Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: FaHd3K+zkxRVT8ru/y6Xjh/VoYxnshO46jlyehl7vCA=
Subject key identifier: B8:0F:B3:6D:54:29:31:71:85:B7:7A:3D:27:B8:1B:2E:7D:BC:C9:D2
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 01969B2B76C939748293799514F0A7B3D28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0DB7
Signing time: Sun 04 May 2025 12:00:38 +0000
Manifest this update: Sun 04 May 2025 12:00:38 +0000
Manifest next update: Mon 05 May 2025 12:00:38 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: yAqLVBgA/vjcT/wqUolxqNecdRY0/UZp0lnduT3l4eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:2b:76:c9:39:74:82:93:79:95:14:f0:a7:b3:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: May 4 12:00:38 2025 GMT
Not After : May 5 12:00:38 2025 GMT
Subject: CN=b80fb36d5429317185b77a3d27b81b2e7dbcc9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:64:e0:3f:74:05:5d:4f:41:9b:7b:d7:6b:
d8:87:77:92:ba:38:32:30:a1:01:2d:56:61:29:16:
9a:71:9b:38:6c:8c:d2:c6:ed:9d:93:d0:3d:1a:33:
49:39:ba:6c:55:27:dc:e2:18:de:b8:67:de:ba:6a:
3b:02:88:8a:d0:72:8d:2f:19:c6:2c:d7:e0:b5:ca:
4c:db:fa:e9:a5:64:36:68:35:f2:75:9b:97:4f:5e:
aa:ac:fd:ca:50:a1:51:27:ae:a0:02:bf:b9:6f:0c:
a2:1c:42:22:c9:3d:16:dd:96:17:3a:6a:6a:9a:cf:
6c:6e:71:8c:73:92:9a:7e:d5:e3:2f:dc:38:5a:d6:
dd:0b:61:dc:8e:87:6a:6d:aa:75:06:39:8d:6b:2f:
f0:74:e8:4b:d2:24:ff:b2:12:2f:5f:9c:da:f4:03:
1a:d7:4f:3b:4b:fb:4b:d8:af:a7:83:48:05:24:cb:
35:39:45:81:1e:9f:30:d8:c2:a0:fe:d2:4c:3c:2d:
2c:fd:66:31:ab:39:ec:99:1b:44:4c:fc:e9:e1:19:
6c:42:f2:28:48:d3:ec:d2:13:a0:d8:39:11:bf:6d:
e6:ff:82:9d:18:52:25:94:7e:93:3a:04:12:80:eb:
9e:3d:a1:13:27:01:45:c8:f9:85:e3:90:5a:6f:82:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:B3:6D:54:29:31:71:85:B7:7A:3D:27:B8:1B:2E:7D:BC:C9:D2
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4e:35:f6:56:e7:41:4c:74:8d:c8:d6:69:9b:89:77:62:74:
6d:1f:c1:61:13:06:8d:6a:46:46:d5:e5:9c:5f:e1:a9:6e:31:
1e:26:02:33:4b:b1:f0:49:60:14:9c:95:bd:e6:30:ff:c0:8e:
8c:35:06:25:da:b5:09:de:a5:3d:c4:8f:a8:e5:fa:d8:3e:7c:
9c:53:a4:86:52:d8:94:9f:62:2b:28:93:e9:8b:0b:70:0b:8e:
1c:62:d2:ac:a5:45:75:6d:4a:65:cc:91:e0:5c:50:6f:1e:d7:
83:87:49:c8:95:54:c2:c6:4b:e5:fc:96:f5:63:de:b9:a0:69:
a9:11:0e:e7:2b:d7:c1:62:b0:f8:0d:28:43:6a:a6:6d:9b:e0:
da:f8:27:be:fa:96:47:c8:9a:f7:f6:ac:df:d6:b9:87:b4:39:
1e:b4:b5:74:39:7a:19:f9:4c:16:0f:0d:88:b1:89:31:a8:f2:
d1:71:df:04:7b:81:48:25:1d:08:47:1b:7e:0a:48:86:fc:13:
4a:36:73:ce:e3:06:d2:05:48:08:ec:61:e5:ec:88:7b:68:45:
31:4d:ed:4a:85:c3:32:55:9b:40:e2:4c:90:20:ec:5b:a3:48:
b3:f7:26:99:24:64:cf:82:1b:78:d2:7d:cf:8d:65:65:ef:42:
7d:51:0f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZabK3bJOXSCk3mVFPCns9KNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjUwNTA0MTIwMDM4WhcNMjUwNTA1MTIwMDM4WjAzMTEwLwYDVQQD
EyhiODBmYjM2ZDU0MjkzMTcxODViNzdhM2QyN2I4MWIyZTdkYmNjOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugJk4D90BV1PQZt712vYh3eSujgy
MKEBLVZhKRaacZs4bIzSxu2dk9A9GjNJObpsVSfc4hjeuGfeumo7AoiK0HKNLxnG
LNfgtcpM2/rppWQ2aDXydZuXT16qrP3KUKFRJ66gAr+5bwyiHEIiyT0W3ZYXOmpq
ms9sbnGMc5KaftXjL9w4WtbdC2Hcjodqbap1BjmNay/wdOhL0iT/shIvX5za9AMa
1087S/tL2K+ng0gFJMs1OUWBHp8w2MKg/tJMPC0s/WYxqznsmRtETPzp4RlsQvIo
SNPs0hOg2DkRv23m/4KdGFIllH6TOgQSgOuePaETJwFFyPmF45Bab4JeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgPs21UKTFxhbd6PSe4Gy59vMnSMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0419lbn
QUx0jcjWaZuJd2J0bR/BYRMGjWpGRtXlnF/hqW4xHiYCM0ux8ElgFJyVveYw/8CO
jDUGJdq1Cd6lPcSPqOX62D58nFOkhlLYlJ9iKyiT6YsLcAuOHGLSrKVFdW1KZcyR
4FxQbx7Xg4dJyJVUwsZL5fyW9WPeuaBpqREO5yvXwWKw+A0oQ2qmbZvg2vgnvvqW
R8ia9/as39a5h7Q5HrS1dDl6GflMFg8NiLGJMajy0XHfBHuBSCUdCEcbfgpIhvwT
SjZzzuMG0gVICOxh5eyIe2hFMU3tSoXDMlWbQOJMkCDsW6NIs/cmmSRkz4IbeNJ9
z41lZe9CfVEPNg==
-----END CERTIFICATE-----
Generated at Sun May 4 15:27:31 2025 by rpki-client