Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: Iq1kf8zScK2S9x7fkSb1wMfNdyTc8FuQGG1TeCQyaJA=
Subject key identifier: C7:1A:C7:23:D6:30:DC:A5:B1:29:70:12:70:D9:AA:5C:87:DC:01:48
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 0196BAB60F7B726FDE56F9B24151B8851000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 87
Signing time: Sat 10 May 2025 15:00:15 +0000
Manifest this update: Sat 10 May 2025 15:00:15 +0000
Manifest next update: Sun 11 May 2025 15:00:15 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: DQ+2gF8QjehOjxEkaBcQLyAU/hplg3kl36iP9EhSVug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:0f:7b:72:6f:de:56:f9:b2:41:51:b8:85:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: May 10 15:00:15 2025 GMT
Not After : May 11 15:00:15 2025 GMT
Subject: CN=c71ac723d630dca5b129701270d9aa5c87dc0148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:97:0d:fe:c2:0e:b4:f1:38:15:f5:1e:98:
82:af:e3:df:f3:05:aa:b4:7b:93:74:63:e4:51:4f:
fc:9d:29:aa:20:42:b2:a1:7c:b5:8e:f5:94:90:90:
47:28:c4:fc:9a:71:d2:a3:29:c3:9f:21:3a:ba:36:
fb:53:4a:8a:41:e2:e0:d6:b6:2f:cc:40:39:c5:22:
49:40:bc:d5:b0:f4:02:77:96:be:fc:b8:7f:91:22:
72:25:70:56:36:08:25:1a:0b:c5:a5:67:2e:df:54:
d6:ff:51:7b:7f:29:e3:de:2c:6c:f3:ee:bc:df:17:
69:16:65:92:26:58:46:ec:8c:a0:7a:3a:1c:10:ab:
52:e1:a2:0d:99:3a:1d:1a:28:d8:2a:ee:31:83:66:
a6:ca:11:99:da:0d:bd:e7:2b:6a:fc:d5:09:70:49:
7d:57:59:6b:90:ed:ff:ab:89:78:4f:15:f6:3f:93:
8b:cd:ba:27:f9:3b:3e:67:2a:92:4d:c2:55:5b:09:
e7:7c:d3:ea:0f:ea:0f:ec:36:a5:77:48:40:d9:43:
b3:37:35:4e:a2:d2:d6:ee:4d:59:2b:2d:99:a7:1e:
fb:55:36:50:f2:44:a9:cf:ae:45:fd:8b:37:63:9d:
56:26:74:97:14:1f:0f:02:04:31:78:1f:93:3f:c5:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:C7:23:D6:30:DC:A5:B1:29:70:12:70:D9:AA:5C:87:DC:01:48
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:e7:2a:f8:66:a1:02:07:18:42:5e:a5:80:f1:c3:1f:8b:
59:43:06:f3:71:0c:c2:aa:3c:b0:db:37:ab:8e:e3:17:ad:7e:
2e:c1:51:38:d1:69:3d:8e:6b:1b:a0:71:1c:ae:bb:53:9a:f4:
6b:65:14:c2:11:0e:9f:2f:e4:1a:e6:61:eb:1c:cb:48:a9:2c:
1c:17:fb:c2:2e:0d:cb:26:b8:0d:0b:24:71:85:33:fd:c6:bd:
4d:c1:af:8f:0e:a0:8c:9e:2d:2f:ab:d6:31:25:97:81:1e:81:
d3:bc:1a:ab:9c:cc:37:5f:74:c7:86:50:4f:65:a4:1c:86:a8:
d7:0b:99:b1:4b:ec:58:81:a3:06:a0:12:46:b4:d8:c6:ce:b4:
33:7a:c3:8d:78:4e:b0:c6:e8:0a:d2:59:98:3f:ba:8d:57:75:
92:a4:a5:80:5e:8a:25:3b:5f:a0:23:4a:fa:3e:c1:7b:4d:8b:
d1:23:3d:b1:cc:d7:1c:6b:f1:ea:1b:94:78:5d:f3:29:92:79:
c5:20:f5:d0:62:fa:10:5e:cb:34:93:0d:43:ad:5c:24:de:88:
8f:8b:46:8f:e6:49:d3:7a:ce:77:55:4d:93:c0:56:a3:87:ef:
f8:d5:a7:64:44:25:4e:69:35:73:a5:6c:19:b6:a6:0c:20:fb:
fd:b2:67:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tg97cm/eVvmyQVG4hRAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzA2ZjgzZGQ5YzY4ZDFiYjVhZTkxYjUwYzI2ZTkyOWM4
MWQyZmQwHhcNMjUwNTEwMTUwMDE1WhcNMjUwNTExMTUwMDE1WjAzMTEwLwYDVQQD
EyhjNzFhYzcyM2Q2MzBkY2E1YjEyOTcwMTI3MGQ5YWE1Yzg3ZGMwMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJyXDf7CDrTxOBX1HpiCr+Pf8wWq
tHuTdGPkUU/8nSmqIEKyoXy1jvWUkJBHKMT8mnHSoynDnyE6ujb7U0qKQeLg1rYv
zEA5xSJJQLzVsPQCd5a+/Lh/kSJyJXBWNgglGgvFpWcu31TW/1F7fynj3ixs8+68
3xdpFmWSJlhG7IygejocEKtS4aINmTodGijYKu4xg2amyhGZ2g295ytq/NUJcEl9
V1lrkO3/q4l4TxX2P5OLzbon+Ts+ZyqSTcJVWwnnfNPqD+oP7Dald0hA2UOzNzVO
otLW7k1ZKy2Zpx77VTZQ8kSpz65F/Ys3Y51WJnSXFB8PAgQxeB+TP8XewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcaxyPWMNylsSlwEnDZqlyH3AFIMB8GA1UdIwQY
MBaAFDMwb4PdnGjRu1rpG1DCbpKcgdL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUt
NzNkOTRjYjU0NTI2LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUtNzNkOTRjYjU0NTI2
LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufjnKvhm
oQIHGEJepYDxwx+LWUMG83EMwqo8sNs3q47jF61+LsFRONFpPY5rG6BxHK67U5r0
a2UUwhEOny/kGuZh6xzLSKksHBf7wi4Nyya4DQskcYUz/ca9TcGvjw6gjJ4tL6vW
MSWXgR6B07waq5zMN190x4ZQT2WkHIao1wuZsUvsWIGjBqASRrTYxs60M3rDjXhO
sMboCtJZmD+6jVd1kqSlgF6KJTtfoCNK+j7Be02L0SM9sczXHGvx6huUeF3zKZJ5
xSD10GL6EF7LNJMNQ61cJN6Ij4tGj+ZJ03rOd1VNk8BWo4fv+NWnZEQlTmk1c6Vs
GbamDCD7/bJnhQ==
-----END CERTIFICATE-----
Generated at Sat May 10 22:59:05 2025 by rpki-client