Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: r8AozloO/ROXHgic775if+R0E+b5wKT1W0Omb9Wet58=
Subject key identifier: 7B:A9:B1:8C:16:DB:33:FD:5E:AC:4C:34:CD:2F:29:9B:DE:50:10:B0
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 019676B0B3D30CFABF6D1AD8BF0E8B4126BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 14A0
Signing time: Sun 27 Apr 2025 10:00:13 +0000
Manifest this update: Sun 27 Apr 2025 10:00:13 +0000
Manifest next update: Mon 28 Apr 2025 10:00:13 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: qmy8TBhxxAB2MLke1QrhbgwHd7abqJJJD4K1xrbrNwQ=)
2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b3:d3:0c:fa:bf:6d:1a:d8:bf:0e:8b:41:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Apr 27 10:00:13 2025 GMT
Not After : Apr 28 10:00:13 2025 GMT
Subject: CN=7ba9b18c16db33fd5eac4c34cd2f299bde5010b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:cf:27:c4:0c:2a:dc:2a:34:5a:54:35:8c:
46:34:50:ab:b4:05:78:6b:4b:3d:df:df:b2:99:c5:
5f:c9:3b:04:f9:49:5f:73:78:28:52:1c:e6:d7:18:
7f:ba:2c:59:21:61:51:78:08:ee:37:54:e9:bb:71:
c7:eb:0b:37:da:4b:7c:95:b5:eb:cd:05:7f:36:9e:
bc:30:64:e8:80:9e:74:10:a4:a4:ed:6e:76:6f:33:
5e:92:c7:16:2c:33:32:08:c2:2c:e3:06:2d:d8:32:
bc:4b:a5:cd:12:eb:1a:20:6a:1a:f6:b7:f2:11:f4:
34:cd:1e:84:1e:88:ec:4f:67:54:b8:43:0e:6f:d5:
1b:d5:c1:7b:cd:14:90:b0:7a:e8:85:7c:40:bd:b8:
d1:2f:50:c5:5b:3d:e4:a8:80:2d:3e:d6:e8:a3:4a:
6c:69:e8:34:d9:2b:a2:66:cf:1d:52:5a:6b:2e:33:
0d:73:07:0d:8d:46:99:eb:1f:27:53:f8:b0:1a:a6:
d2:9f:2c:b1:d7:fd:90:56:64:92:cf:ba:48:65:b5:
66:a6:e1:9b:54:fe:94:b0:be:d5:70:98:34:1e:30:
c9:e2:0c:bc:57:be:00:7f:ec:74:bd:ec:ba:ed:79:
7d:4a:8a:86:9f:59:19:f6:08:5f:60:4b:61:09:36:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:B1:8C:16:DB:33:FD:5E:AC:4C:34:CD:2F:29:9B:DE:50:10:B0
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2f:7c:7d:be:40:2a:c6:12:2a:b4:f4:37:cd:3d:ca:df:86:
6c:a3:98:41:98:bb:39:c5:21:67:01:b3:3f:71:d0:92:3a:9a:
99:23:ef:4d:cb:4e:d1:3d:2a:f4:15:9c:09:72:bd:4a:92:47:
d3:07:83:3a:b1:2d:a7:70:07:1f:81:5a:1a:98:78:8f:a7:46:
bf:b8:a0:c4:be:59:43:39:13:83:05:a7:ba:21:7f:0a:ab:f4:
0a:d6:0c:62:3e:bb:f8:4f:6a:11:3b:db:cd:7f:64:7b:a5:2b:
db:54:55:a9:6b:aa:7b:79:2c:05:4f:76:4e:24:0e:e2:e9:03:
d6:41:ef:f4:ef:f4:ff:e0:dd:81:e4:f9:1e:46:99:ce:ea:2e:
0e:11:da:bb:6b:f2:a0:5a:f0:d0:54:94:d2:4e:e9:36:5d:9f:
08:ff:1f:5e:b3:8a:58:eb:cb:0c:ec:78:9c:35:70:1c:79:b0:
83:2f:16:45:f3:6c:dd:a0:f2:bc:9a:a9:3e:17:81:40:16:99:
1d:a2:7d:d2:52:75:6d:c5:08:57:f4:02:97:79:b5:6b:1e:79:
6b:ba:1c:33:f9:f5:26:3f:e9:e8:cd:20:37:5a:8c:ef:fb:18:
9a:fa:71:dc:3e:07:92:2f:ff:c0:b4:fe:c4:9e:97:89:80:56:
be:43:a2:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sLPTDPq/bRrYvw6LQSa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjg3ZDg2MjgwODIyNWI0NTlmYTM5OWU2NWY4YTA2OTQ2
OWFiYTMwHhcNMjUwNDI3MTAwMDEzWhcNMjUwNDI4MTAwMDEzWjAzMTEwLwYDVQQD
Eyg3YmE5YjE4YzE2ZGIzM2ZkNWVhYzRjMzRjZDJmMjk5YmRlNTAxMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutTPJ8QMKtwqNFpUNYxGNFCrtAV4
a0s939+ymcVfyTsE+Ulfc3goUhzm1xh/uixZIWFReAjuN1Tpu3HH6ws32kt8lbXr
zQV/Np68MGTogJ50EKSk7W52bzNekscWLDMyCMIs4wYt2DK8S6XNEusaIGoa9rfy
EfQ0zR6EHojsT2dUuEMOb9Ub1cF7zRSQsHrohXxAvbjRL1DFWz3kqIAtPtboo0ps
aeg02SuiZs8dUlprLjMNcwcNjUaZ6x8nU/iwGqbSnyyx1/2QVmSSz7pIZbVmpuGb
VP6UsL7VcJg0HjDJ4gy8V74Af+x0vey67Xl9SoqGn1kZ9ghfYEthCTbrLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHupsYwW2zP9XqxMNM0vKZveUBCwMB8GA1UdIwQY
MBaAFE1ofYYoCCJbRZ+jmeZfigaUaaujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQt
NTg0N2IxNDY5MzI2LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQtNTg0N2IxNDY5MzI2
LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy98fb5A
KsYSKrT0N809yt+GbKOYQZi7OcUhZwGzP3HQkjqamSPvTctO0T0q9BWcCXK9SpJH
0weDOrEtp3AHH4FaGph4j6dGv7igxL5ZQzkTgwWnuiF/Cqv0CtYMYj67+E9qETvb
zX9ke6Ur21RVqWuqe3ksBU92TiQO4ukD1kHv9O/0/+DdgeT5HkaZzuouDhHau2vy
oFrw0FSU0k7pNl2fCP8fXrOKWOvLDOx4nDVwHHmwgy8WRfNs3aDyvJqpPheBQBaZ
HaJ90lJ1bcUIV/QCl3m1ax55a7ocM/n1Jj/p6M0gN1qM7/sYmvpx3D4Hki//wLT+
xJ6XiYBWvkOizQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:10:54 2025 by rpki-client