Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: 0+7nmoRJ14ERdfHGpcG8yWJaGv4fEV0HNy/OI3Bxt/s=
Subject key identifier: 4A:92:44:37:03:68:50:FE:01:E0:5B:29:4D:D0:1C:3E:08:15:D9:66
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0196846CB76EC13615753A44AA0F3D62C55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 151E
Signing time: Wed 30 Apr 2025 02:00:39 +0000
Manifest this update: Wed 30 Apr 2025 02:00:39 +0000
Manifest next update: Thu 01 May 2025 02:00:39 +0000
Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
2: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
3: 4mGseaRg6egaG3HIgmeDQNxN1fE.roa (hash: FljGcaDpbXdbXqPdJOkNLnFoXkPv5nApI4xvVtBOm2M=)
4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
5: KDM4rXjbcsS1DLEhMM4kEgH58RE.roa (hash: nJE4dlKDHUmjXp0Xdi00ikIZCMR+yvC+rxJD7lUuOrk=)
6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: 5X6JP4sqQlCFGMBcFIaOBLv7CB2/jAt36X2vdrJCvgA=)
7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
8: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (hash: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:b7:6e:c1:36:15:75:3a:44:aa:0f:3d:62:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Apr 30 02:00:39 2025 GMT
Not After : May 1 02:00:39 2025 GMT
Subject: CN=4a924437036850fe01e05b294dd01c3e0815d966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:98:e8:b2:55:a9:f2:f0:80:44:98:19:f1:
f0:fc:51:ab:b3:4b:3b:30:b6:da:1c:85:62:dd:f4:
f3:2c:aa:ce:22:3a:ed:da:01:3a:28:53:fa:33:98:
8b:c8:79:c1:8b:0d:76:99:b6:97:2a:e2:c1:e3:45:
11:f0:33:c1:2a:aa:80:37:70:6f:2a:ea:4f:1a:1d:
cf:9f:35:95:b3:87:57:9c:b7:2f:7a:5e:a8:d4:25:
c4:59:42:b5:a1:17:49:52:c0:ac:34:7a:01:d1:9b:
f9:ab:8c:19:f9:9a:f0:49:ba:64:13:65:b6:36:37:
e0:f8:d5:8c:47:b6:59:f5:64:03:5f:d2:ce:06:08:
2f:76:33:ae:85:70:58:b6:16:c2:7e:2d:a0:7d:77:
c5:51:16:73:81:b7:1b:b7:23:23:81:05:08:42:32:
1e:a2:08:fb:f0:5c:52:e1:08:eb:43:a7:bd:30:f1:
af:41:51:ad:a4:92:e3:8b:d9:ce:94:95:49:e4:4b:
07:aa:a9:0a:f4:9e:03:e2:ff:b6:73:a7:d3:b8:c2:
b6:38:bb:28:dd:c7:04:d1:cc:c2:17:04:82:4c:b1:
b2:6e:c3:0b:38:e9:e6:0e:e4:31:26:c3:47:82:62:
5a:5b:1f:5b:91:2a:51:3d:ea:54:8a:c8:b0:68:49:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:44:37:03:68:50:FE:01:E0:5B:29:4D:D0:1C:3E:08:15:D9:66
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1e:f9:8b:c6:82:9e:de:0d:43:ed:d5:d3:12:ce:5c:df:4f:
8a:e0:38:b9:fc:ad:f2:ea:31:16:c9:1d:22:49:90:1a:06:e5:
fb:92:81:ea:ff:6b:7b:3c:03:2e:99:da:e5:34:e9:34:65:d6:
16:a1:1d:80:42:70:8f:62:d2:26:a1:05:ca:97:86:d3:fc:ef:
f5:11:6d:9b:bd:06:b4:3f:3f:df:ee:d9:04:67:fe:0e:87:de:
e3:49:2c:8e:a3:60:ad:16:49:f1:d9:ec:85:69:63:dd:fc:d5:
93:c2:d0:39:66:2e:24:40:ca:e3:e9:83:ed:e7:02:4e:d9:dd:
f6:b9:5f:c6:20:e9:1e:70:85:e1:21:58:02:3a:88:5d:0a:ad:
04:88:e4:c6:d2:c9:b0:50:1f:23:da:42:67:9d:b8:e4:97:01:
01:80:8e:25:b3:d8:fa:2b:38:77:c4:be:24:02:04:67:f9:6a:
98:8a:96:88:43:db:38:c7:0d:9c:de:94:a9:71:08:cf:a3:b7:
ba:f7:ac:57:30:cb:0a:bf:16:b9:75:b4:54:65:97:b2:52:83:
3a:08:a2:19:73:78:3f:23:34:ec:5c:d3:86:90:d1:16:b5:3c:
11:f9:ac:2f:ba:f4:eb:4f:44:80:06:5b:a0:ee:68:b5:81:f1:
c6:fd:00:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbLduwTYVdTpEqg89YsVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2
ZmI1OTMwHhcNMjUwNDMwMDIwMDM5WhcNMjUwNTAxMDIwMDM5WjAzMTEwLwYDVQQD
Eyg0YTkyNDQzNzAzNjg1MGZlMDFlMDViMjk0ZGQwMWMzZTA4MTVkOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4uY6LJVqfLwgESYGfHw/FGrs0s7
MLbaHIVi3fTzLKrOIjrt2gE6KFP6M5iLyHnBiw12mbaXKuLB40UR8DPBKqqAN3Bv
KupPGh3PnzWVs4dXnLcvel6o1CXEWUK1oRdJUsCsNHoB0Zv5q4wZ+ZrwSbpkE2W2
Njfg+NWMR7ZZ9WQDX9LOBggvdjOuhXBYthbCfi2gfXfFURZzgbcbtyMjgQUIQjIe
ogj78FxS4QjrQ6e9MPGvQVGtpJLji9nOlJVJ5EsHqqkK9J4D4v+2c6fTuMK2OLso
3ccE0czCFwSCTLGybsMLOOnmDuQxJsNHgmJaWx9bkSpRPepUisiwaEk2QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqSRDcDaFD+AeBbKU3QHD4IFdlmMB8GA1UdIwQY
MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt
MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk
LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoR75i8aC
nt4NQ+3V0xLOXN9PiuA4ufyt8uoxFskdIkmQGgbl+5KB6v9rezwDLpna5TTpNGXW
FqEdgEJwj2LSJqEFypeG0/zv9RFtm70GtD8/3+7ZBGf+Dofe40ksjqNgrRZJ8dns
hWlj3fzVk8LQOWYuJEDK4+mD7ecCTtnd9rlfxiDpHnCF4SFYAjqIXQqtBIjkxtLJ
sFAfI9pCZ5245JcBAYCOJbPY+is4d8S+JAIEZ/lqmIqWiEPbOMcNnN6UqXEIz6O3
uvesVzDLCr8WuXW0VGWXslKDOgiiGXN4PyM07FzThpDRFrU8EfmsL7r0609EgAZb
oO5otYHxxv0AGQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:53 2025 by rpki-client