Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: FwvJfOOyCKDurAB3Q8QGm4/4DRhvf4T826zyCVSfEQ4=
Subject key identifier: F4:7D:BF:69:5D:77:77:78:C0:C0:43:7B:8D:ED:69:B5:FD:59:4B:BB
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019671F86D5BE0CD52E7DA4BDA25F3856A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0866
Signing time: Sat 26 Apr 2025 12:00:28 +0000
Manifest this update: Sat 26 Apr 2025 12:00:28 +0000
Manifest next update: Sun 27 Apr 2025 12:00:28 +0000
Files and hashes: 1: Dnpb75XdwM7LxtjkYlloNVMA6rs.roa (hash: EzyV/txDtZvmkY6vt32XISbysVcisfy2gnGp9jREhPs=)
2: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
3: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: 2zzTEj/xPjDEhtWvMaff7S88vg8fFISsIKIoJnfHYPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:6d:5b:e0:cd:52:e7:da:4b:da:25:f3:85:6a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Apr 26 12:00:28 2025 GMT
Not After : Apr 27 12:00:28 2025 GMT
Subject: CN=f47dbf695d777778c0c0437b8ded69b5fd594bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:97:17:f5:5c:58:d4:73:79:3b:a1:42:16:
33:fd:c7:54:f2:b2:ec:2e:c6:d2:03:12:54:74:27:
fe:87:97:0a:bf:e8:2a:8f:21:28:d6:43:55:bb:4a:
44:54:a9:68:87:78:35:36:0e:14:ad:95:b9:92:3c:
e5:c5:29:7a:98:5f:1a:25:fb:a2:a3:04:97:b4:7f:
0e:dc:33:dd:1f:83:cf:c4:e1:ba:18:0c:c2:05:89:
ed:22:e0:ae:11:a9:58:23:ff:4f:5e:23:dc:35:54:
c4:7d:df:90:d6:00:a4:c9:40:a4:15:20:70:fe:0b:
f9:75:68:45:18:b6:34:c5:f5:ec:fc:9a:91:e5:fe:
4d:01:2e:81:a7:b0:d6:62:89:82:95:23:76:18:77:
f4:ef:e0:44:e5:c4:a8:a7:1e:d8:28:c9:4a:ed:8d:
93:47:59:b4:6f:e8:a0:05:11:82:34:6e:9a:3a:d9:
40:f8:03:30:66:e7:bc:b5:fa:5e:3a:5e:fb:7f:ae:
43:2f:98:7b:58:92:3d:f4:cc:28:d0:ff:58:86:38:
77:27:58:b1:a6:89:0a:8e:f1:8b:62:fd:a5:f9:f8:
eb:1c:fd:19:c6:91:51:02:4f:91:c0:ef:33:83:84:
aa:32:e7:2b:c1:b3:95:07:db:51:4a:35:1d:aa:14:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7D:BF:69:5D:77:77:78:C0:C0:43:7B:8D:ED:69:B5:FD:59:4B:BB
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6b:f6:df:dc:f2:79:c3:96:f2:4e:ca:b7:d8:cc:6e:67:d4:
f8:ba:be:39:b1:d7:21:8a:e4:ed:e9:e3:a0:74:78:e2:7e:f8:
fb:39:81:ec:24:35:3a:fe:14:f6:92:00:57:70:d3:a0:2d:8e:
10:a5:a1:ce:69:b2:de:61:66:43:86:74:87:8e:35:55:15:53:
1a:10:6e:ac:57:07:f7:2c:82:18:17:89:46:dd:6e:b5:51:5c:
34:72:5b:51:b6:18:e3:4c:fa:5c:ed:2e:0d:93:70:b5:01:5d:
e0:09:da:2c:57:04:01:f8:c1:2b:fa:8e:04:61:80:90:09:35:
29:22:ed:1e:99:fb:79:f4:74:ca:c2:b8:1d:fd:1f:f6:05:ff:
24:89:57:a5:3e:76:e5:4a:25:5c:9a:78:b6:1d:55:05:46:84:
23:30:f0:5b:e1:c9:79:46:bd:ed:f4:70:a5:1d:c5:2a:81:c8:
5a:3b:52:1a:d0:9b:36:6d:ad:e8:28:26:96:e1:21:9a:89:07:
54:de:82:59:e1:b4:36:3a:0c:71:6c:4f:e3:ec:96:2a:71:e7:
eb:ba:9c:82:8f:2f:02:65:13:38:07:62:eb:8d:93:bb:f4:9e:
d2:9f:cc:e3:cc:38:15:9e:15:01:40:89:5a:09:d0:9b:34:9b:
8b:c3:78:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZx+G1b4M1S59pL2iXzhWp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5
OTEwNWUwHhcNMjUwNDI2MTIwMDI4WhcNMjUwNDI3MTIwMDI4WjAzMTEwLwYDVQQD
EyhmNDdkYmY2OTVkNzc3Nzc4YzBjMDQzN2I4ZGVkNjliNWZkNTk0YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXmXF/VcWNRzeTuhQhYz/cdU8rLs
LsbSAxJUdCf+h5cKv+gqjyEo1kNVu0pEVKloh3g1Ng4UrZW5kjzlxSl6mF8aJfui
owSXtH8O3DPdH4PPxOG6GAzCBYntIuCuEalYI/9PXiPcNVTEfd+Q1gCkyUCkFSBw
/gv5dWhFGLY0xfXs/JqR5f5NAS6Bp7DWYomClSN2GHf07+BE5cSopx7YKMlK7Y2T
R1m0b+igBRGCNG6aOtlA+AMwZue8tfpeOl77f65DL5h7WJI99Mwo0P9Yhjh3J1ix
pokKjvGLYv2l+fjrHP0ZxpFRAk+RwO8zg4SqMucrwbOVB9tRSjUdqhSVcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR9v2ldd3d4wMBDe43tabX9WUu7MB8GA1UdIwQY
MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt
YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx
LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2v239zy
ecOW8k7Kt9jMbmfU+Lq+ObHXIYrk7enjoHR44n74+zmB7CQ1Ov4U9pIAV3DToC2O
EKWhzmmy3mFmQ4Z0h441VRVTGhBurFcH9yyCGBeJRt1utVFcNHJbUbYY40z6XO0u
DZNwtQFd4AnaLFcEAfjBK/qOBGGAkAk1KSLtHpn7efR0ysK4Hf0f9gX/JIlXpT52
5UolXJp4th1VBUaEIzDwW+HJeUa97fRwpR3FKoHIWjtSGtCbNm2t6CgmluEhmokH
VN6CWeG0NjoMcWxP4+yWKnHn67qcgo8vAmUTOAdi642Tu/Se0p/M48w4FZ4VAUCJ
WgnQmzSbi8N4uw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:53 2025 by rpki-client