Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: yYzXtwCkU5bArSCPUXou6jsQvcfAgJhz/5t6bsXRYOo=
Subject key identifier: 77:E1:2B:FB:E5:55:4B:6E:0E:2C:FE:B8:AA:A9:1A:59:DB:EF:4B:48
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 0196BC004FB12C0BCCA0B68892279DF10E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1144
Signing time: Sat 10 May 2025 21:00:58 +0000
Manifest this update: Sat 10 May 2025 21:00:58 +0000
Manifest next update: Sun 11 May 2025 21:00:58 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: UkAUwnVrjWrykabVV2mvh7KIa1su7SVzW9ZXVz5B2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:4f:b1:2c:0b:cc:a0:b6:88:92:27:9d:f1:0e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: May 10 21:00:58 2025 GMT
Not After : May 11 21:00:58 2025 GMT
Subject: CN=77e12bfbe5554b6e0e2cfeb8aaa91a59dbef4b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:55:dc:1a:fd:d5:d5:02:2d:03:d9:05:97:27:
c9:4f:50:69:55:40:ac:2d:bf:75:d9:66:1d:8a:c7:
a2:b4:be:57:77:42:ae:5b:6b:08:39:0c:71:cd:35:
c1:66:0e:54:0a:e0:48:bd:ae:9e:8e:68:91:a9:3b:
49:4d:a2:d6:65:28:3e:cf:38:70:ad:be:50:d4:76:
db:e4:b5:c4:9e:94:95:37:34:fd:ce:a9:e9:50:e4:
9b:15:bd:5f:f0:b7:4c:95:18:da:41:59:5b:3b:f2:
c7:55:d4:e8:ab:59:38:dd:36:33:e2:88:2e:79:8f:
3c:97:42:d8:4d:50:5f:ca:fe:cc:33:63:6e:bd:7d:
52:6b:e2:7a:82:46:36:f9:37:32:90:f7:ba:c5:45:
42:24:02:cd:bd:74:b0:84:09:ec:86:ae:19:67:c0:
96:02:c7:ed:c9:02:7f:58:ca:b9:24:5b:b1:a2:9d:
a6:f0:9c:8c:05:11:46:4e:87:57:27:a0:e8:19:8b:
e3:b4:16:f6:09:9e:a3:23:fc:d4:12:74:5e:bd:2f:
26:5b:5a:d2:b0:72:2e:11:8d:d0:58:dc:85:6a:8d:
07:61:98:88:15:e6:34:db:bd:22:7b:5a:dd:06:c2:
3b:81:0c:a8:81:dc:85:f9:9e:85:bc:3a:46:82:35:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:2B:FB:E5:55:4B:6E:0E:2C:FE:B8:AA:A9:1A:59:DB:EF:4B:48
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9f:12:b1:1e:fa:b2:0d:bc:b0:44:27:6c:c1:0d:bd:2e:1d:
aa:b3:aa:23:1b:15:18:9a:d6:e5:d7:45:ab:e0:fc:08:45:cc:
df:1c:11:ac:c7:d3:d1:0b:95:49:5e:b1:07:a2:5e:ac:d8:c2:
08:ce:01:7b:f7:bd:ef:a9:8b:89:49:4c:35:95:a9:2c:4f:13:
36:58:90:ad:08:4b:84:65:13:ec:1c:6f:49:f8:56:22:4a:10:
2c:d9:a5:ba:28:a5:ec:f2:d1:1b:b4:12:8a:fe:ce:8a:07:ce:
44:69:2a:59:3a:85:0b:63:9b:46:4a:a9:44:57:fc:6b:ff:66:
7e:95:c4:5f:51:18:ff:df:f4:66:02:af:f9:19:90:2c:b9:bc:
46:36:3a:9f:00:55:d8:3e:5e:40:d7:6a:b5:81:8b:8c:21:e0:
ef:a3:34:06:98:5a:da:8e:64:40:db:7f:7f:06:a6:33:79:9f:
39:33:b0:db:0c:e7:11:4e:a3:0f:5b:2b:5a:20:dd:08:0b:26:
1b:17:e6:11:7b:28:b2:2f:c5:b9:fa:d7:bc:2b:41:32:2f:b3:
4c:f6:6b:42:d6:86:49:fb:2c:dd:77:22:f5:56:82:2e:6c:a8:
86:0e:2a:a2:ee:11:2a:e9:bf:0b:48:31:76:e5:3f:7b:77:55:
85:ab:c3:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8AE+xLAvMoLaIkied8Q4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5
YWY2OGIwHhcNMjUwNTEwMjEwMDU4WhcNMjUwNTExMjEwMDU4WjAzMTEwLwYDVQQD
Eyg3N2UxMmJmYmU1NTU0YjZlMGUyY2ZlYjhhYWE5MWE1OWRiZWY0YjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51XcGv3V1QItA9kFlyfJT1BpVUCs
Lb912WYdiseitL5Xd0KuW2sIOQxxzTXBZg5UCuBIva6ejmiRqTtJTaLWZSg+zzhw
rb5Q1Hbb5LXEnpSVNzT9zqnpUOSbFb1f8LdMlRjaQVlbO/LHVdToq1k43TYz4ogu
eY88l0LYTVBfyv7MM2NuvX1Sa+J6gkY2+TcykPe6xUVCJALNvXSwhAnshq4ZZ8CW
AsftyQJ/WMq5JFuxop2m8JyMBRFGTodXJ6DoGYvjtBb2CZ6jI/zUEnRevS8mW1rS
sHIuEY3QWNyFao0HYZiIFeY0270ie1rdBsI7gQyogdyF+Z6FvDpGgjXzIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfhK/vlVUtuDiz+uKqpGlnb70tIMB8GA1UdIwQY
MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt
MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj
LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl58SsR76
sg28sEQnbMENvS4dqrOqIxsVGJrW5ddFq+D8CEXM3xwRrMfT0QuVSV6xB6JerNjC
CM4Be/e976mLiUlMNZWpLE8TNliQrQhLhGUT7BxvSfhWIkoQLNmluiil7PLRG7QS
iv7OigfORGkqWTqFC2ObRkqpRFf8a/9mfpXEX1EY/9/0ZgKv+RmQLLm8RjY6nwBV
2D5eQNdqtYGLjCHg76M0Bpha2o5kQNt/fwamM3mfOTOw2wznEU6jD1srWiDdCAsm
GxfmEXsosi/FufrXvCtBMi+zTPZrQtaGSfss3Xci9VaCLmyohg4qou4RKum/C0gx
duU/e3dVhavDVg==
-----END CERTIFICATE-----
Generated at Sun May 11 05:36:36 2025 by rpki-client