Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: QBMCIdOC+if8Mw8PltWGkuhEwHV71fcIWXVrkdYGDk8=
Subject key identifier: 2F:3C:EE:E3:91:96:4D:52:FB:4D:51:90:C1:2E:B1:5E:EE:1A:C1:E0
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 0196827E51FDCE58BDF481F04E42F90957BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 045F
Signing time: Tue 29 Apr 2025 17:00:38 +0000
Manifest this update: Tue 29 Apr 2025 17:00:38 +0000
Manifest next update: Wed 30 Apr 2025 17:00:38 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: WP7ItksLslXteKDT1RnEXbt6sQMTeZq8mHmLgPfJaiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:51:fd:ce:58:bd:f4:81:f0:4e:42:f9:09:57:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Apr 29 17:00:38 2025 GMT
Not After : Apr 30 17:00:38 2025 GMT
Subject: CN=2f3ceee391964d52fb4d5190c12eb15eee1ac1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:ba:72:af:bf:12:3b:9e:33:fd:2a:cc:f8:
e8:67:fc:7f:84:9a:ef:a1:51:5f:15:23:3c:22:f7:
57:98:cf:e6:07:96:b6:8c:9e:8a:88:42:e1:93:82:
04:21:92:5c:f5:ba:81:a3:61:71:56:78:54:30:bc:
9a:b5:83:38:e1:2d:02:80:db:08:d9:5c:fb:4f:93:
7a:dd:e0:0e:55:28:f0:f0:bc:c5:de:ca:28:fe:65:
e5:90:d7:09:7e:a4:5b:54:79:b0:5e:45:70:10:f0:
0f:9e:68:e7:58:12:21:8b:dc:9c:6c:7a:a7:87:f2:
cc:16:8c:d7:58:83:0b:45:93:94:e9:f8:b2:9e:3f:
a4:b8:f8:f5:fe:e0:6f:f7:81:69:3e:7d:05:36:61:
58:c9:b9:f7:07:57:19:de:8c:00:95:7e:f0:02:7d:
7a:39:45:d9:11:ac:30:3a:94:4f:ba:9c:3f:29:c6:
95:23:ba:bd:f4:72:5b:d6:c7:5e:b2:cc:1a:b0:27:
42:cc:74:33:15:02:18:34:15:c5:88:cb:d2:39:38:
a6:68:f1:1a:05:7e:22:9a:ef:d8:e8:cc:11:1a:cc:
c4:c1:9b:2f:e5:8a:83:ba:09:c0:80:66:7c:73:55:
eb:67:25:2b:45:df:39:2c:24:f7:2d:26:82:60:7d:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:EE:E3:91:96:4D:52:FB:4D:51:90:C1:2E:B1:5E:EE:1A:C1:E0
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d7:6e:56:a8:61:06:f5:5d:92:63:be:56:7f:30:3d:0f:76:
c1:f1:39:ae:bf:0a:00:97:2e:fe:bf:3c:09:58:ac:3e:d3:f8:
02:aa:93:11:df:4e:31:8e:fb:5d:2b:62:f5:a1:21:37:94:1a:
b4:14:1d:a7:93:97:4f:5b:cb:d9:6b:3c:fe:45:eb:99:90:3b:
a7:00:8b:e5:49:e7:0f:9c:69:31:63:28:8b:3d:f7:fb:8c:7b:
31:d6:7d:8e:1a:d1:b1:22:0c:36:ab:4f:b7:14:f1:53:71:11:
d0:df:0a:66:6b:da:55:c4:a0:8e:56:a0:f5:76:94:be:18:80:
43:65:8f:39:3a:30:19:ed:86:35:4d:1b:fe:34:41:15:24:9c:
18:97:13:bf:6a:f6:58:14:32:3b:06:b5:fa:a4:cc:b2:67:fa:
92:f7:8c:83:e8:a1:18:26:d8:b4:c9:75:cc:ba:a0:2a:e8:90:
d7:2d:d2:61:93:15:ae:46:d9:43:d7:8d:07:d3:81:2f:25:28:
7f:9b:01:e0:21:eb:f5:5a:2b:90:09:20:c3:b6:c5:41:29:c4:
70:c6:60:24:75:dd:ba:05:3c:6c:66:1b:9c:d8:80:c3:c9:ef:
9d:70:b2:82:ed:1f:4c:e4:8a:23:40:e9:af:05:49:84:56:c6:
46:aa:ef:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCflH9zli99IHwTkL5CVe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh
YzBiNTQwHhcNMjUwNDI5MTcwMDM4WhcNMjUwNDMwMTcwMDM4WjAzMTEwLwYDVQQD
EygyZjNjZWVlMzkxOTY0ZDUyZmI0ZDUxOTBjMTJlYjE1ZWVlMWFjMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjG6cq+/EjueM/0qzPjoZ/x/hJrv
oVFfFSM8IvdXmM/mB5a2jJ6KiELhk4IEIZJc9bqBo2FxVnhUMLyatYM44S0CgNsI
2Vz7T5N63eAOVSjw8LzF3soo/mXlkNcJfqRbVHmwXkVwEPAPnmjnWBIhi9ycbHqn
h/LMFozXWIMLRZOU6fiynj+kuPj1/uBv94FpPn0FNmFYybn3B1cZ3owAlX7wAn16
OUXZEawwOpRPupw/KcaVI7q99HJb1sdesswasCdCzHQzFQIYNBXFiMvSOTimaPEa
BX4imu/Y6MwRGszEwZsv5YqDugnAgGZ8c1XrZyUrRd85LCT3LSaCYH2dVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC887uORlk1S+01RkMEusV7uGsHgMB8GA1UdIwQY
MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt
ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2
LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNduVqhh
BvVdkmO+Vn8wPQ92wfE5rr8KAJcu/r88CVisPtP4AqqTEd9OMY77XSti9aEhN5Qa
tBQdp5OXT1vL2Ws8/kXrmZA7pwCL5UnnD5xpMWMoiz33+4x7MdZ9jhrRsSIMNqtP
txTxU3ER0N8KZmvaVcSgjlag9XaUvhiAQ2WPOTowGe2GNU0b/jRBFSScGJcTv2r2
WBQyOwa1+qTMsmf6kveMg+ihGCbYtMl1zLqgKuiQ1y3SYZMVrkbZQ9eNB9OBLyUo
f5sB4CHr9VorkAkgw7bFQSnEcMZgJHXdugU8bGYbnNiAw8nvnXCygu0fTOSKI0Dp
rwVJhFbGRqrvRw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:35:31 2025 by rpki-client