Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
File: t4FQ8EwyNNv58R4RB5kygC0mj7E.mft (raw, json)
Hash identifier: X33SnWzdzwdf2kI3TItHkbyUQalVoci9eJzH32lNWPA=
Subject key identifier: 10:62:12:0E:0B:EC:33:31:65:40:BD:D5:CA:55:E6:5C:99:7B:2C:B1
Authority key identifier: B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
Certificate issuer: /CN=b78150f04c3234dbf9f11e11079932802d268fb1
Certificate serial: 0196759E7A767BACB6724AE495C4A0AE9082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
Manifest number: 0672
Signing time: Sun 27 Apr 2025 05:00:42 +0000
Manifest this update: Sun 27 Apr 2025 05:00:42 +0000
Manifest next update: Mon 28 Apr 2025 05:00:42 +0000
Files and hashes: 1: MDCWnt2rzIXWYWaxPmc0KCazQYc.roa (hash: 9x3sa/eMNtozgLkEhCL0NnGHAKtQHds50tsgQhEMBDs=)
2: t4FQ8EwyNNv58R4RB5kygC0mj7E.crl (hash: k0qfdHA9TDBq9cuwqUoMrRO1HLqs7XbjV8ngJPnBbyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:7a:76:7b:ac:b6:72:4a:e4:95:c4:a0:ae:90:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78150f04c3234dbf9f11e11079932802d268fb1
Validity
Not Before: Apr 27 05:00:42 2025 GMT
Not After : Apr 28 05:00:42 2025 GMT
Subject: CN=1062120e0bec33316540bdd5ca55e65c997b2cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:c3:b5:a9:8b:97:06:25:da:8d:f2:84:76:
ff:01:09:4f:f3:f9:a5:3b:f8:9e:97:4c:70:e4:ce:
81:1f:17:23:e2:21:72:e3:ef:fb:01:14:93:d5:eb:
dd:72:7f:1e:31:bf:4a:ce:bd:98:65:9e:52:9c:2c:
e7:a9:be:bb:9b:be:44:56:d9:e3:7a:e7:c4:95:99:
54:0f:7e:cd:4c:3c:a5:f4:b5:b8:d4:ea:3d:e8:eb:
32:5b:4f:96:03:17:5f:88:7d:c4:28:9e:dd:49:1f:
35:74:a4:23:8d:7b:9a:52:3f:77:08:43:32:94:ce:
07:fa:3a:96:46:ef:c8:2b:26:ed:af:dc:5e:f0:df:
65:82:db:c8:88:6c:5e:f1:01:88:cd:d3:db:45:ed:
d1:7e:f6:14:c2:60:60:33:cc:ad:2f:0c:8f:9e:48:
3e:c8:fd:2e:d2:e5:79:71:9f:cc:e6:f0:04:da:fd:
ac:70:2b:b8:ef:e9:fa:9f:c7:39:69:87:32:a0:3f:
c5:a5:ed:7b:37:c6:63:e3:68:00:0a:88:39:a5:08:
35:8a:9a:03:52:fc:74:fc:69:07:c1:10:0d:b7:f2:
d6:a9:68:51:38:34:06:39:c5:ea:46:b1:85:ee:f0:
61:40:d7:9a:b2:34:f4:ac:57:29:2f:d8:58:c1:b4:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:62:12:0E:0B:EC:33:31:65:40:BD:D5:CA:55:E6:5C:99:7B:2C:B1
X509v3 Authority Key Identifier:
keyid:B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a3:26:c9:c6:ba:20:7d:2a:30:82:96:9d:1c:2f:a4:ef:76:
