Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: H4MqMzj+Xj63fF62NuUs6/MWGww1YCLbc7+rm8h3oaM=
Subject key identifier: 48:B5:72:F9:83:03:3F:66:6C:A1:97:2D:18:A0:BE:84:DD:B4:6D:BA
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 0196722F505D9DA7C467F89A0385EDCA9699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 12DB
Signing time: Sat 26 Apr 2025 13:00:25 +0000
Manifest this update: Sat 26 Apr 2025 13:00:25 +0000
Manifest next update: Sun 27 Apr 2025 13:00:25 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: OUtNGhczlxrWtWLtJYXW72Myi/dXsSQPrW1NRZbOIc4=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:50:5d:9d:a7:c4:67:f8:9a:03:85:ed:ca:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Apr 26 13:00:25 2025 GMT
Not After : Apr 27 13:00:25 2025 GMT
Subject: CN=48b572f983033f666ca1972d18a0be84ddb46dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:be:9d:2e:ac:2b:f6:ca:77:0a:4b:a5:3a:
ad:b6:21:df:f1:23:e1:df:5d:59:99:ce:67:f6:67:
62:0d:f2:4e:a8:4c:0a:e8:bf:ba:83:3f:cc:5e:b6:
b8:44:8d:5e:d8:24:91:4d:37:d7:77:10:99:c3:39:
51:b6:ef:bc:b6:d7:08:78:51:13:4d:0c:ca:6c:d5:
22:2b:25:b6:34:0b:94:e7:4f:05:50:38:2e:1b:af:
86:31:8b:fb:f6:36:b6:a3:19:5f:2e:f9:70:72:10:
c4:74:fe:a0:9a:cf:95:1d:cb:05:39:9e:77:67:53:
cc:59:a8:af:c1:62:85:01:95:e7:d8:78:ca:a8:64:
54:53:3e:83:4a:8f:33:0e:7f:71:65:5c:0c:74:6c:
0d:61:41:72:40:ce:50:34:86:e7:91:6b:ed:b6:b0:
ed:e9:b9:9a:90:56:36:8b:0a:d1:23:e4:7b:bb:0a:
08:36:46:7e:9b:e5:54:f9:53:a6:d4:19:63:bf:f6:
a9:a4:04:d5:5c:b2:d6:29:2c:8c:1a:ab:6b:a1:a0:
22:a5:ad:1f:68:1b:59:2d:59:51:9c:54:dc:4a:ed:
f1:bb:fa:fb:3f:4c:52:8e:fd:48:c4:8f:5c:71:8d:
4f:c3:97:ad:3e:5c:a6:de:ea:01:a3:b9:d1:af:04:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:72:F9:83:03:3F:66:6C:A1:97:2D:18:A0:BE:84:DD:B4:6D:BA
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6f:fa:d6:39:c2:b1:c4:79:15:5a:ad:ef:6b:00:db:6d:27:
89:eb:df:ae:d5:89:5c:f4:2d:86:3d:87:3e:9f:4f:c6:8a:71:
e0:83:d1:ec:d2:15:2d:5c:cd:16:cf:2f:45:a9:7b:91:7f:5e:
e0:e1:ec:8d:09:2b:28:8d:9a:11:34:d9:c5:3e:b4:d9:79:4d:
97:c6:1e:a9:f3:af:29:a6:ec:bf:b1:f5:44:e2:c2:45:8e:18:
80:47:2d:3b:d6:d9:d7:19:41:bd:84:b4:55:49:cc:ba:4e:aa:
2b:98:34:ef:93:8e:ee:c3:9d:bf:63:13:a0:bf:b7:30:52:5f:
7a:59:2e:10:43:fc:08:8e:f9:70:2e:6f:f0:b7:0e:23:88:01:
25:23:46:7d:4f:5e:a5:89:8a:7f:6d:bb:b9:15:ee:c4:a0:bf:
c6:8b:79:84:9b:df:4e:a3:60:ad:5b:0f:57:7b:fc:4b:a9:e4:
cf:5c:eb:61:3d:70:01:3a:a2:3f:b4:83:82:27:12:d9:65:d3:
5c:c8:64:fd:02:14:0d:b9:b6:5e:b2:76:3d:2b:87:0c:ca:0d:
7d:ac:20:0b:fb:ae:cb:a4:c5:a5:af:b7:65:77:0a:35:51:9b:
a0:23:a2:61:3d:d2:0d:8e:87:8e:9c:3b:2a:7a:4a:58:f2:37:
5e:d8:1f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyL1BdnafEZ/iaA4XtypaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz
Yzc1M2MwHhcNMjUwNDI2MTMwMDI1WhcNMjUwNDI3MTMwMDI1WjAzMTEwLwYDVQQD
Eyg0OGI1NzJmOTgzMDMzZjY2NmNhMTk3MmQxOGEwYmU4NGRkYjQ2ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWy+nS6sK/bKdwpLpTqttiHf8SPh
311Zmc5n9mdiDfJOqEwK6L+6gz/MXra4RI1e2CSRTTfXdxCZwzlRtu+8ttcIeFET
TQzKbNUiKyW2NAuU508FUDguG6+GMYv79ja2oxlfLvlwchDEdP6gms+VHcsFOZ53
Z1PMWaivwWKFAZXn2HjKqGRUUz6DSo8zDn9xZVwMdGwNYUFyQM5QNIbnkWvttrDt
6bmakFY2iwrRI+R7uwoINkZ+m+VU+VOm1Bljv/appATVXLLWKSyMGqtroaAipa0f
aBtZLVlRnFTcSu3xu/r7P0xSjv1IxI9ccY1Pw5etPlym3uoBo7nRrwTCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi1cvmDAz9mbKGXLRigvoTdtG26MB8GA1UdIwQY
MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt
YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli
LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxG/61jnC
scR5FVqt72sA220nievfrtWJXPQthj2HPp9Pxopx4IPR7NIVLVzNFs8vRal7kX9e
4OHsjQkrKI2aETTZxT602XlNl8YeqfOvKabsv7H1ROLCRY4YgEctO9bZ1xlBvYS0
VUnMuk6qK5g075OO7sOdv2MToL+3MFJfelkuEEP8CI75cC5v8LcOI4gBJSNGfU9e
pYmKf227uRXuxKC/xot5hJvfTqNgrVsPV3v8S6nkz1zrYT1wATqiP7SDgicS2WXT
XMhk/QIUDbm2XrJ2PSuHDMoNfawgC/uuy6TFpa+3ZXcKNVGboCOiYT3SDY6Hjpw7
KnpKWPI3XtgfiA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:43 2025 by rpki-client