Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: qaL0RN2WncZ2N9FyucZxfIc2N1lq7ls7ThAhAcs2q40=
Subject key identifier: 06:AF:FD:3F:4F:4F:49:CA:A7:A3:BC:24:C2:E6:23:1C:95:39:0A:3D
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01967E3411614E49B699CFB51F1B3F72B050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0E28
Signing time: Mon 28 Apr 2025 21:01:03 +0000
Manifest this update: Mon 28 Apr 2025 21:01:03 +0000
Manifest next update: Tue 29 Apr 2025 21:01:03 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: aAbj3jvsYPOE+aYwGCx1AOV5Y2dCGq5AwwPU88rb3Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:11:61:4e:49:b6:99:cf:b5:1f:1b:3f:72:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Apr 28 21:01:03 2025 GMT
Not After : Apr 29 21:01:03 2025 GMT
Subject: CN=06affd3f4f4f49caa7a3bc24c2e6231c95390a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:b6:f3:25:12:88:b1:a1:48:71:69:89:23:
50:81:91:1e:83:28:ad:91:16:28:7f:77:6f:fd:1c:
36:0c:4e:67:01:80:75:99:b0:c8:b0:2a:95:98:17:
6d:a3:63:bb:ff:ac:54:77:e5:f8:75:28:02:2e:ad:
be:c8:28:e0:b9:60:6d:94:8b:bb:34:84:3c:35:1e:
e9:34:6c:40:21:d1:12:fd:e0:2b:aa:6b:55:3f:29:
49:5c:e2:95:9d:bf:82:f7:d0:24:e8:24:af:1f:7c:
6f:88:cb:3d:98:a8:83:b3:29:7c:ac:eb:18:34:93:
92:7b:6f:5f:d2:a2:90:29:8e:c0:11:b4:33:32:2e:
77:ba:44:62:0f:a6:64:38:d1:cf:b9:53:2b:a7:63:
02:05:3c:30:bf:dd:d6:fb:90:bf:ee:9d:e5:b0:85:
01:73:1b:eb:56:5f:34:81:a6:ff:54:5d:8a:e7:fa:
09:75:d6:22:4c:85:cc:ac:d9:75:70:3d:41:b0:80:
d5:e3:d0:67:a5:f2:81:8b:75:c9:99:06:81:76:9c:
e8:c1:b2:79:b9:ab:38:73:e3:b0:a2:47:d8:7b:cf:
e0:63:1d:73:88:c7:a4:7e:06:02:82:9d:d4:51:8f:
3b:1d:ba:fd:57:d4:cb:8d:d1:14:25:65:4c:20:de:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AF:FD:3F:4F:4F:49:CA:A7:A3:BC:24:C2:E6:23:1C:95:39:0A:3D
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c4:6c:c1:26:2e:70:10:fb:e3:a2:2f:55:b7:04:0b:47:26:
7a:97:62:e9:53:3b:c7:6b:58:45:75:3e:e2:66:b9:5e:20:48:
2f:b3:db:7c:86:1a:fb:af:4c:0b:8b:8b:64:9b:7a:92:ca:57:
96:c3:62:10:f3:4a:2d:1a:90:5b:c4:47:f9:26:66:b3:72:3a:
77:5c:97:b7:98:71:ff:b3:8e:4d:cd:e4:3b:83:24:b5:f2:32:
2f:c4:55:24:f7:76:1d:53:0e:19:91:db:d9:d8:a6:1f:d2:79:
97:32:c0:38:6a:64:52:f0:59:a8:26:ec:95:f3:27:5d:e3:12:
92:71:dc:24:24:34:eb:7f:26:f1:b1:f3:e2:46:7e:45:da:66:
dd:58:3d:42:05:1a:a9:66:6d:af:e7:34:e0:63:4a:3b:6d:79:
b4:68:3f:00:e7:1a:6f:00:6d:9f:42:0b:74:45:4a:c0:26:53:
dc:b5:d7:fb:c7:3d:e7:07:3b:ed:51:e7:f7:b9:41:4d:c2:44:
e3:42:06:8d:16:1c:e1:76:73:84:cc:10:26:0c:65:66:9e:40:
42:7a:8b:8c:8e:1e:53:c7:ef:60:bc:92:1c:fe:ea:2a:79:d7:
3a:d4:b4:62:6f:da:43:9d:dd:62:82:ec:87:2a:d8:b8:7c:c5:
dd:b9:6f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+NBFhTkm2mc+1Hxs/crBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1
YzUwM2EwHhcNMjUwNDI4MjEwMTAzWhcNMjUwNDI5MjEwMTAzWjAzMTEwLwYDVQQD
EygwNmFmZmQzZjRmNGY0OWNhYTdhM2JjMjRjMmU2MjMxYzk1MzkwYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9228yUSiLGhSHFpiSNQgZEegyit
kRYof3dv/Rw2DE5nAYB1mbDIsCqVmBdto2O7/6xUd+X4dSgCLq2+yCjguWBtlIu7
NIQ8NR7pNGxAIdES/eArqmtVPylJXOKVnb+C99Ak6CSvH3xviMs9mKiDsyl8rOsY
NJOSe29f0qKQKY7AEbQzMi53ukRiD6ZkONHPuVMrp2MCBTwwv93W+5C/7p3lsIUB
cxvrVl80gab/VF2K5/oJddYiTIXMrNl1cD1BsIDV49BnpfKBi3XJmQaBdpzowbJ5
uas4c+OwokfYe8/gYx1ziMekfgYCgp3UUY87Hbr9V9TLjdEUJWVMIN5qhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAav/T9PT0nKp6O8JMLmIxyVOQo9MB8GA1UdIwQY
MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt
MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0
LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8RswSYu
cBD746IvVbcEC0cmepdi6VM7x2tYRXU+4ma5XiBIL7PbfIYa+69MC4uLZJt6kspX
lsNiEPNKLRqQW8RH+SZms3I6d1yXt5hx/7OOTc3kO4MktfIyL8RVJPd2HVMOGZHb
2dimH9J5lzLAOGpkUvBZqCbslfMnXeMSknHcJCQ0638m8bHz4kZ+Rdpm3Vg9QgUa
qWZtr+c04GNKO215tGg/AOcabwBtn0ILdEVKwCZT3LXX+8c95wc77VHn97lBTcJE
40IGjRYc4XZzhMwQJgxlZp5AQnqLjI4eU8fvYLySHP7qKnnXOtS0Ym/aQ53dYoLs
hyrYuHzF3blvrQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:17:37 2025 by rpki-client