Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: nLkkAs7pdHy128IWKuoWzMV/d8G3zReSh8JyKsJuMTg=
Subject key identifier: C5:5A:24:6E:88:BA:C1:21:43:95:57:BF:F9:8A:83:69:F5:5D:B2:22
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019681A2930EB4658B20532D58CA53E91FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 05EC
Signing time: Tue 29 Apr 2025 13:00:37 +0000
Manifest this update: Tue 29 Apr 2025 13:00:37 +0000
Manifest next update: Wed 30 Apr 2025 13:00:37 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: lQ8aKiRxZp+YjsB2rUpD0/UvdnasbBGKxRcqj1APwFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:93:0e:b4:65:8b:20:53:2d:58:ca:53:e9:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Apr 29 13:00:37 2025 GMT
Not After : Apr 30 13:00:37 2025 GMT
Subject: CN=c55a246e88bac121439557bff98a8369f55db222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:09:c1:29:05:90:28:fd:09:3f:41:a7:d6:
1e:78:8e:7e:bd:f2:74:5c:1d:c9:41:1d:77:c2:db:
53:da:a8:1d:9f:51:fc:01:1f:d5:d5:a9:bf:7d:24:
a2:83:85:f7:8b:42:06:e1:44:b5:33:88:d0:90:0e:
b6:79:d6:91:b8:63:30:d6:a2:57:bf:1a:37:a7:e6:
83:bc:bc:17:bb:26:f0:66:da:79:aa:80:df:ed:00:
68:30:6b:8e:2a:ff:f7:53:50:ca:b1:bd:7d:ec:49:
82:fc:e6:c4:b9:df:f0:13:3d:6f:80:bd:48:f9:88:
61:35:82:01:05:53:70:c2:ce:28:7a:cd:f3:de:18:
17:d7:0f:b5:89:99:16:1e:21:81:63:6f:91:19:b0:
8c:b9:28:e1:c0:1f:d2:bf:94:1a:c5:29:f3:3d:17:
53:a1:28:04:aa:79:f4:e2:a4:04:cc:30:62:bc:79:
56:9d:3e:cd:30:53:b3:89:98:d2:a4:a7:e4:bf:04:
09:18:bd:1c:75:5a:f6:08:a8:9b:b3:28:0c:52:78:
79:e8:5e:87:ba:c0:d3:44:c0:e1:57:37:dc:09:4a:
bb:60:85:f5:53:49:92:e9:53:74:04:af:eb:55:c4:
46:76:af:1f:bc:53:58:6a:49:8b:11:91:2c:e5:0f:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5A:24:6E:88:BA:C1:21:43:95:57:BF:F9:8A:83:69:F5:5D:B2:22
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:11:7d:1f:8b:92:4c:2a:3c:74:48:4b:ee:86:cb:1b:14:9f:
bb:63:2b:69:68:8e:64:a8:d3:64:0c:9e:06:b8:b8:41:29:b9:
9d:db:3b:63:1d:bc:03:fd:6d:fa:c0:e0:5d:c1:19:90:6a:07:
66:31:7c:39:9a:55:89:4b:ed:2d:28:c6:eb:a1:dd:c1:c1:d2:
5e:f0:09:af:80:6f:9a:54:fd:fb:d4:39:81:90:e4:3e:e2:e7:
3b:c1:fe:63:60:76:d9:31:8d:b1:6f:59:67:44:a3:c6:44:53:
c0:a6:58:40:d3:20:d6:63:f6:17:0a:80:76:23:dc:76:35:f9:
f5:1c:8c:f5:c4:42:d0:a7:7e:11:1c:3b:70:02:14:42:9e:ca:
3d:23:13:68:25:7c:88:42:76:b4:90:88:f7:b0:0e:00:9b:a4:
07:e2:42:e6:fc:96:33:b1:43:9a:1c:e8:65:91:07:5a:dd:2b:
44:48:d1:5e:55:b1:e1:f1:5d:30:ad:9c:94:2e:fd:a6:bb:98:
20:d0:51:81:42:64:94:49:e0:33:a7:74:14:5c:db:5b:28:82:
52:77:15:72:33:3c:06:ab:bf:71:28:2c:52:f9:60:9f:f5:7e:
b9:1a:96:ff:a6:de:13:ed:0d:46:bc:01:00:07:bf:0d:62:47:
35:f1:b7:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBopMOtGWLIFMtWMpT6R+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjUwNDI5MTMwMDM3WhcNMjUwNDMwMTMwMDM3WjAzMTEwLwYDVQQD
EyhjNTVhMjQ2ZTg4YmFjMTIxNDM5NTU3YmZmOThhODM2OWY1NWRiMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtakJwSkFkCj9CT9Bp9YeeI5+vfJ0
XB3JQR13wttT2qgdn1H8AR/V1am/fSSig4X3i0IG4US1M4jQkA62edaRuGMw1qJX
vxo3p+aDvLwXuybwZtp5qoDf7QBoMGuOKv/3U1DKsb197EmC/ObEud/wEz1vgL1I
+YhhNYIBBVNwws4oes3z3hgX1w+1iZkWHiGBY2+RGbCMuSjhwB/Sv5QaxSnzPRdT
oSgEqnn04qQEzDBivHlWnT7NMFOziZjSpKfkvwQJGL0cdVr2CKibsygMUnh56F6H
usDTRMDhVzfcCUq7YIX1U0mS6VN0BK/rVcRGdq8fvFNYakmLEZEs5Q+HCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVaJG6IusEhQ5VXv/mKg2n1XbIiMB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0xF9H4uS
TCo8dEhL7obLGxSfu2MraWiOZKjTZAyeBri4QSm5nds7Yx28A/1t+sDgXcEZkGoH
ZjF8OZpViUvtLSjG66HdwcHSXvAJr4BvmlT9+9Q5gZDkPuLnO8H+Y2B22TGNsW9Z
Z0SjxkRTwKZYQNMg1mP2FwqAdiPcdjX59RyM9cRC0Kd+ERw7cAIUQp7KPSMTaCV8
iEJ2tJCI97AOAJukB+JC5vyWM7FDmhzoZZEHWt0rREjRXlWx4fFdMK2clC79pruY
INBRgUJklEngM6d0FFzbWyiCUncVcjM8Bqu/cSgsUvlgn/V+uRqW/6beE+0NRrwB
AAe/DWJHNfG3Fw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:13 2025 by rpki-client