Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File: ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier: y8BgB9RRQzZ1+qAcnuy/IAcINfflQZYDzIarHc/odMs=
Subject key identifier: 92:FC:6F:8A:8E:2B:E8:59:8A:51:03:7B:99:9C:13:18:54:DE:87:09
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 01967F46448EB508902C42C6B1FEBD2C087A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number: 1529
Signing time: Tue 29 Apr 2025 02:00:33 +0000
Manifest this update: Tue 29 Apr 2025 02:00:33 +0000
Manifest next update: Wed 30 Apr 2025 02:00:33 +0000
Files and hashes: 1: 7MBZP4USFz5hPGotD8N5VTxiCh4.roa (hash: xrZIN20uzCUHnquaIR7JyCpdhy6O1fXdg0ZyfCtPx1A=)
2: _-vCy7ICzJgkXfJZ75qxspKlSv8.roa (hash: jMbO+xgYxKlWrIGWglTequYy9eTc9dUkDdUL8kvtI4s=)
3: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: iqu3Rvkl5a2HnlnpfgG8DbQca/v03+BpTXTGObqrGRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:44:8e:b5:08:90:2c:42:c6:b1:fe:bd:2c:08:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Apr 29 02:00:33 2025 GMT
Not After : Apr 30 02:00:33 2025 GMT
Subject: CN=92fc6f8a8e2be8598a51037b999c131854de8709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:9c:ac:04:8b:7f:25:69:7b:61:99:f0:eb:
b8:f0:eb:28:d4:c0:31:6d:a9:e3:0c:95:75:fb:e7:
c2:11:e6:4d:e4:b0:54:f9:70:b8:a3:07:11:b2:c5:
ab:42:8f:33:3e:35:dc:c1:8b:9a:75:01:80:62:15:
47:04:de:e4:0e:49:88:61:54:16:e3:e4:0e:e0:fc:
56:f7:a7:2d:3b:80:92:1d:11:1a:dc:cb:b4:27:cc:
b7:eb:c4:8c:b4:21:19:32:be:24:47:29:02:e5:d3:
66:3c:d0:5e:69:0b:09:8b:f3:28:28:d2:5a:90:2d:
3f:fb:a4:40:87:6b:56:22:59:ed:52:a7:77:b7:37:
a2:83:76:a8:60:c5:aa:98:21:0c:5f:9e:d3:bb:93:
d6:71:fb:8b:77:f6:49:9c:cd:2c:62:a1:a2:41:35:
7d:d6:b7:d0:99:b8:02:32:e6:da:d7:0d:b1:d0:ab:
2d:5c:54:d1:55:bf:36:33:1e:b2:40:0b:e5:b8:13:
d5:27:a5:3c:48:20:00:9d:af:c7:d4:72:30:f6:89:
41:02:fa:47:ce:8f:ca:42:8c:b3:5d:a5:5d:58:fd:
57:c8:cf:8f:f0:2a:e0:d5:d4:1c:f4:1f:0d:cf:ca:
5b:93:9f:f1:f4:be:7b:99:1f:2f:60:28:79:60:c2:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FC:6F:8A:8E:2B:E8:59:8A:51:03:7B:99:9C:13:18:54:DE:87:09
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:05:ed:08:e5:74:9f:3d:1b:86:3c:00:93:b3:14:ed:24:d2:
fb:de:ce:c4:e5:c1:c3:2f:53:6f:80:92:90:a0:c6:91:54:71:
28:49:10:59:c1:05:f1:b9:c6:86:7b:d9:5a:83:56:24:ee:ae:
d4:82:30:85:f5:c4:09:98:c7:71:ef:9f:ec:20:61:3d:18:f8:
57:14:fc:a2:e7:8d:95:52:2c:50:3d:7a:05:26:78:5a:6c:48:
4b:fe:b0:59:85:b5:ca:93:a5:83:a4:49:e7:98:41:c0:ce:a2:
0d:f8:87:4a:72:95:b0:5d:c9:1e:32:e6:da:f4:ec:f1:a1:51:
6a:d6:2f:74:4e:03:6d:8f:e7:4c:e3:fd:8b:82:24:1b:34:7e:
2d:11:d9:be:c3:9c:97:66:79:0c:08:0e:71:ea:d3:f0:23:49:
5f:6c:05:ac:7e:26:67:a5:c5:a3:eb:18:ec:45:11:df:74:54:
d7:d6:28:e1:a2:e1:b2:60:9e:36:e3:c0:15:ca:5c:c5:4f:68:
9e:b3:d2:00:31:91:f6:f9:30:88:9e:61:8d:c4:f9:ea:c8:ce:
98:fe:f7:3d:86:cb:3a:ad:04:a8:ca:ad:dd:7a:64:78:58:a6:
50:c2:0b:da:a6:43:cf:81:ea:e1:67:fe:0c:1c:3b:f2:18:7b:
0f:08:cf:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/RkSOtQiQLELGsf69LAh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZDE0MTE4ZGJkMjI3Mjk4ZGFhODBjN2FjYWIxMWVlYTZk
NjNlMjEwHhcNMjUwNDI5MDIwMDMzWhcNMjUwNDMwMDIwMDMzWjAzMTEwLwYDVQQD
Eyg5MmZjNmY4YThlMmJlODU5OGE1MTAzN2I5OTljMTMxODU0ZGU4NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhecrASLfyVpe2GZ8Ou48Oso1MAx
banjDJV1++fCEeZN5LBU+XC4owcRssWrQo8zPjXcwYuadQGAYhVHBN7kDkmIYVQW
4+QO4PxW96ctO4CSHREa3Mu0J8y368SMtCEZMr4kRykC5dNmPNBeaQsJi/MoKNJa
kC0/+6RAh2tWIlntUqd3tzeig3aoYMWqmCEMX57Tu5PWcfuLd/ZJnM0sYqGiQTV9
1rfQmbgCMuba1w2x0KstXFTRVb82Mx6yQAvluBPVJ6U8SCAAna/H1HIw9olBAvpH
zo/KQoyzXaVdWP1XyM+P8Crg1dQc9B8Nz8pbk5/x9L57mR8vYCh5YMLPjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL8b4qOK+hZilEDe5mcExhU3ocJMB8GA1UdIwQY
MBaAFLbRQRjb0icpjaqAx6yrEe6m1j4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZDUxZDctNjRmZC00YzczLTllOGMt
MGUzN2UxMWQwZWMzLzEvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZDUxZDctNjRmZC00YzczLTllOGMtMGUzN2UxMWQwZWMz
LzEvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwXtCOV0
nz0bhjwAk7MU7STS+97OxOXBwy9Tb4CSkKDGkVRxKEkQWcEF8bnGhnvZWoNWJO6u
1IIwhfXECZjHce+f7CBhPRj4VxT8oueNlVIsUD16BSZ4WmxIS/6wWYW1ypOlg6RJ
55hBwM6iDfiHSnKVsF3JHjLm2vTs8aFRatYvdE4DbY/nTOP9i4IkGzR+LRHZvsOc
l2Z5DAgOcerT8CNJX2wFrH4mZ6XFo+sY7EUR33RU19Yo4aLhsmCeNuPAFcpcxU9o
nrPSADGR9vkwiJ5hjcT56sjOmP73PYbLOq0EqMqt3XpkeFimUMIL2qZDz4Hq4Wf+
DBw78hh7DwjPWQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:09 2025 by rpki-client