Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: kurOtkRkIUs6j4BfTfrMsjzXsXj+YDEMapY4EwzJYSA=
Subject key identifier: 86:14:B2:79:D9:53:AE:12:B1:FA:3B:42:EC:0F:69:89:CE:DC:AB:AB
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 01969D87810FC03E3BA590470ECB4BD4A3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 0EA1
Signing time: Sun 04 May 2025 23:00:25 +0000
Manifest this update: Sun 04 May 2025 23:00:25 +0000
Manifest next update: Mon 05 May 2025 23:00:25 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: yaO+eP3qnCtVPJ9rMYiYE/TD4eW6WYDa1Y1wCgPyCAI=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:81:0f:c0:3e:3b:a5:90:47:0e:cb:4b:d4:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: May 4 23:00:25 2025 GMT
Not After : May 5 23:00:25 2025 GMT
Subject: CN=8614b279d953ae12b1fa3b42ec0f6989cedcabab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:bc:33:d1:5d:c5:aa:50:75:35:35:0d:ad:
88:30:74:11:fb:14:9a:0f:4c:aa:42:dc:56:81:0f:
98:11:f9:a9:75:da:57:bf:4a:1b:74:50:f1:21:7c:
f5:f4:e2:8c:a2:c5:40:db:e3:08:77:c8:89:41:25:
7f:5f:9e:56:39:ef:ae:42:2d:de:fb:b5:05:26:28:
02:85:e1:f8:07:fa:12:e6:73:04:03:0f:27:38:a0:
de:8e:dc:6b:18:3d:d8:22:65:15:32:a9:13:af:15:
ae:32:b0:c4:4e:3f:46:c2:5f:40:35:dc:f3:7a:64:
7d:11:3e:fc:3d:75:56:5f:82:06:cf:98:2f:21:5a:
10:ef:08:33:33:19:06:7b:fc:05:21:de:f3:64:4b:
62:82:b5:c7:ea:1e:00:3c:46:37:c5:5a:4f:7a:fd:
7e:e2:fb:5e:e5:d8:1d:e0:f9:54:4e:4f:32:e3:bd:
e9:a7:ab:bb:47:7b:90:6d:9a:59:c4:63:9c:54:fb:
85:d5:5e:d8:75:84:a1:d0:d1:f8:d4:2a:ef:57:b3:
a7:86:d9:97:b3:da:7f:4f:8e:07:a1:5c:3e:86:6a:
26:4e:76:99:69:c5:75:fd:04:0a:b9:07:f5:8d:4f:
ea:ef:c8:b2:6a:f9:6c:4e:2f:75:21:25:d6:75:a7:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:14:B2:79:D9:53:AE:12:B1:FA:3B:42:EC:0F:69:89:CE:DC:AB:AB
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:37:f1:5d:94:2d:a7:cc:93:90:f1:66:13:51:7f:5b:b2:3b:
90:ce:e6:ba:77:d9:1b:fa:84:79:1d:a2:7f:4c:82:ee:db:9b:
6f:de:77:3a:59:1c:23:54:e6:26:e5:db:0c:09:0a:6f:f4:6e:
6c:e1:7f:12:cf:81:aa:d5:f1:91:ae:3e:86:51:c6:cb:df:e8:
69:54:04:b5:7f:17:12:ee:10:d1:2a:91:0e:ff:63:6f:9a:c8:
93:51:cd:e3:7a:2f:ba:18:63:2d:d3:96:bb:78:0a:50:3c:78:
e2:f5:66:ea:5d:69:ab:9f:12:54:07:e3:95:1f:df:e4:e0:50:
0a:82:17:10:86:6c:96:7f:7d:84:ac:15:d4:59:9a:1c:1e:ac:
67:f1:57:7e:69:5c:32:38:bd:e8:a1:0d:fd:d1:7b:01:80:89:
a5:10:ea:2f:83:ec:9f:67:85:36:40:59:1a:da:15:40:92:1e:
eb:89:a1:87:8a:b3:52:a2:c4:d4:b5:66:6d:b2:59:c0:a8:6f:
57:fa:05:10:35:04:95:62:49:8f:bf:cd:24:c4:3d:e0:87:7e:
1f:99:2f:53:80:bd:fa:78:69:96:cf:eb:f7:ff:51:38:b2:e8:
a5:ce:49:db:62:1d:87:de:02:d6:a4:3e:1a:38:c3:ba:ec:4f:
cf:a2:6a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh4EPwD47pZBHDstL1KPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDAzN2Q0ZWUzZTVkMjcwNjVhZDgwMzU2NTgyYTJmZGMy
YjQ4OGQwHhcNMjUwNTA0MjMwMDI1WhcNMjUwNTA1MjMwMDI1WjAzMTEwLwYDVQQD
Eyg4NjE0YjI3OWQ5NTNhZTEyYjFmYTNiNDJlYzBmNjk4OWNlZGNhYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufK8M9FdxapQdTU1Da2IMHQR+xSa
D0yqQtxWgQ+YEfmpddpXv0obdFDxIXz19OKMosVA2+MId8iJQSV/X55WOe+uQi3e
+7UFJigCheH4B/oS5nMEAw8nOKDejtxrGD3YImUVMqkTrxWuMrDETj9Gwl9ANdzz
emR9ET78PXVWX4IGz5gvIVoQ7wgzMxkGe/wFId7zZEtigrXH6h4APEY3xVpPev1+
4vte5dgd4PlUTk8y473pp6u7R3uQbZpZxGOcVPuF1V7YdYSh0NH41CrvV7OnhtmX
s9p/T44HoVw+hmomTnaZacV1/QQKuQf1jU/q78iyavlsTi91ISXWdaeqDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYUsnnZU64Ssfo7QuwPaYnO3KurMB8GA1UdIwQY
MBaAFE7QN9TuPl0nBlrYA1ZYKi/cK0iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQt
MzUwZTY4MWI5OWQxLzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQtMzUwZTY4MWI5OWQx
LzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDfxXZQt
p8yTkPFmE1F/W7I7kM7munfZG/qEeR2if0yC7tubb953OlkcI1TmJuXbDAkKb/Ru
bOF/Es+BqtXxka4+hlHGy9/oaVQEtX8XEu4Q0SqRDv9jb5rIk1HN43ovuhhjLdOW
u3gKUDx44vVm6l1pq58SVAfjlR/f5OBQCoIXEIZsln99hKwV1FmaHB6sZ/FXfmlc
Mji96KEN/dF7AYCJpRDqL4Psn2eFNkBZGtoVQJIe64mhh4qzUqLE1LVmbbJZwKhv
V/oFEDUElWJJj7/NJMQ94Id+H5kvU4C9+nhpls/r9/9ROLLopc5J22Idh94C1qQ+
GjjDuuxPz6JqDA==
-----END CERTIFICATE-----
Generated at Mon May 5 08:12:38 2025 by rpki-client