Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: Zg/TcksxqCZd7BprNrXv0ZKlGhALryWqVemzomgpqcA=
Subject key identifier: 70:DE:E9:4B:9F:C7:FD:47:08:D3:1E:3D:39:26:CA:7D:A3:55:66:B5
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 0196CBAA2ED1F2A668E76DFE38D0B07C9DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 0143
Signing time: Tue 13 May 2025 22:00:50 +0000
Manifest this update: Tue 13 May 2025 22:00:50 +0000
Manifest next update: Wed 14 May 2025 22:00:50 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: 6fQly2z3IcQTwqYxI1FaUKA0qjeme1D/Qsq988cInmg=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:2e:d1:f2:a6:68:e7:6d:fe:38:d0:b0:7c:9d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: May 13 22:00:50 2025 GMT
Not After : May 14 22:00:50 2025 GMT
Subject: CN=70dee94b9fc7fd4708d31e3d3926ca7da35566b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:15:51:03:f3:1a:fa:ae:c3:b2:a3:5c:8a:3d:
4e:b2:d2:d0:15:07:4b:9d:a5:89:3b:26:2e:42:d7:
af:96:3c:55:68:98:1e:94:21:8d:bf:13:2a:ae:88:
2b:33:ba:dd:42:84:a0:c4:fe:75:73:e8:b0:9e:00:
e4:3d:ed:f5:fb:49:28:67:08:f9:0b:a4:a0:33:c2:
9e:1f:0d:d2:cd:9c:bb:1a:49:00:f7:2e:7a:b2:fb:
e2:9c:54:41:d2:ea:b6:ba:11:f7:8b:81:79:6e:1e:
f0:6e:4e:1c:8e:1d:f9:0f:8b:6d:fc:fa:9f:29:65:
f2:16:67:2d:d1:5d:f7:1d:b7:c4:29:a5:e4:3c:f8:
75:93:06:11:17:b3:77:b3:24:1b:93:88:f1:09:89:
7e:4d:46:9c:d0:92:77:4a:3a:c7:fc:15:10:ab:71:
5e:9e:8e:f2:f0:11:b7:8b:5d:bd:19:b8:09:52:0c:
c6:3a:47:df:0c:22:11:f5:6e:cc:85:10:7d:1d:58:
94:b7:76:c5:12:f9:64:11:db:48:53:da:25:6b:d0:
89:00:2b:18:cf:3d:ee:bf:1b:d3:fb:b9:b2:dc:4c:
1a:c0:2d:51:12:f5:c8:f1:8a:24:5c:b4:88:79:21:
fa:9d:ba:db:6f:8e:77:ec:ea:6a:98:b4:49:2b:ec:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:E9:4B:9F:C7:FD:47:08:D3:1E:3D:39:26:CA:7D:A3:55:66:B5
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:19:6c:d6:c3:1e:8a:71:21:48:17:d8:58:75:db:fc:93:84:
0f:95:e1:6b:ce:56:37:6c:ae:46:c2:98:d0:6a:bc:e7:de:21:
fa:ac:32:74:ba:7e:18:9f:a6:cf:7d:5d:ec:c3:3a:25:3d:c3:
22:a1:e5:03:9c:62:52:5c:5f:52:09:f9:81:71:4b:30:59:1c:
ae:d0:46:4c:4f:aa:3e:75:a9:03:b0:7d:d1:dc:79:dd:cf:b2:
d8:49:9c:f4:08:42:79:25:18:92:c5:0f:a7:af:af:a6:bd:9e:
41:87:19:46:2c:31:fe:7f:37:63:24:d2:0c:da:31:0f:b1:b4:
cd:fc:47:b4:65:17:b2:24:c6:1f:7d:24:79:0d:99:f0:99:85:
ad:3b:1b:8d:d1:c0:09:61:9d:fd:d7:31:6d:04:59:f5:cb:e4:
31:cb:57:5c:3b:6c:38:25:67:a3:50:7b:7a:4a:92:d9:b5:b3:
e9:6f:4f:5b:7a:04:28:40:58:53:89:09:c7:4b:be:55:eb:cf:
b9:ff:a8:79:56:ef:80:2a:62:77:b9:82:37:ce:23:bc:81:26:
bc:0a:f8:4a:2c:8d:1f:c7:aa:48:97:50:b3:05:81:bd:a8:c6:
81:5f:ec:7b:45:ed:7e:59:14:f8:db:38:d8:c0:10:03:89:fb:
d3:0f:cf:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLqi7R8qZo523+ONCwfJ3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkM2FiOTU4NDc2OWIzNGM2OTVlMGVmM2JlNDAwZGU1Yzg3
MDVmNTgwHhcNMjUwNTEzMjIwMDUwWhcNMjUwNTE0MjIwMDUwWjAzMTEwLwYDVQQD
Eyg3MGRlZTk0YjlmYzdmZDQ3MDhkMzFlM2QzOTI2Y2E3ZGEzNTU2NmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BVRA/Ma+q7DsqNcij1OstLQFQdL
naWJOyYuQtevljxVaJgelCGNvxMqrogrM7rdQoSgxP51c+iwngDkPe31+0koZwj5
C6SgM8KeHw3SzZy7GkkA9y56svvinFRB0uq2uhH3i4F5bh7wbk4cjh35D4tt/Pqf
KWXyFmct0V33HbfEKaXkPPh1kwYRF7N3syQbk4jxCYl+TUac0JJ3SjrH/BUQq3Fe
no7y8BG3i129GbgJUgzGOkffDCIR9W7MhRB9HViUt3bFEvlkEdtIU9ola9CJACsY
zz3uvxvT+7my3EwawC1REvXI8YokXLSIeSH6nbrbb4537OpqmLRJK+zLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDe6Uufx/1HCNMePTkmyn2jVWa1MB8GA1UdIwQY
MBaAFP06uVhHabNMaV4O875ADeXIcF9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgt
MDZmYWYxNDk2NjkzLzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgtMDZmYWYxNDk2Njkz
LzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxls1sMe
inEhSBfYWHXb/JOED5Xha85WN2yuRsKY0Gq8594h+qwydLp+GJ+mz31d7MM6JT3D
IqHlA5xiUlxfUgn5gXFLMFkcrtBGTE+qPnWpA7B90dx53c+y2Emc9AhCeSUYksUP
p6+vpr2eQYcZRiwx/n83YyTSDNoxD7G0zfxHtGUXsiTGH30keQ2Z8JmFrTsbjdHA
CWGd/dcxbQRZ9cvkMctXXDtsOCVno1B7ekqS2bWz6W9PW3oEKEBYU4kJx0u+VevP
uf+oeVbvgCpid7mCN84jvIEmvAr4SiyNH8eqSJdQswWBvajGgV/se0XtflkU+Ns4
2MAQA4n70w/PRQ==
-----END CERTIFICATE-----
Generated at Wed May 14 00:15:04 2025 by rpki-client