Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: OxXiAaPvhTF1NIpyKabDbSbXvp+J+7yxc3CtTVK1wog=
Subject key identifier: 92:F4:A3:7A:72:F1:44:47:EC:69:DC:37:4C:4A:B1:07:64:38:0B:FB
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019677C3E79909D4FCFB7F1F2A29B1498262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0C72
Signing time: Sun 27 Apr 2025 15:00:49 +0000
Manifest this update: Sun 27 Apr 2025 15:00:49 +0000
Manifest next update: Mon 28 Apr 2025 15:00:49 +0000
Files and hashes: 1: bBRmM9C9XmUSSJtHhjHUjRNm8UY.roa (hash: fyEjl4MYjoY4DVmXCRYYRphdD98I9nv/Kzt95pfzDko=)
2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: /kzPPBHwV/OW/Vs/zbUuUOqJgYnsL78Cw30IH/RMLV0=)
3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:e7:99:09:d4:fc:fb:7f:1f:2a:29:b1:49:82:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 27 15:00:49 2025 GMT
Not After : Apr 28 15:00:49 2025 GMT
Subject: CN=92f4a37a72f14447ec69dc374c4ab10764380bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:80:5a:44:3b:23:91:04:b6:a8:ec:e2:16:99:
11:d2:ce:79:96:a6:c3:8c:dd:88:d3:ec:29:13:94:
28:60:77:35:44:3f:85:41:45:bb:62:b8:d0:dc:7e:
e4:40:ef:48:38:dd:7e:41:ed:71:6f:ca:56:d4:2a:
09:56:29:40:de:4e:6a:46:3a:20:5f:68:21:35:8b:
b6:1d:7e:68:f5:57:dd:a4:10:8b:d9:4f:14:3e:b2:
3f:d9:91:07:5c:7d:3b:6c:9e:81:ca:97:46:f8:44:
ee:d3:40:70:9d:29:27:c7:a1:4b:0e:a6:b0:e7:3d:
d4:a8:d0:e1:82:10:6b:a5:40:9c:db:87:eb:a8:b6:
1f:d9:18:b6:fa:9f:03:79:9a:4a:04:9b:bb:7c:b6:
54:b9:0f:a9:a7:cf:0a:8f:1f:2c:76:ed:2f:a6:42:
0f:a7:c5:54:c8:a8:60:44:e2:ff:76:22:0e:f5:df:
b1:6c:e1:0a:2c:8c:3f:fc:87:d8:1d:bb:28:c8:f2:
13:39:ee:68:db:55:28:89:ca:c7:0a:99:0a:9f:01:
2a:a1:bb:5b:c7:fd:43:87:c8:27:f0:09:a1:10:df:
07:7a:09:dc:53:aa:32:0f:65:fc:8a:d7:cc:0f:d8:
33:94:5b:21:d9:7c:1d:03:a8:94:44:c8:ec:1f:42:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:A3:7A:72:F1:44:47:EC:69:DC:37:4C:4A:B1:07:64:38:0B:FB
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:aa:79:f6:e1:c0:54:04:87:4e:22:b1:cf:73:3f:d2:8f:b2:
b2:3d:03:b1:f1:c0:46:63:6e:79:05:4d:90:e5:4a:b2:6d:17:
d2:28:31:80:62:6e:49:97:a4:a0:05:74:6a:71:ef:4a:16:68:
94:da:6f:1a:1e:60:33:a9:73:c7:23:12:76:be:9f:0e:12:a6:
2f:90:37:a0:4f:50:64:cf:65:bc:88:1b:b7:da:61:d5:1d:15:
98:9f:33:2e:de:0f:aa:a4:ae:87:82:38:29:07:3a:60:20:7d:
1e:c6:c5:85:b4:07:aa:8d:b1:b4:e8:7b:8c:c5:46:4b:d0:e0:
c2:63:7b:70:13:8b:30:a2:29:34:c9:36:0d:a9:4a:1b:ac:42:
47:95:96:8b:62:44:46:fc:40:c5:32:be:1a:80:74:e9:cb:aa:
5f:23:44:7f:b4:b8:82:ad:d6:7b:96:c4:65:d0:16:31:86:70:
40:ed:13:cb:55:df:33:c7:19:52:74:99:18:0b:f2:2f:51:35:
a7:af:9e:44:a5:0f:b2:35:8d:c9:7c:9f:37:32:54:ee:e8:ab:
dd:bf:5d:f2:e6:41:58:9f:06:d1:e4:83:4b:a7:41:d7:84:8b:
a7:3f:41:0f:fb:a8:7c:0f:08:29:25:97:12:18:2e:8e:35:28:
2c:83:8f:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w+eZCdT8+38fKimxSYJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2
ZTBjMWEwHhcNMjUwNDI3MTUwMDQ5WhcNMjUwNDI4MTUwMDQ5WjAzMTEwLwYDVQQD
Eyg5MmY0YTM3YTcyZjE0NDQ3ZWM2OWRjMzc0YzRhYjEwNzY0MzgwYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YBaRDsjkQS2qOziFpkR0s55lqbD
jN2I0+wpE5QoYHc1RD+FQUW7YrjQ3H7kQO9ION1+Qe1xb8pW1CoJVilA3k5qRjog
X2ghNYu2HX5o9VfdpBCL2U8UPrI/2ZEHXH07bJ6BypdG+ETu00BwnSknx6FLDqaw
5z3UqNDhghBrpUCc24frqLYf2Ri2+p8DeZpKBJu7fLZUuQ+pp88Kjx8sdu0vpkIP
p8VUyKhgROL/diIO9d+xbOEKLIw//IfYHbsoyPITOe5o21UoicrHCpkKnwEqobtb
x/1Dh8gn8AmhEN8HegncU6oyD2X8itfMD9gzlFsh2XwdA6iURMjsH0KG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL0o3py8URH7GncN0xKsQdkOAv7MB8GA1UdIwQY
MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt
ODZhMmYwNjdiNGU4LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4
LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqp59uHA
VASHTiKxz3M/0o+ysj0DsfHARmNueQVNkOVKsm0X0igxgGJuSZekoAV0anHvShZo
lNpvGh5gM6lzxyMSdr6fDhKmL5A3oE9QZM9lvIgbt9ph1R0VmJ8zLt4PqqSuh4I4
KQc6YCB9HsbFhbQHqo2xtOh7jMVGS9DgwmN7cBOLMKIpNMk2DalKG6xCR5WWi2JE
RvxAxTK+GoB06cuqXyNEf7S4gq3We5bEZdAWMYZwQO0Ty1XfM8cZUnSZGAvyL1E1
p6+eRKUPsjWNyXyfNzJU7uir3b9d8uZBWJ8G0eSDS6dB14SLpz9BD/uofA8IKSWX
EhgujjUoLIOPCQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:23:30 2025 by rpki-client