Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: uzPEBQIP2CUIk9ywoWEQFMJ+ITD6WyO1wqloSPmtcj4=
Subject key identifier: 46:4E:98:E8:76:58:A5:E3:C3:7E:03:DF:67:B1:6B:43:E8:0B:B6:AB
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 019671C1ECDE10282130E8BD967344B9B7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 14E1
Signing time: Sat 26 Apr 2025 11:00:56 +0000
Manifest this update: Sat 26 Apr 2025 11:00:56 +0000
Manifest next update: Sun 27 Apr 2025 11:00:56 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: g5Uoag6M4vCu7dJYWVycSYm4rUU.roa (hash: Ngolk11LXJPCpKR9MzzdDkX8Nba8dwgngUE2uQJceUA=)
4: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
5: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: Dqgb6JaC32r0MjajPWqVCvUsZi3phT/t0iUun0A821c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:ec:de:10:28:21:30:e8:bd:96:73:44:b9:b7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Apr 26 11:00:56 2025 GMT
Not After : Apr 27 11:00:56 2025 GMT
Subject: CN=464e98e87658a5e3c37e03df67b16b43e80bb6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:4a:02:da:b6:fd:2d:dd:47:4a:45:b1:41:
d8:d8:08:d3:7b:de:12:9d:1b:9d:1d:2e:37:c5:af:
92:fa:d2:94:66:e2:f9:1a:e6:71:5d:ad:68:d5:3a:
0f:15:1b:bf:8f:cf:19:af:7b:28:fa:c4:31:8e:cb:
b9:89:b7:30:fe:c9:1c:25:dc:ae:33:50:ca:ec:df:
9a:8b:b9:f8:05:14:ca:ef:56:90:dd:7e:42:6d:f3:
b4:58:9e:71:14:55:dc:dc:3b:9c:55:54:12:64:34:
ca:12:da:44:eb:0a:b3:16:84:e5:82:29:34:f2:a6:
ac:89:2a:23:66:f5:e3:55:12:ed:99:78:72:ba:85:
84:fd:14:cd:62:0b:df:ba:75:e5:ce:28:2a:df:cd:
75:59:30:8d:08:cb:d5:a0:ef:90:19:73:a3:12:e5:
69:be:57:eb:3e:d3:1a:0c:3d:99:06:00:0c:be:1b:
70:66:01:53:6c:90:66:f4:5b:7e:c3:e6:17:18:e7:
4f:3f:16:30:52:c7:63:b1:97:42:53:a7:c9:82:8e:
dc:39:8f:87:ce:bf:20:86:36:c9:d2:e4:15:3f:b3:
12:e9:14:32:4d:86:e1:f7:04:eb:d5:21:87:19:e9:
2e:fa:cc:83:ec:6d:36:44:26:ca:9c:1a:77:cb:7b:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:98:E8:76:58:A5:E3:C3:7E:03:DF:67:B1:6B:43:E8:0B:B6:AB
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9d:5a:8b:2a:45:f8:05:98:47:f7:ff:a4:ed:55:2f:b3:bb:
cb:28:0e:a9:d3:22:2e:1f:c5:ed:05:25:0e:aa:b0:cd:5c:d5:
9e:f3:0d:33:a0:13:eb:f1:9c:c9:95:2e:64:85:73:6e:fc:01:
94:11:d5:ab:59:1a:69:b6:79:16:d3:07:97:79:c3:8e:98:83:
81:23:0c:db:43:af:8c:63:ca:e2:cd:37:1d:a9:27:7c:2a:1e:
a3:3b:6f:82:09:96:36:bb:27:de:16:1e:7c:9d:75:c9:b0:25:
fe:75:1a:31:98:b7:22:7b:85:8c:fd:d6:18:ca:28:e6:de:26:
9e:e6:cd:be:48:8f:04:50:2b:a0:3d:66:26:d7:a7:57:fc:33:
ff:65:24:bf:f9:a3:47:03:cb:20:11:8c:c7:94:0d:77:30:03:
c1:f8:50:99:4c:06:3d:88:2b:c8:d3:bc:41:18:cb:e9:a3:d2:
7f:84:10:5d:0a:fe:a5:ec:18:2a:ed:eb:09:fa:cd:23:b9:82:
94:de:c4:da:a4:35:f4:2a:ff:94:a1:e6:87:93:f1:a8:5a:5b:
45:05:6b:23:0a:d2:53:4b:82:07:d9:10:52:11:7a:9c:9a:27:
1a:5b:6e:3a:5b:d0:c8:26:19:d5:2e:8b:9b:b3:04:5e:14:2e:
7d:cc:c5:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwezeECghMOi9lnNEubfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTIwODVjN2RlM2I1OTgyMTZiODlmYjBmMmIxZDkzMGRl
NjZjMTkwHhcNMjUwNDI2MTEwMDU2WhcNMjUwNDI3MTEwMDU2WjAzMTEwLwYDVQQD
Eyg0NjRlOThlODc2NThhNWUzYzM3ZTAzZGY2N2IxNmI0M2U4MGJiNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5udKAtq2/S3dR0pFsUHY2AjTe94S
nRudHS43xa+S+tKUZuL5GuZxXa1o1ToPFRu/j88Zr3so+sQxjsu5ibcw/skcJdyu
M1DK7N+ai7n4BRTK71aQ3X5CbfO0WJ5xFFXc3DucVVQSZDTKEtpE6wqzFoTlgik0
8qasiSojZvXjVRLtmXhyuoWE/RTNYgvfunXlzigq3811WTCNCMvVoO+QGXOjEuVp
vlfrPtMaDD2ZBgAMvhtwZgFTbJBm9Ft+w+YXGOdPPxYwUsdjsZdCU6fJgo7cOY+H
zr8ghjbJ0uQVP7MS6RQyTYbh9wTr1SGHGeku+syD7G02RCbKnBp3y3umPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZOmOh2WKXjw34D32exa0PoC7arMB8GA1UdIwQY
MBaAFLSiCFx947WYIWuJ+w8rHZMN5mwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAt
MzExNzk4OTYwMWFkLzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAtMzExNzk4OTYwMWFk
LzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp51aiypF
+AWYR/f/pO1VL7O7yygOqdMiLh/F7QUlDqqwzVzVnvMNM6AT6/GcyZUuZIVzbvwB
lBHVq1kaabZ5FtMHl3nDjpiDgSMM20OvjGPK4s03HaknfCoeoztvggmWNrsn3hYe
fJ11ybAl/nUaMZi3InuFjP3WGMoo5t4mnubNvkiPBFAroD1mJtenV/wz/2Ukv/mj
RwPLIBGMx5QNdzADwfhQmUwGPYgryNO8QRjL6aPSf4QQXQr+pewYKu3rCfrNI7mC
lN7E2qQ19Cr/lKHmh5PxqFpbRQVrIwrSU0uCB9kQUhF6nJonGltuOlvQyCYZ1S6L
m7MEXhQufczFow==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:49 2025 by rpki-client