Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: 46nJICwLu7wqskelYL5VsNkUZQKukpPAmKlJEll2MVo=
Subject key identifier: 66:79:C1:DB:82:D0:4C:09:E9:68:96:20:49:95:91:4F:3C:8F:C6:6C
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 0196C20259EE67E0AC144EE1CEDC08EC3598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 1474
Signing time: Mon 12 May 2025 01:00:56 +0000
Manifest this update: Mon 12 May 2025 01:00:56 +0000
Manifest next update: Tue 13 May 2025 01:00:56 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: 5mYCTxbqQLWdwjeZRFyq0noz4AGAWQ3uuPT84gPpOzM=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:59:ee:67:e0:ac:14:4e:e1:ce:dc:08:ec:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: May 12 01:00:56 2025 GMT
Not After : May 13 01:00:56 2025 GMT
Subject: CN=6679c1db82d04c09e96896204995914f3c8fc66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:ed:b2:a4:cc:a4:34:7a:9f:e1:64:7f:c9:
65:ad:e1:c3:2e:c7:b5:47:1f:dd:ba:97:9f:b8:cf:
e0:5d:16:17:02:d0:71:c8:37:0f:5a:6f:96:50:8b:
fc:41:38:88:29:23:fd:f5:45:51:9d:77:b8:4f:79:
9e:9d:29:e1:22:5e:f5:cf:f7:7b:af:7c:7d:9c:28:
da:1f:3f:c8:7b:5f:0a:e4:9a:8f:0c:c2:b4:4b:4b:
d0:bd:6d:c5:c5:56:f1:81:86:b8:14:6b:ad:ef:36:
eb:d0:c2:21:80:54:d0:21:f0:f6:90:32:11:5a:df:
85:8c:54:d3:4b:b8:52:6e:26:de:38:8e:e7:8d:9e:
20:45:24:e5:98:c1:b0:d5:d8:64:41:e5:d1:ce:49:
da:9f:29:74:25:05:3c:32:40:9a:0e:6c:f1:f0:74:
17:e8:1d:97:ae:af:87:c6:74:b5:43:1e:60:41:1a:
bb:c2:a0:36:b3:b0:e0:2f:a7:d1:3a:24:21:fc:6d:
92:4f:ee:4e:81:41:a4:2c:9c:32:a7:2c:8e:a6:9a:
73:3f:d8:e9:0d:7a:dc:32:19:1e:c0:f0:68:20:bb:
34:ee:38:3c:bc:fb:6a:f9:02:cd:d0:67:6b:50:4b:
be:e9:85:71:f9:4f:f5:db:1b:6d:4e:49:30:a8:e0:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:C1:DB:82:D0:4C:09:E9:68:96:20:49:95:91:4F:3C:8F:C6:6C
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:ab:16:04:18:7f:7d:62:63:17:b1:80:9c:97:b2:87:3e:
2d:32:57:97:87:a7:6e:93:52:81:09:04:6b:e9:fc:7e:49:f9:
a4:24:59:7b:b3:a3:15:d1:d5:a2:e8:91:db:30:a2:e2:7b:a6:
eb:56:83:4f:c8:ff:24:46:2f:26:a9:4c:b5:a9:d8:92:a3:22:
af:68:db:1f:ef:83:de:66:a4:79:2c:a8:6e:90:db:e4:82:65:
51:9f:a1:5e:72:6b:a6:92:bf:7d:94:21:2a:b9:16:0f:c0:e5:
54:f3:ac:d1:6b:83:a3:fb:db:75:aa:69:16:1f:85:44:ff:b1:
b2:e6:16:91:21:30:4e:91:c5:59:cd:9b:a9:d7:dd:df:4e:a7:
19:ed:53:5e:07:90:a8:da:e5:7a:79:27:ce:8f:f5:c1:df:f0:
25:8e:de:13:0d:a6:16:2b:2c:68:aa:cb:f2:45:6b:ee:5d:60:
f8:b3:c0:78:67:76:b6:df:56:f3:4d:80:f6:42:85:aa:8b:c1:
d5:41:94:ed:c6:2a:a7:2d:04:04:f6:0c:7e:4c:cd:00:e9:4d:
af:1a:99:02:ed:c9:09:59:8f:79:38:4c:a1:b9:5d:65:90:1f:
a7:16:93:3e:01:10:1d:32:8d:d3:17:28:34:43:be:fc:af:4f:
55:28:1a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAlnuZ+CsFE7hztwI7DWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODA0NWNjZjUwOTc3ZWJjMzA2NmEzY2VlZDhmZDMyZjFm
MDIzZGUwHhcNMjUwNTEyMDEwMDU2WhcNMjUwNTEzMDEwMDU2WjAzMTEwLwYDVQQD
Eyg2Njc5YzFkYjgyZDA0YzA5ZTk2ODk2MjA0OTk1OTE0ZjNjOGZjNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4/tsqTMpDR6n+Fkf8llreHDLse1
Rx/dupefuM/gXRYXAtBxyDcPWm+WUIv8QTiIKSP99UVRnXe4T3menSnhIl71z/d7
r3x9nCjaHz/Ie18K5JqPDMK0S0vQvW3FxVbxgYa4FGut7zbr0MIhgFTQIfD2kDIR
Wt+FjFTTS7hSbibeOI7njZ4gRSTlmMGw1dhkQeXRzknanyl0JQU8MkCaDmzx8HQX
6B2Xrq+HxnS1Qx5gQRq7wqA2s7DgL6fROiQh/G2ST+5OgUGkLJwypyyOpppzP9jp
DXrcMhkewPBoILs07jg8vPtq+QLN0GdrUEu+6YVx+U/12xttTkkwqOAh2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ5wduC0EwJ6WiWIEmVkU88j8ZsMB8GA1UdIwQY
MBaAFE+ARcz1CXfrwwZqPO7Y/TLx8CPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYt
NDBjODY5N2JiZGU5LzEvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYtNDBjODY5N2JiZGU5
LzEvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtmrFgQY
f31iYxexgJyXsoc+LTJXl4enbpNSgQkEa+n8fkn5pCRZe7OjFdHVouiR2zCi4num
61aDT8j/JEYvJqlMtanYkqMir2jbH++D3makeSyobpDb5IJlUZ+hXnJrppK/fZQh
KrkWD8DlVPOs0WuDo/vbdappFh+FRP+xsuYWkSEwTpHFWc2bqdfd306nGe1TXgeQ
qNrlenknzo/1wd/wJY7eEw2mFissaKrL8kVr7l1g+LPAeGd2tt9W802A9kKFqovB
1UGU7cYqpy0EBPYMfkzNAOlNrxqZAu3JCVmPeThMobldZZAfpxaTPgEQHTKN0xco
NEO+/K9PVSga7Q==
-----END CERTIFICATE-----
Generated at Mon May 12 04:53:32 2025 by rpki-client