Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
File: t4UKnl5747TStkImX4JbhQwHI2Y.mft (raw, json)
Hash identifier: GpjO2w4WITwBrmuZO3J80NsGKcL485ALvkD04YNOauM=
Subject key identifier: F3:66:E5:A7:9B:0F:58:C4:A4:9C:B1:8F:02:CB:01:92:4C:63:2E:DD
Authority key identifier: B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
Certificate issuer: /CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Certificate serial: 0196930443F18BDCE378C806E5F97E253E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
Manifest number: 03B2
Signing time: Fri 02 May 2025 22:00:52 +0000
Manifest this update: Fri 02 May 2025 22:00:52 +0000
Manifest next update: Sat 03 May 2025 22:00:52 +0000
Files and hashes: 1: kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa (hash: LC5M9URWylDvxfMKsYWhEBj1id9NYxvTcyivO+BgMe0=)
2: t4UKnl5747TStkImX4JbhQwHI2Y.crl (hash: w4iJLgSftWAhV06R403ZVUayxPpn3goGiVTHPT2ssHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:04:43:f1:8b:dc:e3:78:c8:06:e5:f9:7e:25:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Validity
Not Before: May 2 22:00:52 2025 GMT
Not After : May 3 22:00:52 2025 GMT
Subject: CN=f366e5a79b0f58c4a49cb18f02cb01924c632edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:2f:ab:95:2a:77:66:f7:26:2b:e7:f1:cb:
db:33:9a:0a:3a:18:ad:0e:7a:f0:41:c4:8d:02:fa:
e4:a5:85:c1:51:ee:07:3c:a5:03:c8:ee:a6:a5:78:
49:e5:3a:6a:58:88:46:26:de:9a:0b:54:6d:da:27:
54:9f:80:a0:6f:d5:ab:ce:3d:97:58:a5:9c:93:d0:
d3:90:b6:c4:7f:2d:1b:ec:9c:94:4f:f3:37:ab:14:
8b:6c:20:74:6d:df:bb:bc:ae:77:59:3f:ea:2e:d9:
a9:6c:fd:ac:a9:2c:1a:16:82:ed:96:7d:bc:61:ce:
83:28:69:c3:94:5c:cc:b5:9a:17:39:e3:5d:3b:0d:
ac:50:ac:05:2b:9e:86:e1:05:34:60:87:f5:4d:18:
1d:77:a2:82:3e:8e:6b:53:5c:fd:44:01:51:21:da:
df:5b:5a:ec:55:bd:e6:e1:6a:f6:e9:fe:c9:8c:8a:
73:26:73:0a:15:bd:d7:28:a5:a6:02:5d:64:61:df:
7a:21:b4:78:b6:22:55:bb:7a:cf:74:53:fe:1c:ed:
99:34:aa:cf:cd:b3:fc:f9:79:f3:57:86:bf:ad:e0:
43:f3:32:6b:65:e7:90:25:55:5c:7e:0a:04:33:94:
ba:3a:e3:bd:bc:21:ff:95:f7:33:41:ab:e8:73:f5:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:E5:A7:9B:0F:58:C4:A4:9C:B1:8F:02:CB:01:92:4C:63:2E:DD
X509v3 Authority Key Identifier:
keyid:B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:e1:3b:d6:43:1e:29:47:c4:d0:df:b6:3a:c9:02:3c:d8:
e1:2b:69:ae:a6:85:a6:88:51:03:b8:54:73:14:68:6c:f4:44:
b5:0f:55:e4:11:17:51:aa:95:97:75:97:25:9a:5c:89:1d:b3:
16:5c:d1:5c:a5:9e:18:41:c2:ce:7f:a7:74:df:3a:0e:a6:8d:
53:8c:1f:78:df:49:3e:ac:89:e1:71:b2:cc:bc:3f:71:d4:d7:
ff:3c:06:81:30:bd:e0:9f:1b:96:18:67:a9:0f:64:23:0b:58:
99:63:01:1b:d3:50:cf:c9:bc:41:fd:90:c0:5f:fb:e3:3d:92:
c3:72:07:0d:74:35:5b:db:62:7b:1d:6b:e7:08:56:3e:ed:b0:
ae:9a:c8:a1:13:0f:9e:7b:97:71:dd:f8:fa:03:ba:02:a3:d4:
e8:9b:55:75:d7:21:83:20:1f:36:f9:ef:4d:f7:53:f4:cc:60:
6b:93:7c:60:92:9b:6e:83:13:f2:d1:53:01:c7:4f:76:4f:0b:
26:22:b0:13:c6:96:be:3b:1d:aa:5c:f0:79:8d:fc:33:24:e4:
bf:f6:b6:e6:a3:68:f8:e2:83:97:36:49:f8:f9:5c:d6:8a:7d:
46:f9:b1:15:88:f4:6e:2c:c7:1e:41:05:ab:31:e9:86:54:8b:
56:cd:e5:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTBEPxi9zjeMgG5fl+JT4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODUwYTllNWU3YmUzYjRkMmI2NDIyNjVmODI1Yjg1MGMw
NzIzNjYwHhcNMjUwNTAyMjIwMDUyWhcNMjUwNTAzMjIwMDUyWjAzMTEwLwYDVQQD
EyhmMzY2ZTVhNzliMGY1OGM0YTQ5Y2IxOGYwMmNiMDE5MjRjNjMyZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmYvq5Uqd2b3Jivn8cvbM5oKOhit
DnrwQcSNAvrkpYXBUe4HPKUDyO6mpXhJ5TpqWIhGJt6aC1Rt2idUn4Cgb9Wrzj2X
WKWck9DTkLbEfy0b7JyUT/M3qxSLbCB0bd+7vK53WT/qLtmpbP2sqSwaFoLtln28
Yc6DKGnDlFzMtZoXOeNdOw2sUKwFK56G4QU0YIf1TRgdd6KCPo5rU1z9RAFRIdrf
W1rsVb3m4Wr26f7JjIpzJnMKFb3XKKWmAl1kYd96IbR4tiJVu3rPdFP+HO2ZNKrP
zbP8+XnzV4a/reBD8zJrZeeQJVVcfgoEM5S6OuO9vCH/lfczQavoc/UC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNm5aebD1jEpJyxjwLLAZJMYy7dMB8GA1UdIwQY
MBaAFLeFCp5ee+O00rZCJl+CW4UMByNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQt
OGEwMTAyYWU3YTlmLzEvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQtOGEwMTAyYWU3YTlm
LzEvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvHhO9ZD
HilHxNDftjrJAjzY4StprqaFpohRA7hUcxRobPREtQ9V5BEXUaqVl3WXJZpciR2z
FlzRXKWeGEHCzn+ndN86DqaNU4wfeN9JPqyJ4XGyzLw/cdTX/zwGgTC94J8blhhn
qQ9kIwtYmWMBG9NQz8m8Qf2QwF/74z2Sw3IHDXQ1W9tiex1r5whWPu2wrprIoRMP
nnuXcd34+gO6AqPU6JtVddchgyAfNvnvTfdT9Mxga5N8YJKbboMT8tFTAcdPdk8L
JiKwE8aWvjsdqlzweY38MyTkv/a25qNo+OKDlzZJ+Plc1op9RvmxFYj0bizHHkEF
qzHphlSLVs3lag==
-----END CERTIFICATE-----
Generated at Sat May 3 01:08:07 2025 by rpki-client