Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: ihbutPajpRI+KGRHs9OEiPhNCLXzKDHRg97tSkt1COk=
Subject key identifier: E8:0A:EC:B2:F7:9D:CF:17:4D:B8:DD:22:BE:C3:EC:6D:A6:8E:66:77
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 01967AC45E8E707306C43C1C2AAB65E5FD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 141F
Signing time: Mon 28 Apr 2025 05:00:11 +0000
Manifest this update: Mon 28 Apr 2025 05:00:11 +0000
Manifest next update: Tue 29 Apr 2025 05:00:11 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: Mpdd1MhKXww1WCfRanaLvkvOXa9Q4Td1r5Jdq6XSYok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:5e:8e:70:73:06:c4:3c:1c:2a:ab:65:e5:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Apr 28 05:00:11 2025 GMT
Not After : Apr 29 05:00:11 2025 GMT
Subject: CN=e80aecb2f79dcf174db8dd22bec3ec6da68e6677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:16:e6:f2:d1:5e:cf:0b:f9:89:e8:ef:93:
64:77:c3:e1:07:85:99:fd:a2:55:cd:71:cb:0b:2c:
78:b7:e0:2c:1d:7b:9c:0e:49:4e:fc:6f:25:00:fd:
aa:70:85:75:ee:2a:7f:fa:da:ac:b5:ac:02:12:39:
72:15:4c:e4:37:6d:db:27:1d:6e:55:58:c6:0b:3a:
bf:a8:c3:4c:f2:fa:2e:e9:77:61:a8:1b:88:45:c0:
8d:79:96:22:47:bc:5a:e2:8b:ff:26:e3:8b:e1:aa:
33:f8:15:87:25:1f:05:d7:7a:09:bb:f4:ad:a0:e8:
39:40:75:f2:f0:4b:ca:a6:10:97:e0:85:95:81:75:
8f:dc:09:48:1c:c4:a3:22:07:1c:b4:6a:59:db:3e:
81:2e:74:fe:d2:f0:6f:b3:f2:72:0b:34:d6:e3:22:
56:43:ff:39:76:cc:9d:c3:b5:2e:97:77:1c:66:ee:
77:20:3d:4e:18:11:13:b7:43:1d:46:fb:62:a3:46:
37:78:93:75:ff:ff:dc:6b:ac:02:56:86:4b:39:fc:
72:b6:3d:13:ac:15:d3:10:0f:56:cc:3b:9c:41:3e:
96:62:1f:d5:e6:5e:08:07:a7:31:35:39:be:92:c0:
f3:77:e1:a1:c2:4e:fb:66:ef:5d:f7:60:9b:16:d7:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0A:EC:B2:F7:9D:CF:17:4D:B8:DD:22:BE:C3:EC:6D:A6:8E:66:77
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:53:9b:15:51:b9:6c:f9:d6:60:a6:19:bb:ce:d4:13:a0:c0:
10:54:e1:08:c0:f0:2f:ca:6e:16:5e:47:cc:56:b9:98:e4:54:
ae:cd:97:6e:45:2f:62:30:9c:d2:a5:cb:6c:ce:37:6b:f0:db:
98:40:6a:46:84:8d:73:db:24:5d:a8:e2:66:4f:bf:32:1d:0a:
4b:30:a6:6b:50:3f:78:8a:ca:c2:48:de:04:34:74:e9:f7:39:
c4:fe:2f:b5:af:b3:3f:09:90:6f:24:64:c3:5a:ab:fb:b6:06:
14:a7:33:12:dd:14:49:d7:2e:cb:a5:1f:7a:73:8c:1e:a0:a2:
53:1d:34:d5:79:8d:96:e9:cd:de:a8:ac:db:07:43:03:b8:0a:
56:6b:d6:ed:84:4f:85:b2:64:1a:3b:2a:ce:c1:16:e6:f9:12:
68:bd:c1:de:36:7d:27:69:ab:9d:15:bd:75:e4:ac:1c:c9:89:
d3:c2:49:a2:0d:07:94:6d:cd:c9:f2:7a:64:4b:88:66:3c:fa:
9b:af:44:20:ed:50:f2:19:ff:58:17:d2:8e:33:1c:21:48:13:
ed:67:5a:e9:5a:a8:ef:b5:46:41:ab:be:c9:b8:d5:ee:67:03:
6f:44:38:f7:ed:06:35:ec:aa:e4:1c:1b:61:24:fe:98:98:22:
5c:db:96:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xF6OcHMGxDwcKqtl5f0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA2YmNlM2Y3ZTFhZTNhN2UyY2I5YWQyMDVjNGNkZmIw
MmRkYjUwHhcNMjUwNDI4MDUwMDExWhcNMjUwNDI5MDUwMDExWjAzMTEwLwYDVQQD
EyhlODBhZWNiMmY3OWRjZjE3NGRiOGRkMjJiZWMzZWM2ZGE2OGU2Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FMW5vLRXs8L+Yno75Nkd8PhB4WZ
/aJVzXHLCyx4t+AsHXucDklO/G8lAP2qcIV17ip/+tqstawCEjlyFUzkN23bJx1u
VVjGCzq/qMNM8vou6XdhqBuIRcCNeZYiR7xa4ov/JuOL4aoz+BWHJR8F13oJu/St
oOg5QHXy8EvKphCX4IWVgXWP3AlIHMSjIgcctGpZ2z6BLnT+0vBvs/JyCzTW4yJW
Q/85dsydw7Uul3ccZu53ID1OGBETt0MdRvtio0Y3eJN1///ca6wCVoZLOfxytj0T
rBXTEA9WzDucQT6WYh/V5l4IB6cxNTm+ksDzd+Ghwk77Zu9d92CbFtcmZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgK7LL3nc8XTbjdIr7D7G2mjmZ3MB8GA1UdIwQY
MBaAFLRQa84/fhrjp+LLmtIFxM37At21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMt
ZjhhMzc4MGMzNDhlLzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMtZjhhMzc4MGMzNDhl
LzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0VObFVG5
bPnWYKYZu87UE6DAEFThCMDwL8puFl5HzFa5mORUrs2XbkUvYjCc0qXLbM43a/Db
mEBqRoSNc9skXajiZk+/Mh0KSzCma1A/eIrKwkjeBDR06fc5xP4vta+zPwmQbyRk
w1qr+7YGFKczEt0USdcuy6UfenOMHqCiUx001XmNlunN3qis2wdDA7gKVmvW7YRP
hbJkGjsqzsEW5vkSaL3B3jZ9J2mrnRW9deSsHMmJ08JJog0HlG3NyfJ6ZEuIZjz6
m69EIO1Q8hn/WBfSjjMcIUgT7Wda6Vqo77VGQau+ybjV7mcDb0Q49+0GNeyq5Bwb
YST+mJgiXNuWgw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:57:20 2025 by rpki-client