Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: 2oVmvJ8X3BKUQT3OUhbUVDLBOYHVpD73pCBBPT1VQcQ=
Subject key identifier: 2B:8E:F8:71:3F:11:B6:AA:AC:2B:9A:EB:0A:A0:18:99:E6:2A:5E:1B
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 0196B710ECDFBE19FF650A39D66A6169AAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1537
Signing time: Fri 09 May 2025 22:01:01 +0000
Manifest this update: Fri 09 May 2025 22:01:01 +0000
Manifest next update: Sat 10 May 2025 22:01:01 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: marYls7mRiX4UxfCR00dMP91oxxZC3jm3c0Nq4MUfo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:ec:df:be:19:ff:65:0a:39:d6:6a:61:69:aa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: May 9 22:01:01 2025 GMT
Not After : May 10 22:01:01 2025 GMT
Subject: CN=2b8ef8713f11b6aaac2b9aeb0aa01899e62a5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:fa:53:69:fb:40:19:54:26:41:a0:35:a6:
07:29:9f:14:ab:3b:46:68:33:17:d4:a9:8c:56:1b:
79:c9:89:71:d5:dd:3c:20:3d:73:fe:61:42:41:c2:
16:9d:f5:88:a4:e8:7c:32:4a:dd:94:8f:30:cc:67:
30:a2:d0:22:5e:d1:4e:00:47:c6:05:3e:e9:7f:24:
9e:6b:e9:13:31:0e:db:1c:2b:8d:8f:ae:03:bb:d6:
4c:8b:15:d6:0c:22:c0:1a:5c:e1:af:d4:0c:0d:c1:
50:a1:32:c3:cb:72:dc:36:84:ef:a9:a0:38:7d:9a:
68:a8:db:3a:23:a3:8b:1d:52:ac:37:74:1a:54:12:
33:ea:5f:97:c2:12:40:ce:54:9c:5e:e9:bb:6f:66:
28:d5:f5:a1:19:92:c8:71:79:bf:21:eb:ab:3f:32:
5f:f7:03:57:b4:55:58:53:88:19:5a:26:cb:0c:03:
8a:4d:66:e4:a3:9e:ad:4a:5c:58:92:4d:ec:32:02:
43:fa:d0:0a:c3:70:98:d5:20:7c:99:57:05:4f:ae:
4a:05:33:8e:f3:42:0f:41:85:f6:f2:0b:8e:a0:fb:
a7:08:fa:47:b0:23:d1:66:75:97:b7:b7:a2:ec:15:
30:d6:9d:44:fe:cf:85:5d:e5:f6:c7:83:3c:46:21:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:F8:71:3F:11:B6:AA:AC:2B:9A:EB:0A:A0:18:99:E6:2A:5E:1B
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:61:e2:ce:ec:3d:d5:2c:9f:0c:25:1c:35:d1:e2:a0:60:
5d:a8:72:e9:68:a6:a5:6f:dc:f3:a7:e5:38:d8:c2:01:c8:eb:
41:d2:fd:6c:be:3b:4f:69:56:d1:cf:1a:e7:83:07:01:b9:f8:
37:3c:4f:9d:57:85:04:b8:89:ae:ee:a5:f7:2e:1e:33:a3:1d:
c0:00:2e:2e:57:18:23:a7:22:7b:2d:86:b4:14:ea:b6:d3:b3:
c8:33:88:05:ad:5a:5f:22:da:70:36:5f:17:f0:ad:65:95:09:
df:55:25:41:95:dc:97:81:b1:5a:c5:14:d6:c5:cb:03:55:c1:
8c:cd:ad:73:a8:a2:8b:66:a9:f9:ed:23:70:b9:40:fd:2d:b8:
69:3b:e0:00:55:ba:0c:3f:df:da:68:d8:ed:0b:81:52:39:17:
ca:ca:46:f4:0b:bb:d4:f5:8f:51:e6:e9:16:e5:35:4c:72:00:
f0:9c:2c:37:b5:c4:3d:d9:ab:c6:eb:d3:84:80:b4:c0:52:f7:
a9:08:c4:8a:21:ef:1b:5f:dd:7b:73:d2:cf:b8:b2:a7:64:5e:
e5:92:c4:b4:a5:a7:fb:8d:7e:72:a9:ee:15:83:83:9b:73:7a:
e2:e6:e0:b3:ea:dd:7a:7a:23:e0:b2:51:27:22:37:e5:50:bc:
60:36:1c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EOzfvhn/ZQo51mphaaqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0
NDE5NzkwHhcNMjUwNTA5MjIwMTAxWhcNMjUwNTEwMjIwMTAxWjAzMTEwLwYDVQQD
EygyYjhlZjg3MTNmMTFiNmFhYWMyYjlhZWIwYWEwMTg5OWU2MmE1ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Lv6U2n7QBlUJkGgNaYHKZ8UqztG
aDMX1KmMVht5yYlx1d08ID1z/mFCQcIWnfWIpOh8MkrdlI8wzGcwotAiXtFOAEfG
BT7pfySea+kTMQ7bHCuNj64Du9ZMixXWDCLAGlzhr9QMDcFQoTLDy3LcNoTvqaA4
fZpoqNs6I6OLHVKsN3QaVBIz6l+XwhJAzlScXum7b2Yo1fWhGZLIcXm/IeurPzJf
9wNXtFVYU4gZWibLDAOKTWbko56tSlxYkk3sMgJD+tAKw3CY1SB8mVcFT65KBTOO
80IPQYX28guOoPunCPpHsCPRZnWXt7ei7BUw1p1E/s+FXeX2x4M8RiEEeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuO+HE/EbaqrCua6wqgGJnmKl4bMB8GA1UdIwQY
MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt
YjdkMWNhYzUxZTBjLzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj
LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGdh4s7s
PdUsnwwlHDXR4qBgXahy6WimpW/c86flONjCAcjrQdL9bL47T2lW0c8a54MHAbn4
NzxPnVeFBLiJru6l9y4eM6MdwAAuLlcYI6ciey2GtBTqttOzyDOIBa1aXyLacDZf
F/CtZZUJ31UlQZXcl4GxWsUU1sXLA1XBjM2tc6iii2ap+e0jcLlA/S24aTvgAFW6
DD/f2mjY7QuBUjkXyspG9Au71PWPUebpFuU1THIA8JwsN7XEPdmrxuvThIC0wFL3
qQjEiiHvG1/de3PSz7iyp2Re5ZLEtKWn+41+cqnuFYODm3N64ubgs+rdenoj4LJR
JyI35VC8YDYcaQ==
-----END CERTIFICATE-----
Generated at Sat May 10 06:01:50 2025 by rpki-client