Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: 8rBlHAvnY5DqlJuwZbH8ZbCQSXVHzCeXS+QEb5mbJY4=
Subject key identifier: 9D:99:45:13:B1:45:63:3A:48:80:99:5A:FF:84:D2:7C:AD:A0:35:8F
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 019699AAFD124121C97F575A755C3D830433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 0601
Signing time: Sun 04 May 2025 05:00:41 +0000
Manifest this update: Sun 04 May 2025 05:00:41 +0000
Manifest next update: Mon 05 May 2025 05:00:41 +0000
Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: cgArCYitrVlNy08+FUG8nHdZH9dR0jCgCmSKEICfYaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:aa:fd:12:41:21:c9:7f:57:5a:75:5c:3d:83:04:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: May 4 05:00:41 2025 GMT
Not After : May 5 05:00:41 2025 GMT
Subject: CN=9d994513b145633a4880995aff84d27cada0358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:75:52:eb:7a:38:82:16:c9:c1:f2:e6:96:
ce:c8:47:11:61:74:ac:5c:e4:11:64:e2:61:63:fe:
17:dd:3a:e1:f6:38:db:43:82:bf:92:99:26:1e:3d:
c6:b9:cd:7e:19:d6:e1:48:c4:9d:0d:83:52:02:e5:
7a:49:62:5a:97:19:d8:da:16:5f:de:9c:98:ef:02:
19:f7:57:77:43:b5:e8:9b:db:ba:d1:cd:6f:4c:ef:
79:bb:8f:3e:fc:91:18:9b:ab:ac:00:66:46:bd:25:
d9:ee:37:45:6e:34:9b:6f:5a:1f:9f:17:3b:92:9a:
3b:97:4e:a9:a4:f7:4d:89:a4:93:55:a6:5a:e2:d7:
e6:1e:7f:71:9f:83:44:f1:18:c6:6a:41:23:6f:c1:
6e:50:a2:ae:eb:c4:06:7d:1c:ad:65:a4:13:91:88:
7d:bc:19:70:82:2f:cd:e7:70:1e:76:5a:3e:52:81:
1f:a8:58:05:e9:e2:24:64:65:5e:0e:ec:47:72:9b:
bb:6a:03:8c:2d:6d:90:36:50:7d:67:dc:e5:27:1b:
41:b9:ba:36:f2:e5:9b:40:71:89:21:33:cd:46:c4:
5b:f6:bd:b4:8e:5a:00:45:8f:f0:b4:60:62:b8:df:
27:bc:9a:fb:d1:5b:25:81:8d:aa:16:4c:bb:84:c0:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:99:45:13:B1:45:63:3A:48:80:99:5A:FF:84:D2:7C:AD:A0:35:8F
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:64:88:82:5d:89:b7:c0:ee:bf:0f:5f:33:dc:e8:f4:82:8e:
67:15:4a:77:2c:47:02:10:2e:72:7b:32:9a:df:9d:b0:2b:19:
5f:35:83:3a:13:9d:be:e2:12:72:ee:21:dd:62:10:cf:ba:e7:
0b:ec:14:71:16:29:e3:ea:a1:79:fa:2c:35:4e:c7:ad:f3:a3:
6c:23:7e:97:a6:20:5a:54:6e:0b:a7:f5:09:35:95:9e:c3:fe:
41:76:71:89:d0:ab:e7:89:55:7a:c1:48:c2:d0:19:a9:0c:ed:
2c:89:61:b9:18:62:47:da:a2:22:95:49:0a:88:bc:97:b5:f8:
4f:13:e3:18:a7:13:58:5e:6b:34:ca:ab:98:7d:54:5a:bd:b0:
7b:5f:09:e0:8d:53:11:f8:fc:06:2b:52:3b:2a:3d:e9:5d:f5:
4a:33:8a:24:75:16:7f:1b:01:b3:00:9c:4d:cd:65:ab:4a:aa:
d8:9d:c5:66:e1:0e:c9:30:d9:f6:ec:fe:7e:aa:56:df:71:21:
97:d3:83:02:f9:b1:74:95:56:ae:98:0a:f0:35:11:81:e6:04:
a1:73:6e:30:ad:2b:8b:44:5a:87:09:78:cb:07:47:fd:88:f4:
a6:5c:44:bf:65:e5:bc:75:25:b0:c4:5e:a5:88:f2:14:fb:8a:
e2:25:8b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZqv0SQSHJf1dadVw9gwQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODQ4Y2QyMzkzYzE3ODM2NTdhMDU3NzdhYjMxNWUzOThl
YmIyM2YwHhcNMjUwNTA0MDUwMDQxWhcNMjUwNTA1MDUwMDQxWjAzMTEwLwYDVQQD
Eyg5ZDk5NDUxM2IxNDU2MzNhNDg4MDk5NWFmZjg0ZDI3Y2FkYTAzNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBt1Uut6OIIWycHy5pbOyEcRYXSs
XOQRZOJhY/4X3Trh9jjbQ4K/kpkmHj3Guc1+GdbhSMSdDYNSAuV6SWJalxnY2hZf
3pyY7wIZ91d3Q7Xom9u60c1vTO95u48+/JEYm6usAGZGvSXZ7jdFbjSbb1ofnxc7
kpo7l06ppPdNiaSTVaZa4tfmHn9xn4NE8RjGakEjb8FuUKKu68QGfRytZaQTkYh9
vBlwgi/N53Aedlo+UoEfqFgF6eIkZGVeDuxHcpu7agOMLW2QNlB9Z9zlJxtBubo2
8uWbQHGJITPNRsRb9r20jloARY/wtGBiuN8nvJr70VslgY2qFky7hMACkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2ZRROxRWM6SICZWv+E0nytoDWPMB8GA1UdIwQY
MBaAFLeEjNI5PBeDZXoFd3qzFeOY67I/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDIt
NWFhYWMyY2IwZGYxLzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDItNWFhYWMyY2IwZGYx
LzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmSIgl2J
t8Duvw9fM9zo9IKOZxVKdyxHAhAucnsymt+dsCsZXzWDOhOdvuIScu4h3WIQz7rn
C+wUcRYp4+qhefosNU7HrfOjbCN+l6YgWlRuC6f1CTWVnsP+QXZxidCr54lVesFI
wtAZqQztLIlhuRhiR9qiIpVJCoi8l7X4TxPjGKcTWF5rNMqrmH1UWr2we18J4I1T
Efj8BitSOyo96V31SjOKJHUWfxsBswCcTc1lq0qq2J3FZuEOyTDZ9uz+fqpW33Eh
l9ODAvmxdJVWrpgK8DURgeYEoXNuMK0ri0Rahwl4ywdH/Yj0plxEv2XlvHUlsMRe
pYjyFPuK4iWLzA==
-----END CERTIFICATE-----
Generated at Sun May 4 11:03:13 2025 by rpki-client