Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: Sv906weFZ1VQ81NxthcnnsR0KReUvr0Xp/hMs44hMdU=
Subject key identifier: 04:A3:1B:E9:D2:C8:CE:B5:60:56:87:C2:3E:68:CD:E3:BD:FB:EB:F9
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 01967F0FB059D9B8824A5D74420FA7FC0612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 0F84
Signing time: Tue 29 Apr 2025 01:00:56 +0000
Manifest this update: Tue 29 Apr 2025 01:00:56 +0000
Manifest next update: Wed 30 Apr 2025 01:00:56 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: oTgntJ4PesdTbUhstxR+co7Wzv52l6QIt+uj3kCP5b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:b0:59:d9:b8:82:4a:5d:74:42:0f:a7:fc:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Apr 29 01:00:56 2025 GMT
Not After : Apr 30 01:00:56 2025 GMT
Subject: CN=04a31be9d2c8ceb5605687c23e68cde3bdfbebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:b8:82:dd:85:2c:5c:19:63:b2:57:f3:fa:
19:f5:5a:8d:69:f5:f2:d0:5f:70:b3:82:53:5f:14:
a8:b6:ec:29:ee:01:49:7a:d9:06:cf:11:51:c7:0c:
3d:b7:6f:d0:05:fe:9b:98:18:9e:27:68:f1:9c:ad:
8f:29:09:c6:7e:d0:42:d2:33:1c:99:04:8a:5c:0d:
20:48:27:6e:28:09:68:f3:ba:da:af:d0:55:75:d6:
27:88:48:e5:b9:16:cb:c6:cb:f0:4a:e3:f0:96:63:
6f:a1:a2:6e:a9:ea:3e:36:68:14:10:6f:37:cb:74:
43:8a:db:8d:5c:d2:7d:93:c0:71:b2:8a:45:46:c7:
8f:76:90:03:d8:b0:66:d3:88:0d:2b:e0:b4:f4:0c:
b2:9a:68:24:71:03:1a:b0:1c:e2:29:bc:c4:74:7d:
d9:1d:20:cd:09:57:1d:81:4b:9a:7e:96:1e:dd:40:
31:ad:e4:cd:02:a4:7a:34:39:f5:f1:f1:0e:42:ea:
e4:6d:2e:5e:66:87:85:2e:19:7f:07:62:a5:5a:77:
ff:bc:4b:c7:44:cb:7b:f3:08:9d:1e:df:af:69:20:
f9:5c:eb:22:ed:a4:51:12:c8:89:3f:d3:76:87:ef:
0f:1e:4d:47:89:52:bb:ba:ae:b8:d7:21:d9:45:43:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:1B:E9:D2:C8:CE:B5:60:56:87:C2:3E:68:CD:E3:BD:FB:EB:F9
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:be:40:67:19:6a:6e:46:b6:64:97:01:39:2d:fe:40:b9:c2:
74:06:bf:6a:82:bb:48:38:ae:83:a5:f0:14:8a:0e:08:6d:37:
39:c2:48:db:5a:d2:bc:28:1a:6f:7f:55:79:10:52:94:e8:68:
a1:bc:01:28:2f:10:da:84:e7:05:79:e5:0e:b1:b3:07:d8:71:
45:b7:81:e8:ef:da:49:ee:35:05:fd:83:13:72:94:f4:66:51:
aa:33:50:c9:2d:73:a8:be:e5:2f:4b:4f:38:73:b7:f3:84:f5:
aa:10:24:ad:df:11:01:41:e5:37:2f:61:cf:5d:27:a3:c4:83:
05:b6:93:fd:f9:55:97:72:6b:94:0c:a1:b2:3c:16:38:c0:a3:
c4:3e:7a:a5:3d:5a:4a:05:4d:8d:c8:c5:69:0f:fc:cb:4b:ea:
6e:89:3d:6a:6d:4a:d1:40:55:b9:38:f2:3f:27:3b:c2:bf:f5:
2c:f7:36:d1:36:3c:e0:9a:d1:01:df:5f:86:3e:a7:67:30:00:
0e:45:c2:6e:75:68:3c:2b:04:8a:0f:8c:0a:03:15:6c:f9:91:
b9:65:c0:c9:92:3b:04:54:d2:cc:2e:d5:eb:b5:15:b8:f6:fd:
66:e8:40:90:5e:61:24:c8:0c:a4:3b:08:dc:3f:af:e7:89:ef:
21:2c:ba:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/D7BZ2biCSl10Qg+n/AYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjUwNDI5MDEwMDU2WhcNMjUwNDMwMDEwMDU2WjAzMTEwLwYDVQQD
EygwNGEzMWJlOWQyYzhjZWI1NjA1Njg3YzIzZTY4Y2RlM2JkZmJlYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwha4gt2FLFwZY7JX8/oZ9VqNafXy
0F9ws4JTXxSotuwp7gFJetkGzxFRxww9t2/QBf6bmBieJ2jxnK2PKQnGftBC0jMc
mQSKXA0gSCduKAlo87rar9BVddYniEjluRbLxsvwSuPwlmNvoaJuqeo+NmgUEG83
y3RDituNXNJ9k8BxsopFRsePdpAD2LBm04gNK+C09AyymmgkcQMasBziKbzEdH3Z
HSDNCVcdgUuafpYe3UAxreTNAqR6NDn18fEOQurkbS5eZoeFLhl/B2KlWnf/vEvH
RMt78widHt+vaSD5XOsi7aRREsiJP9N2h+8PHk1HiVK7uq641yHZRUOqmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASjG+nSyM61YFaHwj5ozeO9++v5MB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkL5AZxlq
bka2ZJcBOS3+QLnCdAa/aoK7SDiug6XwFIoOCG03OcJI21rSvCgab39VeRBSlOho
obwBKC8Q2oTnBXnlDrGzB9hxRbeB6O/aSe41Bf2DE3KU9GZRqjNQyS1zqL7lL0tP
OHO384T1qhAkrd8RAUHlNy9hz10no8SDBbaT/flVl3JrlAyhsjwWOMCjxD56pT1a
SgVNjcjFaQ/8y0vqbok9am1K0UBVuTjyPyc7wr/1LPc20TY84JrRAd9fhj6nZzAA
DkXCbnVoPCsEig+MCgMVbPmRuWXAyZI7BFTSzC7V67UVuPb9ZuhAkF5hJMgMpDsI
3D+v54nvISy6LQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:20:49 2025 by rpki-client