Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: tjBwh8mMt9s6/vdNDCxnh/t7aMjbBNCTqz4sXB+nkJQ=
Subject key identifier: 64:0F:B9:3F:94:8C:B6:07:EE:76:C8:E1:61:3C:49:B4:85:89:75:56
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01969F7685F02BAABD4DC5DEE4D30DFFCAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 046E
Signing time: Mon 05 May 2025 08:01:06 +0000
Manifest this update: Mon 05 May 2025 08:01:06 +0000
Manifest next update: Tue 06 May 2025 08:01:06 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: UfRIHVUehD4M1Y0+whIHB4a12Yfv5f48HkTzrvQqpww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:85:f0:2b:aa:bd:4d:c5:de:e4:d3:0d:ff:ca:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: May 5 08:01:06 2025 GMT
Not After : May 6 08:01:06 2025 GMT
Subject: CN=640fb93f948cb607ee76c8e1613c49b485897556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:53:4e:68:60:db:49:4b:3b:e9:28:d6:5b:
71:5c:3b:99:21:1b:84:20:ee:05:17:ae:ca:08:6f:
5b:99:a8:59:91:1c:dc:58:46:63:72:66:71:25:d4:
f2:e2:2f:a4:75:94:10:e2:7a:a9:14:7d:e5:88:f0:
a6:f8:77:59:36:58:ca:00:45:aa:22:2f:ca:94:5a:
a5:9f:93:72:a9:3b:1e:a0:8f:97:82:99:8c:72:4b:
8b:c8:f9:3f:0b:e4:f8:30:11:29:12:60:59:8a:70:
be:a8:2d:8b:6d:f1:db:e0:79:91:77:c8:4e:97:f9:
52:76:97:e6:30:67:1d:0e:c6:13:ee:f5:b9:2b:c8:
f6:a0:07:95:d1:ea:ce:89:71:2f:03:4b:3d:c2:86:
18:7d:e2:25:bc:52:73:be:4d:92:3e:a4:a6:ef:c0:
e8:bc:2d:3b:e5:b6:1c:f3:f8:a9:49:c2:4b:2b:2c:
ca:4e:29:71:f8:c2:82:ab:eb:87:0e:61:a0:c1:cf:
89:11:78:42:76:3d:97:73:e3:f4:1b:01:25:d2:4d:
e1:9b:62:fd:56:bf:f6:6d:79:4a:94:d3:ee:74:5b:
8e:14:25:bb:8b:1c:72:9b:aa:17:5f:14:da:92:35:
58:3d:ca:e5:f8:58:a4:59:fa:bc:dd:fb:d8:d8:20:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0F:B9:3F:94:8C:B6:07:EE:76:C8:E1:61:3C:49:B4:85:89:75:56
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ad:cb:c2:f1:3a:b8:ca:df:4a:ae:91:37:ba:02:fd:72:9f:
7c:1a:d6:b1:94:1d:77:ea:73:4e:fa:bf:02:11:79:0e:60:e1:
5c:05:37:77:75:51:31:38:73:1f:94:73:e7:9b:7c:76:07:76:
2c:9f:a0:21:57:fb:3d:6f:49:95:a9:aa:c3:35:13:ea:02:f2:
0e:d8:a8:0a:23:54:65:4c:8e:e1:cf:20:2c:cd:a5:27:b9:61:
65:ef:e7:39:17:f5:4d:b1:3c:4c:8f:7d:99:12:df:3c:0e:52:
e2:f0:bf:fc:c7:d5:fb:8b:b9:67:c4:d6:12:12:05:a8:ec:74:
fd:3d:af:e0:89:06:03:0f:36:1d:29:8f:a2:99:67:42:15:51:
b4:99:6c:17:86:6f:7e:e0:90:f1:23:44:9c:23:9b:2a:ef:15:
c5:41:83:d5:81:ce:d2:76:26:60:43:98:10:5c:2d:cd:d3:c8:
9c:fa:1c:95:b5:2f:b3:d8:6b:be:1e:04:a7:c6:af:d3:be:fc:
c0:9a:05:7b:d8:cd:10:b4:35:5f:b9:3f:ca:ec:62:a1:c7:b3:
12:bd:ab:49:bc:ce:a0:48:b9:80:0e:4a:c4:5b:3d:17:75:35:
e0:e6:f3:73:70:3e:89:64:b2:21:ed:8d:8c:70:85:a9:04:ba:
36:4c:a9:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafdoXwK6q9TcXe5NMN/8rmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh
YzBiNTQwHhcNMjUwNTA1MDgwMTA2WhcNMjUwNTA2MDgwMTA2WjAzMTEwLwYDVQQD
Eyg2NDBmYjkzZjk0OGNiNjA3ZWU3NmM4ZTE2MTNjNDliNDg1ODk3NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt1TTmhg20lLO+ko1ltxXDuZIRuE
IO4FF67KCG9bmahZkRzcWEZjcmZxJdTy4i+kdZQQ4nqpFH3liPCm+HdZNljKAEWq
Ii/KlFqln5NyqTseoI+XgpmMckuLyPk/C+T4MBEpEmBZinC+qC2LbfHb4HmRd8hO
l/lSdpfmMGcdDsYT7vW5K8j2oAeV0erOiXEvA0s9woYYfeIlvFJzvk2SPqSm78Do
vC075bYc8/ipScJLKyzKTilx+MKCq+uHDmGgwc+JEXhCdj2Xc+P0GwEl0k3hm2L9
Vr/2bXlKlNPudFuOFCW7ixxym6oXXxTakjVYPcrl+FikWfq83fvY2CDj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQPuT+UjLYH7nbI4WE8SbSFiXVWMB8GA1UdIwQY
MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt
ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2
LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq3LwvE6
uMrfSq6RN7oC/XKffBrWsZQdd+pzTvq/AhF5DmDhXAU3d3VRMThzH5Rz55t8dgd2
LJ+gIVf7PW9JlamqwzUT6gLyDtioCiNUZUyO4c8gLM2lJ7lhZe/nORf1TbE8TI99
mRLfPA5S4vC//MfV+4u5Z8TWEhIFqOx0/T2v4IkGAw82HSmPoplnQhVRtJlsF4Zv
fuCQ8SNEnCObKu8VxUGD1YHO0nYmYEOYEFwtzdPInPoclbUvs9hrvh4Ep8av0778
wJoFe9jNELQ1X7k/yuxiocezEr2rSbzOoEi5gA5KxFs9F3U14Obzc3A+iWSyIe2N
jHCFqQS6Nkyplw==
-----END CERTIFICATE-----
Generated at Mon May 5 17:15:34 2025 by rpki-client