Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
File: tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json)
Hash identifier: p6o6Ubtxwa+8GBDT1UXJJyEYGTmtJOXB2JE5rGSG87A=
Subject key identifier: FD:68:32:44:1C:94:6B:E8:D4:97:F0:9C:FF:07:12:93:E7:31:15:7A
Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
Certificate issuer: /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Certificate serial: 01967BA01D1DF48F78C14301ACCEB851CB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
Manifest number: 4A
Signing time: Mon 28 Apr 2025 09:00:12 +0000
Manifest this update: Mon 28 Apr 2025 09:00:12 +0000
Manifest next update: Tue 29 Apr 2025 09:00:12 +0000
Files and hashes: 1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=)
2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: N6bwfXppND2FQGu85GRVzpa/7nTGcz538uUzpbBaE0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:1d:1d:f4:8f:78:c1:43:01:ac:ce:b8:51:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Validity
Not Before: Apr 28 09:00:12 2025 GMT
Not After : Apr 29 09:00:12 2025 GMT
Subject: CN=fd6832441c946be8d497f09cff071293e731157a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:82:da:4d:6a:dc:e5:a5:c8:b5:a2:8f:88:
4c:ed:c6:b7:67:b8:cc:53:99:49:50:a2:de:32:bd:
77:ef:be:94:2e:7a:57:8a:9c:d2:86:a3:29:46:59:
a4:16:ec:38:d1:c8:21:e8:23:e7:6e:70:f0:6a:03:
a9:d5:5b:e8:72:6b:53:21:bc:4e:7e:a4:40:91:c4:
30:73:f8:b8:1c:6e:0d:1c:c1:5f:b2:dc:48:91:1a:
53:0e:0a:66:77:08:ca:43:02:fe:27:50:62:b3:5e:
d7:ea:c9:b2:1a:5c:b1:a5:fa:13:4f:5e:14:83:6c:
15:e5:23:22:f3:4e:83:5b:0a:fc:3f:5c:6b:1e:e9:
7f:2e:db:14:65:a4:34:b2:37:ab:e5:16:79:68:96:
6b:53:3f:46:5f:09:5a:39:d9:0f:99:ed:12:33:76:
5d:a8:4f:e8:30:d3:a1:c4:41:40:f5:77:e2:3f:00:
2a:62:95:08:8f:e3:38:a7:50:02:e5:68:1e:7f:b3:
19:72:5f:15:97:0f:b1:1a:21:23:af:95:f4:b1:86:
60:21:cb:34:ef:81:6e:73:fd:1b:ab:be:f2:1f:c4:
cf:e2:71:a4:0e:99:7d:03:39:59:ba:62:98:f5:bc:
39:a6:86:53:45:7b:10:07:db:d8:8a:4f:20:97:06:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:68:32:44:1C:94:6B:E8:D4:97:F0:9C:FF:07:12:93:E7:31:15:7A
X509v3 Authority Key Identifier:
keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ee:33:97:f2:da:7b:aa:fc:b4:0d:9b:d2:c2:ad:1f:2a:8c:
5d:b2:6d:fd:c6:d0:d7:63:c9:e2:53:bb:5a:04:1a:45:34:bd:
bd:92:2e:f7:b1:ca:2f:ee:e7:0e:e3:95:fe:fa:5c:20:ec:27:
59:97:3c:a3:82:b8:6d:3f:38:3a:74:1e:ad:30:f2:f6:73:d2:
da:87:6b:12:aa:d2:ba:1a:d7:b8:95:0e:93:eb:d6:da:a7:4b:
b4:cb:bf:60:1a:91:98:cd:3f:19:82:e6:bb:6f:54:ce:63:ef:
67:8e:3d:e2:26:df:2f:99:3f:fb:ee:94:5a:fd:63:1d:d9:a8:
00:0e:e6:7b:93:90:53:8e:41:aa:bd:34:19:25:0c:a5:f1:60:
b0:2c:c8:b5:85:1b:43:b9:31:65:98:5c:5b:f4:e7:a0:6f:60:
34:ac:2f:e1:c0:8d:4b:77:10:94:e2:e9:a4:de:14:67:57:2c:
03:02:25:8c:88:c4:f0:60:f9:24:35:8f:09:d9:2d:66:27:45:
76:b9:9a:8c:1d:12:91:aa:81:c8:fd:f9:39:05:9a:6b:88:b5:
15:3d:2f:78:61:6b:23:5f:5a:58:52:dc:4b:65:d7:5b:5f:f4:
c0:7f:d6:84:92:06:62:2b:88:60:e9:91:12:02:fc:8b:bf:45:
b5:70:fb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oB0d9I94wUMBrM64UctAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjZkZmE3ZjllMjg4NGZiMjFkMTA3M2U0OGMwYmQ1ODg2
YWRlZTIwHhcNMjUwNDI4MDkwMDEyWhcNMjUwNDI5MDkwMDEyWjAzMTEwLwYDVQQD
EyhmZDY4MzI0NDFjOTQ2YmU4ZDQ5N2YwOWNmZjA3MTI5M2U3MzExNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn52C2k1q3OWlyLWij4hM7ca3Z7jM
U5lJUKLeMr13776ULnpXipzShqMpRlmkFuw40cgh6CPnbnDwagOp1VvocmtTIbxO
fqRAkcQwc/i4HG4NHMFfstxIkRpTDgpmdwjKQwL+J1Bis17X6smyGlyxpfoTT14U
g2wV5SMi806DWwr8P1xrHul/LtsUZaQ0sjer5RZ5aJZrUz9GXwlaOdkPme0SM3Zd
qE/oMNOhxEFA9XfiPwAqYpUIj+M4p1AC5Wgef7MZcl8Vlw+xGiEjr5X0sYZgIcs0
74Fuc/0bq77yH8TP4nGkDpl9AzlZumKY9bw5poZTRXsQB9vYik8glwZzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1oMkQclGvo1JfwnP8HEpPnMRV6MB8GA1UdIwQY
MBaAFLUm36f54ohPsh0Qc+SMC9WIat7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2It
ZDFjZDA5NTY4ZTgyLzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2ItZDFjZDA5NTY4ZTgy
LzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+4zl/La
e6r8tA2b0sKtHyqMXbJt/cbQ12PJ4lO7WgQaRTS9vZIu97HKL+7nDuOV/vpcIOwn
WZc8o4K4bT84OnQerTDy9nPS2odrEqrSuhrXuJUOk+vW2qdLtMu/YBqRmM0/GYLm
u29UzmPvZ4494ibfL5k/++6UWv1jHdmoAA7me5OQU45Bqr00GSUMpfFgsCzItYUb
Q7kxZZhcW/TnoG9gNKwv4cCNS3cQlOLppN4UZ1csAwIljIjE8GD5JDWPCdktZidF
drmajB0SkaqByP35OQWaa4i1FT0veGFrI19aWFLcS2XXW1/0wH/WhJIGYiuIYOmR
EgL8i79FtXD7YA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:29:42 2025 by rpki-client