WhcNMjUwNTEzMDQwMDI1WjAzMTEwLwYDVQQD
EyhlNDUyMWM5NzQ3OGVlZDhmZDg0MmU4MWY4MWNjNmExZjU3YzNiMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ipCyowNnBTh7x1fjJ8TTXH0Bs5n
YyCNbnsWb/NUBtsUE3Q+XJdIRsVqNr7DVNWe1YBJVp1KFa0m65bRP0v3MOZ9raVa
KoYl8xDZ771xalQ0kIV9YhlMvTOvltgcCJBu3SgrlHoX/otCfhqoMqNRHiVW+sCn
OMILRzGtoNHPcZZj6AkmfY3oAZo5RVhKK91Wt41v5tRO1gTiNCnRL09MH/EpWJM6
xRb4zPlMEhClXdSmF1DR95kPK2F6VYcVH9mnqLNpMP5S1UG9GKVHJpB4R662CnWW
u/lchPyFHqJSa8KgiDSJaYFbZJJxl6V1GOmlh0aizn+ZaP7O8d9K5ma/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORSHJdHju2P2ELoH4HMah9Xw7DwMB8GA1UdIwQY
MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt
NWU5NzQzNzc2MDBjLzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj
LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP9uzgDa
4ic98dq3xFRjcWLYxoGYhVg4GYn9L7CicBcnU8UDzy5ANBWPXruUQX9Pp9cGutAl
A12Wnvgy7c2W0aqjRlGUbBFC5pCwHgeugTsbDoKJHnUsrizZVXWaj4F2uV0Qd1i8
KCnDdiCHIY94popeYEtPIMn/3q2JOqkYECQd69dW6mwZTCZKbiVRpYs7qnk1A2wg
h9//KX9u4oUHDhvtk14rQD8jRE396/CXNnJP3PtjEBTaFZQwsWg8u+vC2cQQo0MP
RnYJlMRqlmpFgC5AHfCkRVXfz1J9Y8f1lNX4MrqJyg2n4ZphhCObZyaZxtng40/o
y4iA3lIVD32eqw==
-----END CERTIFICATE-----
Generated at Mon May 12 10:25:58 2025 by rpki-client