Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: z+PEZQ75HwLuQlvtYq+3zoYPsMkYFKDe2EB71EZqvGk=
Subject key identifier: 15:E4:E0:EA:8E:C4:32:7F:B6:73:17:DA:D6:54:D9:37:26:95:BA:C7
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0196726671A72206041686DFDF7166AAA488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 0D1E
Signing time: Sat 26 Apr 2025 14:00:38 +0000
Manifest this update: Sat 26 Apr 2025 14:00:38 +0000
Manifest next update: Sun 27 Apr 2025 14:00:38 +0000
Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=)
2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=)
3: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=)
4: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: B3PukUc0l9eKnOf3lXj6+0rPK5JUCDU1AS87jfqQDPw=)
5: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=)
6: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=)
7: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=)
8: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=)
9: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:71:a7:22:06:04:16:86:df:df:71:66:aa:a4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Apr 26 14:00:38 2025 GMT
Not After : Apr 27 14:00:38 2025 GMT
Subject: CN=15e4e0ea8ec4327fb67317dad654d9372695bac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:57:25:8d:b5:66:e7:de:da:06:8a:9a:cc:
c1:ae:92:13:38:42:24:7c:9b:88:62:48:2e:c6:ed:
70:cd:9e:5d:f0:b3:1e:e0:d2:a7:02:78:a5:e8:2c:
7e:9e:e4:e6:b5:33:0e:54:c9:6b:0a:f3:84:a5:06:
56:a4:51:83:fa:66:73:16:62:11:04:54:df:df:3b:
dd:dd:24:9f:46:e9:4e:77:cb:5c:c7:db:7c:da:a8:
e4:a6:03:f2:85:a2:0f:bc:e3:bd:df:2a:b5:2f:ae:
f5:ef:60:a6:9e:f5:c8:06:73:45:76:81:e2:e7:b3:
06:fe:18:49:ec:04:c9:bb:ce:56:a7:dd:b3:7c:7a:
17:80:cd:75:cb:91:3b:87:67:ce:7b:06:17:39:1d:
e2:1f:87:35:99:13:73:dd:da:37:64:b7:17:43:5e:
ed:05:42:5d:aa:2e:83:32:03:69:fa:b8:bb:1e:e2:
ca:01:58:f6:35:6e:96:b5:7c:1c:db:ce:01:d5:d1:
0d:76:85:62:7c:e3:18:6d:48:38:76:97:e0:05:ca:
48:a0:86:3c:20:1e:69:3b:b1:cb:5c:2d:05:93:28:
2d:e9:79:ae:7b:68:7f:61:7f:13:05:40:19:b3:a5:
b1:63:95:2c:03:27:ee:24:70:0f:e1:80:39:84:f9:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:E0:EA:8E:C4:32:7F:B6:73:17:DA:D6:54:D9:37:26:95:BA:C7
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:27:fc:ca:25:9e:12:fe:73:cb:78:98:4f:42:99:91:83:21:
09:e3:ba:be:32:b6:ea:40:23:47:65:c6:93:c2:3f:dc:9c:69:
a7:8f:3a:2c:fd:53:43:67:0b:6e:15:84:bf:d0:0a:af:01:92:
21:d4:05:e0:28:71:88:86:26:a0:9d:50:55:7b:3c:b7:5c:95:
af:50:70:bd:27:3b:82:23:71:10:f2:0e:e3:2a:d2:a0:dc:f9:
42:dd:1d:c1:07:7f:68:97:fe:03:8a:18:62:aa:28:8e:40:58:
3e:fc:75:b4:a6:e8:be:6c:c2:fe:f1:f6:a3:ef:31:17:88:40:
c5:d5:5b:ee:95:6e:53:d5:fa:86:91:2f:63:af:72:d0:00:27:
ea:9c:91:88:77:06:dc:22:60:82:0a:8d:a2:b3:11:9f:a2:39:
8b:d5:f2:ff:27:ba:c9:36:0f:42:64:94:8a:d2:95:66:ce:71:
be:a9:90:e3:73:f3:06:33:a0:77:1e:d6:31:4a:f4:15:50:7e:
cb:6e:b3:10:db:3f:0c:77:c4:b4:e3:f7:da:33:47:5a:46:30:
8e:a7:b9:18:5f:f8:2a:b8:10:a2:1f:53:17:fe:4e:d5:16:58:
94:8e:b9:1b:21:bd:f1:d1:62:3a:fc:23:e2:64:24:e5:92:d8:
45:be:a8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyZnGnIgYEFobf33FmqqSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0
NjExYWQwHhcNMjUwNDI2MTQwMDM4WhcNMjUwNDI3MTQwMDM4WjAzMTEwLwYDVQQD
EygxNWU0ZTBlYThlYzQzMjdmYjY3MzE3ZGFkNjU0ZDkzNzI2OTViYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q9XJY21Zufe2gaKmszBrpITOEIk
fJuIYkguxu1wzZ5d8LMe4NKnAnil6Cx+nuTmtTMOVMlrCvOEpQZWpFGD+mZzFmIR
BFTf3zvd3SSfRulOd8tcx9t82qjkpgPyhaIPvOO93yq1L67172CmnvXIBnNFdoHi
57MG/hhJ7ATJu85Wp92zfHoXgM11y5E7h2fOewYXOR3iH4c1mRNz3do3ZLcXQ17t
BUJdqi6DMgNp+ri7HuLKAVj2NW6WtXwc284B1dENdoVifOMYbUg4dpfgBcpIoIY8
IB5pO7HLXC0Fkygt6Xmue2h/YX8TBUAZs6WxY5UsAyfuJHAP4YA5hPnYnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXk4OqOxDJ/tnMX2tZU2TcmlbrHMB8GA1UdIwQY
MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct
YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj
LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyf8yiWe
Ev5zy3iYT0KZkYMhCeO6vjK26kAjR2XGk8I/3Jxpp486LP1TQ2cLbhWEv9AKrwGS
IdQF4ChxiIYmoJ1QVXs8t1yVr1BwvSc7giNxEPIO4yrSoNz5Qt0dwQd/aJf+A4oY
YqoojkBYPvx1tKbovmzC/vH2o+8xF4hAxdVb7pVuU9X6hpEvY69y0AAn6pyRiHcG
3CJgggqNorMRn6I5i9Xy/ye6yTYPQmSUitKVZs5xvqmQ43PzBjOgdx7WMUr0FVB+
y26zENs/DHfEtOP32jNHWkYwjqe5GF/4KrgQoh9TF/5O1RZYlI65GyG98dFiOvwj
4mQk5ZLYRb6o1w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:51 2025 by rpki-client