Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: S+6PPCMEZZqmp7keU4JcpMQYsl0CA0ub1WaVYo1VwNA=
Subject key identifier: A3:6A:8C:E0:E0:34:48:AC:73:62:D4:14:75:1B:D7:B6:16:42:9F:00
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 01967E6A991E9E904EEEA8AF8096B55DE195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0C31
Signing time: Mon 28 Apr 2025 22:00:37 +0000
Manifest this update: Mon 28 Apr 2025 22:00:37 +0000
Manifest next update: Tue 29 Apr 2025 22:00:37 +0000
Files and hashes: 1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: NSJ5w8jTCbzbMeHm8EXskL+DoGh0GLPsRGJ5Y2OL8vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:99:1e:9e:90:4e:ee:a8:af:80:96:b5:5d:e1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Apr 28 22:00:37 2025 GMT
Not After : Apr 29 22:00:37 2025 GMT
Subject: CN=a36a8ce0e03448ac7362d414751bd7b616429f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:12:bc:8c:64:c4:b3:23:34:68:a9:1e:9f:
4f:ac:82:ce:49:9a:dd:dd:44:7b:10:38:38:6b:d5:
65:53:ef:4a:57:dd:a5:e6:17:1a:c6:b2:da:e0:63:
d9:35:52:bb:61:51:c9:78:a9:28:c0:00:12:7d:2b:
7f:9e:db:7b:e9:69:01:31:27:43:57:33:9f:a6:94:
75:13:d7:e1:1f:6e:b0:92:0f:0a:5b:42:74:fb:cb:
96:e0:5e:1a:67:26:45:77:c9:72:8d:09:16:c1:14:
bb:42:f4:19:d2:98:c2:ed:6b:61:87:ac:37:85:41:
d4:01:37:df:38:03:1b:3d:60:5d:3a:62:3c:7e:40:
63:fa:fc:4d:14:63:8b:11:4a:2f:d4:f2:dd:45:d8:
8f:e5:b2:99:48:42:b0:e0:e3:e8:5b:b7:77:d2:a2:
be:af:c9:b0:1a:56:eb:10:a2:16:11:6f:f7:f6:bd:
33:9e:d0:5a:09:bc:0f:a6:b6:c6:f8:51:ee:77:8f:
57:97:0f:de:7d:de:52:e3:61:02:c4:e2:48:5e:13:
51:8d:e1:5f:14:6b:2d:92:ee:23:a0:f8:e4:72:27:
ef:66:f5:69:36:ab:8d:2f:25:48:c1:5d:35:9f:ff:
bf:e4:99:fa:40:37:a6:aa:30:a9:14:bd:e7:b3:02:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:8C:E0:E0:34:48:AC:73:62:D4:14:75:1B:D7:B6:16:42:9F:00
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:14:c5:16:d1:61:0b:18:eb:d1:19:bf:a7:dd:25:9d:91:53:
a9:56:76:48:3f:0e:f5:1d:91:6e:48:0a:4e:53:07:5a:b7:65:
df:f8:a0:19:0f:e2:2c:ec:b9:e6:4f:9e:a5:20:c7:46:5d:81:
a4:59:60:09:75:39:48:2f:21:d0:c8:81:2f:58:e2:65:26:45:
3d:fe:ab:18:7c:01:01:e8:3c:e6:4a:12:36:88:4c:78:fb:9b:
92:6e:91:c1:05:b7:0f:b4:4e:ec:d7:bc:96:1c:63:c9:cf:18:
a3:ca:57:3e:b9:ed:18:fa:32:5a:2a:71:54:eb:22:6b:0b:69:
db:fe:18:42:19:e4:51:4d:7f:9a:f6:1d:d2:f8:48:ff:ea:ea:
d2:fe:44:1e:0f:30:0a:c2:e4:af:c3:89:6e:03:7c:15:cb:ce:
39:8a:c9:a2:73:bb:64:1c:16:e9:6f:4c:fe:33:eb:fc:c1:43:
e5:4f:7f:c2:84:ab:08:47:13:1c:e6:8b:12:fe:9b:af:64:5f:
25:9c:1e:30:b7:e6:ed:ad:cc:be:6e:1e:97:32:28:1d:23:15:
64:2c:83:11:e9:f9:27:0f:66:35:44:dc:df:6d:30:99:f5:a9:
90:71:48:42:00:2c:cd:fe:74:a2:e5:94:d4:7f:d9:7d:3a:62:
27:ba:75:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+apkenpBO7qivgJa1XeGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2MwZmFmYTY1MGRkOTRhM2I1NTgxNzM5ZjYzZDg4ZWZh
NDE0ZjMwHhcNMjUwNDI4MjIwMDM3WhcNMjUwNDI5MjIwMDM3WjAzMTEwLwYDVQQD
EyhhMzZhOGNlMGUwMzQ0OGFjNzM2MmQ0MTQ3NTFiZDdiNjE2NDI5ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZMSvIxkxLMjNGipHp9PrILOSZrd
3UR7EDg4a9VlU+9KV92l5hcaxrLa4GPZNVK7YVHJeKkowAASfSt/ntt76WkBMSdD
VzOfppR1E9fhH26wkg8KW0J0+8uW4F4aZyZFd8lyjQkWwRS7QvQZ0pjC7Wthh6w3
hUHUATffOAMbPWBdOmI8fkBj+vxNFGOLEUov1PLdRdiP5bKZSEKw4OPoW7d30qK+
r8mwGlbrEKIWEW/39r0zntBaCbwPprbG+FHud49Xlw/efd5S42ECxOJIXhNRjeFf
FGstku4joPjkcifvZvVpNquNLyVIwV01n/+/5Jn6QDemqjCpFL3nswLk8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNqjODgNEisc2LUFHUb17YWQp8AMB8GA1UdIwQY
MBaAFLV8D6+mUN2Uo7VYFzn2PYjvpBTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGIt
MThiOWE4NTEwNTM5LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGItMThiOWE4NTEwNTM5
LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxTFFtFh
Cxjr0Rm/p90lnZFTqVZ2SD8O9R2RbkgKTlMHWrdl3/igGQ/iLOy55k+epSDHRl2B
pFlgCXU5SC8h0MiBL1jiZSZFPf6rGHwBAeg85koSNohMePubkm6RwQW3D7RO7Ne8
lhxjyc8Yo8pXPrntGPoyWipxVOsiawtp2/4YQhnkUU1/mvYd0vhI/+rq0v5EHg8w
CsLkr8OJbgN8FcvOOYrJonO7ZBwW6W9M/jPr/MFD5U9/woSrCEcTHOaLEv6br2Rf
JZweMLfm7a3Mvm4elzIoHSMVZCyDEen5Jw9mNUTc320wmfWpkHFIQgAszf50ouWU
1H/ZfTpiJ7p1nQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:38 2025 by rpki-client