Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
File: Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft (raw, json)
Hash identifier: +xc3dC7311bm6g6+mqGzeOLiyMEL3oWned65BapOhbI=
Subject key identifier: CF:FA:A1:B2:F1:24:2B:9D:F5:C3:18:02:73:AB:2E:3E:9E:EB:8C:9A
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 0196748B959843BC0F2787FD12CB8210DBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
Manifest number: 11EB
Signing time: Sun 27 Apr 2025 00:00:26 +0000
Manifest this update: Sun 27 Apr 2025 00:00:26 +0000
Manifest next update: Mon 28 Apr 2025 00:00:26 +0000
Files and hashes: 1: Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl (hash: BtI42gPT5aBd6NC50cH3TK4za88HZpQaruKnfjOE+Ng=)
2: fQVuwKT50hbkCaxxsedkAc4v4DM.roa (hash: 7+f7vmuufbnUl5kubA16fvBKejBnvUX170UQ3Kwi8yM=)
3: yI_RXXqJUefuh1flF2oTn9wC4DI.roa (hash: j2h6Y5w4TEDmVG2v4OM8fOFhUfhpchqy4oEvpRV83t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:95:98:43:bc:0f:27:87:fd:12:cb:82:10:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Apr 27 00:00:26 2025 GMT
Not After : Apr 28 00:00:26 2025 GMT
Subject: CN=cffaa1b2f1242b9df5c3180273ab2e3e9eeb8c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:f9:ff:84:34:01:43:d2:aa:02:b6:44:65:
22:98:a2:30:16:d9:1a:06:a8:a3:e1:d0:d6:7d:ef:
f4:2c:98:eb:62:24:01:54:ca:a2:5d:08:53:94:94:
61:b0:5a:e4:cd:49:bc:92:02:03:7e:79:91:73:f1:
d1:ae:30:56:7c:24:73:b4:15:0c:f9:33:fb:9d:4a:
28:9e:8b:d7:6c:e5:44:ff:e2:04:a8:a6:e7:10:7b:
b3:f8:59:2c:f6:06:1e:7d:5c:12:39:d9:6e:1f:37:
7e:81:40:9a:a4:f7:99:5c:b6:8c:ae:0a:ae:4a:ad:
00:93:49:ef:3d:96:c6:75:3f:ee:29:e4:e6:3c:c3:
72:4b:7e:40:95:9e:8e:4f:51:40:08:37:97:d5:7b:
15:1c:17:48:23:56:9e:c3:d1:a5:6d:c3:fb:a7:56:
96:8d:05:7c:fe:65:1e:54:b6:66:92:cb:5b:05:08:
0a:91:94:0f:e1:44:35:f5:db:61:98:e3:48:e2:5a:
cf:3f:33:a1:ae:1a:dc:b1:18:05:6f:30:be:42:e7:
92:07:eb:5c:89:3e:c9:bf:8d:60:9c:c9:7b:74:4d:
68:20:58:0b:cb:91:f3:a6:2b:31:ff:bb:13:67:b3:
fe:a3:5f:4b:f7:23:14:7e:77:fb:fe:5f:b2:02:17:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:A1:B2:F1:24:2B:9D:F5:C3:18:02:73:AB:2E:3E:9E:EB:8C:9A
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:38:6d:df:52:7f:36:ac:cf:de:9c:e2:2f:72:ae:8f:8a:b0:
b6:b4:01:28:f7:f0:03:b0:ac:f8:f3:53:21:87:3f:87:41:1b:
53:f9:f4:1c:ee:bc:29:f3:b3:52:db:4e:66:d3:66:c8:f3:38:
3b:65:91:1c:df:b6:1b:ce:8f:13:96:3f:f5:77:49:ca:45:84:
35:63:53:a3:d8:2e:92:90:d5:11:b3:fa:d1:f3:8e:30:98:6b:
98:f9:02:33:97:d6:21:97:33:e8:2a:fa:81:e0:3e:ea:6e:31:
26:ce:fc:6e:a2:64:95:46:06:14:26:b1:e3:58:22:b3:d7:93:
26:c2:b9:db:30:0e:f7:e9:e3:6b:e9:f6:7d:e3:74:f3:ae:59:
35:10:b4:fc:06:40:b9:fc:b4:62:1a:3a:f6:72:4e:bd:ed:a6:
04:25:d2:78:ed:d6:92:9e:bc:d2:15:32:d0:9f:64:90:74:19:
ec:d3:34:f8:4e:ab:71:f3:98:7a:63:29:a8:2e:5f:6a:b7:59:
3c:dc:3a:c6:cc:00:c8:ba:ca:fc:39:99:c0:b1:8d:1b:6e:c2:
c2:d0:ba:39:4c:bd:83:fd:50:eb:fd:97:88:f0:33:05:46:aa:
53:65:a2:a8:67:96:15:aa:b4:c5:c4:8a:0b:a6:29:3f:82:c9:
f4:d7:1f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i5WYQ7wPJ4f9EsuCENveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmQwYjEzNWE3ZGZkNmI2YWExYjE4NDllYjE2MzQwMmRl
OGUxYjEwHhcNMjUwNDI3MDAwMDI2WhcNMjUwNDI4MDAwMDI2WjAzMTEwLwYDVQQD
EyhjZmZhYTFiMmYxMjQyYjlkZjVjMzE4MDI3M2FiMmUzZTllZWI4YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s/5/4Q0AUPSqgK2RGUimKIwFtka
Bqij4dDWfe/0LJjrYiQBVMqiXQhTlJRhsFrkzUm8kgIDfnmRc/HRrjBWfCRztBUM
+TP7nUoonovXbOVE/+IEqKbnEHuz+Fks9gYefVwSOdluHzd+gUCapPeZXLaMrgqu
Sq0Ak0nvPZbGdT/uKeTmPMNyS35AlZ6OT1FACDeX1XsVHBdII1aew9GlbcP7p1aW
jQV8/mUeVLZmkstbBQgKkZQP4UQ19dthmONI4lrPPzOhrhrcsRgFbzC+QueSB+tc
iT7Jv41gnMl7dE1oIFgLy5Hzpisx/7sTZ7P+o19L9yMUfnf7/l+yAhe33wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/6obLxJCud9cMYAnOrLj6e64yaMB8GA1UdIwQY
MBaAFE29CxNaff1raqGxhJ6xY0At6OGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGIwTEUxcDlfV3Rxb2JHRW5yRmpRQzNvNGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yNDdlZTItMjM2NS00NzY4LTk3N2Yt
ZmVmYTFhYmFlZGNmLzEvVGIwTEUxcDlfV3Rxb2JHRW5yRmpRQzNvNGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yNDdlZTItMjM2NS00NzY4LTk3N2YtZmVmYTFhYmFlZGNm
LzEvVGIwTEUxcDlfV3Rxb2JHRW5yRmpRQzNvNGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezht31J/
NqzP3pziL3Kuj4qwtrQBKPfwA7Cs+PNTIYc/h0EbU/n0HO68KfOzUttOZtNmyPM4
O2WRHN+2G86PE5Y/9XdJykWENWNTo9gukpDVEbP60fOOMJhrmPkCM5fWIZcz6Cr6
geA+6m4xJs78bqJklUYGFCax41gis9eTJsK52zAO9+nja+n2feN0865ZNRC0/AZA
ufy0Yho69nJOve2mBCXSeO3Wkp680hUy0J9kkHQZ7NM0+E6rcfOYemMpqC5fardZ
PNw6xswAyLrK/DmZwLGNG27CwtC6OUy9g/1Q6/2XiPAzBUaqU2WiqGeWFaq0xcSK
C6YpP4LJ9Ncfgg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:32 2025 by rpki-client