c4:aa:52:3b:42:02:7a:b3:37:f2:21:69:44:6c:0c:5c:ed:62:
49:50:c4:05:9b:ba:37:d4:a6:1e:a3:69:12:cb:cb:bf:f5:d2:
a0:7c:c0:41:e3:47:a8:71:4b:ef:1b:ef:9c:d0:e2:4d:a3:03:
0d:35:c6:41:fe:3b:d1:1b:14:39:14:87:b8:a5:32:15:a6:bc:
5e:af:d6:1a:51:40:6a:ce:85:b2:8b:39:53:96:47:36:43:fb:
5e:2e:9f:1e:de:93:22:ce:5a:c8:29:03:ee:dc:e4:55:c7:d1:
a0:70:e5:c4:db:18:57:ce:4b:4e:73:fe:5e:06:4e:ae:6c:50:
c1:38:64:79:a1:b4:b3:0a:c5:db:6c:9c:7b:c3:9b:4d:4a:ec:
d5:e4:b9:3a:19:45:d4:fa:50:4b:9f:b9:11:aa:87:68:41:aa:
2b:b1:c1:4e:b3:aa:b5:02:af:da:ef:ef:fe:98:5b:3d:8c:29:
bc:18:e6:61:e4:b3:6d:1a:b0:49:c6:61:e6:0c:5e:93:a8:31:
97:2e:71:1d:f4:38:f3:f3:c0:a7:fb:76:02:77:cf:2e:08:4e:
ef:e3:06:ae:42:db:d9:5a:b8:ba:19:4d:2c:30:b9:b6:b8:25:
d5:56:71:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nnp2e6y2ckrklcSgrpCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODE1MGYwNGMzMjM0ZGJmOWYxMWUxMTA3OTkzMjgwMmQy
NjhmYjEwHhcNMjUwNDI3MDUwMDQyWhcNMjUwNDI4MDUwMDQyWjAzMTEwLwYDVQQD
EygxMDYyMTIwZTBiZWMzMzMxNjU0MGJkZDVjYTU1ZTY1Yzk5N2IyY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfLDtamLlwYl2o3yhHb/AQlP8/ml
O/iel0xw5M6BHxcj4iFy4+/7ARST1evdcn8eMb9Kzr2YZZ5SnCznqb67m75EVtnj
eufElZlUD37NTDyl9LW41Oo96OsyW0+WAxdfiH3EKJ7dSR81dKQjjXuaUj93CEMy
lM4H+jqWRu/IKybtr9xe8N9lgtvIiGxe8QGIzdPbRe3RfvYUwmBgM8ytLwyPnkg+
yP0u0uV5cZ/M5vAE2v2scCu47+n6n8c5aYcyoD/Fpe17N8Zj42gACog5pQg1ipoD
Uvx0/GkHwRANt/LWqWhRODQGOcXqRrGF7vBhQNeasjT0rFcpL9hYwbSosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBiEg4L7DMxZUC91cpV5lyZeyyxMB8GA1UdIwQY
MBaAFLeBUPBMMjTb+fEeEQeZMoAtJo+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iNTlhOGItODc1My00MDk0LWJiYTct
ZWNjYzJjMWIxYzIzLzEvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iNTlhOGItODc1My00MDk0LWJiYTctZWNjYzJjMWIxYzIz
LzEvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaMmyca6
IH0qMIKWnRwvpO92xKpSO0ICerM38iFpRGwMXO1iSVDEBZu6N9SmHqNpEsvLv/XS
oHzAQeNHqHFL7xvvnNDiTaMDDTXGQf470RsUORSHuKUyFaa8Xq/WGlFAas6Fsos5
U5ZHNkP7Xi6fHt6TIs5ayCkD7tzkVcfRoHDlxNsYV85LTnP+XgZOrmxQwThkeaG0
swrF22yce8ObTUrs1eS5OhlF1PpQS5+5EaqHaEGqK7HBTrOqtQKv2u/v/phbPYwp
vBjmYeSzbRqwScZh5gxek6gxly5xHfQ48/PAp/t2AnfPLghO7+MGrkLb2Vq4uhlN
LDC5trgl1VZxsQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:00:21 2025 by rpki-client