Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: FvBUDH63laQMUO9pfz21IPzLCjUYNqhLWydVRZ/eUJU=
Subject key identifier: 60:10:D3:C4:E5:88:A4:44:CA:1B:8A:DD:B1:D3:76:55:61:AC:9C:2D
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 01967530287ACD7EA918EDD6A1FD20E4D971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 0D7E
Signing time: Sun 27 Apr 2025 03:00:12 +0000
Manifest this update: Sun 27 Apr 2025 03:00:12 +0000
Manifest next update: Mon 28 Apr 2025 03:00:12 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: LMUBfmyol/z3jgV8PoT7GdzMAJ9iNI4oaToLsA4+7rI=)
2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:28:7a:cd:7e:a9:18:ed:d6:a1:fd:20:e4:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Apr 27 03:00:12 2025 GMT
Not After : Apr 28 03:00:12 2025 GMT
Subject: CN=6010d3c4e588a444ca1b8addb1d3765561ac9c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:b4:05:40:79:83:f3:d0:23:f2:3e:48:7f:
d5:ce:26:fc:a9:34:10:49:b0:2b:e2:e7:ea:9f:3a:
bc:3c:9e:e9:b7:b5:cb:5d:bb:06:e2:f8:19:f8:57:
20:1b:24:0f:c5:0e:e7:17:bb:a2:98:a7:81:c5:bc:
30:41:78:dc:9e:9b:ca:88:c5:62:d2:13:ef:83:75:
ad:1d:f5:ed:1e:a3:c4:fc:fa:ee:91:b0:fc:2c:57:
7e:c7:e0:25:bb:d2:f5:fa:27:a8:2c:c2:1d:69:95:
fd:80:e8:56:25:c9:b1:f2:60:b0:41:73:38:e7:f0:
5c:aa:1c:64:10:f3:40:a1:d3:97:f4:e4:4c:7f:bd:
06:c9:2e:1c:52:4f:a6:55:c1:87:0d:45:30:44:4a:
8a:18:85:7e:c2:67:cb:3c:83:7a:e7:be:36:31:e3:
30:39:5e:08:5e:5d:70:87:e4:bd:c8:78:b9:7f:6a:
09:7c:b7:de:13:ad:d0:19:c4:9f:81:b1:df:96:70:
ac:a4:a9:b2:7a:0a:90:4f:38:52:7f:7e:4a:d8:c3:
76:81:17:c0:80:72:e9:65:bd:6a:93:85:1e:db:b4:
e5:72:48:42:5a:ae:3e:f2:bd:bc:4b:92:0b:61:ab:
15:a4:25:bf:04:45:23:6b:0b:0a:4a:a9:19:f5:3c:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:D3:C4:E5:88:A4:44:CA:1B:8A:DD:B1:D3:76:55:61:AC:9C:2D
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b6:6e:87:43:6c:a4:a0:9a:9f:de:74:e4:bc:7c:53:08:93:
57:47:47:e5:a3:ca:93:ab:12:a1:9a:5d:c2:34:a9:51:dd:68:
c4:c7:5c:05:02:40:15:1a:eb:54:51:27:51:82:6b:4c:8a:75:
1c:2f:72:3f:b6:a1:07:8f:94:7d:fb:93:c4:06:5d:9a:da:bb:
59:9b:85:77:aa:6e:f7:6e:a8:00:0c:ed:1d:cc:9d:32:12:23:
91:4a:90:73:fa:81:d7:ad:93:f2:5e:2f:46:f6:bc:9d:0c:74:
e1:73:4b:ef:f1:fe:c1:41:dd:2d:c2:b9:ac:41:91:8e:64:85:
38:8a:c3:80:57:4c:fd:7b:02:f1:77:72:e7:45:b1:a1:7a:56:
d3:0a:6e:f9:58:68:be:2c:13:2f:c8:4c:66:9b:d5:58:5e:70:
f1:c1:5f:2d:27:a7:f1:f2:f9:c7:c1:49:b4:7a:cf:3e:f7:00:
1f:e4:f9:26:00:b0:bc:6b:bc:3a:98:a7:16:33:bd:b3:c8:e2:
13:8b:00:25:3d:03:64:1f:4e:54:fb:64:39:22:f1:df:dd:38:
be:ce:83:c8:20:e5:43:e0:22:d5:c6:b0:54:f6:2d:a7:58:20:
c7:52:9b:00:5e:37:7a:ec:6f:d9:5b:03:a0:f7:31:94:d7:5f:
b8:aa:5f:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MCh6zX6pGO3Wof0g5NlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw
YjdhY2IwHhcNMjUwNDI3MDMwMDEyWhcNMjUwNDI4MDMwMDEyWjAzMTEwLwYDVQQD
Eyg2MDEwZDNjNGU1ODhhNDQ0Y2ExYjhhZGRiMWQzNzY1NTYxYWM5YzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbu0BUB5g/PQI/I+SH/Vzib8qTQQ
SbAr4ufqnzq8PJ7pt7XLXbsG4vgZ+FcgGyQPxQ7nF7uimKeBxbwwQXjcnpvKiMVi
0hPvg3WtHfXtHqPE/PrukbD8LFd+x+Alu9L1+ieoLMIdaZX9gOhWJcmx8mCwQXM4
5/BcqhxkEPNAodOX9ORMf70GyS4cUk+mVcGHDUUwREqKGIV+wmfLPIN65742MeMw
OV4IXl1wh+S9yHi5f2oJfLfeE63QGcSfgbHflnCspKmyegqQTzhSf35K2MN2gRfA
gHLpZb1qk4Ue27TlckhCWq4+8r28S5ILYasVpCW/BEUjawsKSqkZ9TxhvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAQ08TliKREyhuK3bHTdlVhrJwtMB8GA1UdIwQY
MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt
MzJlNTdiYzU0NzRiLzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi
LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbZuh0Ns
pKCan9505Lx8UwiTV0dH5aPKk6sSoZpdwjSpUd1oxMdcBQJAFRrrVFEnUYJrTIp1
HC9yP7ahB4+UffuTxAZdmtq7WZuFd6pu926oAAztHcydMhIjkUqQc/qB162T8l4v
Rva8nQx04XNL7/H+wUHdLcK5rEGRjmSFOIrDgFdM/XsC8Xdy50WxoXpW0wpu+Vho
viwTL8hMZpvVWF5w8cFfLSen8fL5x8FJtHrPPvcAH+T5JgCwvGu8OpinFjO9s8ji
E4sAJT0DZB9OVPtkOSLx3904vs6DyCDlQ+Ai1cawVPYtp1ggx1KbAF43euxv2VsD
oPcxlNdfuKpf0w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:11 2025 by rpki-client