Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: jPQa6Phnj0uvwEjjy/ikbjGhZ0yaHn67y+s87kT/fZU=
Subject key identifier: 71:42:91:45:D0:3A:7E:C8:05:40:58:E5:4A:36:F0:C7:5E:41:63:55
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 0196B85A7790DAED70B9343956AA80EA9EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 0FE7
Signing time: Sat 10 May 2025 04:00:58 +0000
Manifest this update: Sat 10 May 2025 04:00:58 +0000
Manifest next update: Sun 11 May 2025 04:00:58 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: 5zttOHJxYIbcEL85hrBDNIJRn+XixlMO3FuggaLF3J0=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:77:90:da:ed:70:b9:34:39:56:aa:80:ea:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: May 10 04:00:58 2025 GMT
Not After : May 11 04:00:58 2025 GMT
Subject: CN=71429145d03a7ec8054058e54a36f0c75e416355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:0f:a0:2f:18:35:68:cb:1c:f7:0e:c6:9f:
f5:03:38:ae:74:6c:5c:41:78:4d:36:89:ca:13:82:
28:6a:97:99:91:7b:56:a6:e1:ee:35:f4:44:84:5d:
56:4e:81:1e:e9:6e:40:8f:a2:f9:ed:c1:29:e8:d3:
e6:ef:4f:ed:d8:9b:ee:34:43:88:d7:64:9e:f2:52:
19:8d:8e:0b:78:b9:1b:dd:94:8f:48:f8:2e:67:78:
25:6d:a0:21:3b:4c:02:5f:ca:97:4f:85:0c:51:91:
4d:51:ff:40:32:b1:09:a5:c2:1a:f7:dc:09:7b:47:
de:8d:4f:69:74:05:03:39:e2:4d:81:25:ed:6d:a6:
68:36:41:96:10:51:38:3b:ab:69:0d:9c:44:d4:08:
78:5d:3c:2f:8e:21:f7:41:f1:90:a6:b9:ac:e4:18:
ac:f5:8f:97:c2:76:5a:5a:7a:b2:0e:3f:e2:04:e6:
03:b5:b8:56:dd:e7:1e:00:e2:0d:02:98:33:e7:f9:
6a:42:ac:01:12:56:5b:55:e9:f7:26:f8:99:04:cf:
4a:f0:fa:3d:91:a7:b6:0d:ff:27:a3:e3:b7:26:ca:
2e:66:92:ff:2f:27:90:03:a6:33:87:8a:f4:d0:c6:
58:ed:40:47:ac:27:2b:31:2d:61:e5:3d:aa:aa:09:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:91:45:D0:3A:7E:C8:05:40:58:E5:4A:36:F0:C7:5E:41:63:55
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:78:88:8e:66:35:91:90:cd:c4:8f:ee:cd:ae:39:0d:4e:fd:
f8:bc:de:0b:a3:f9:df:97:69:58:41:10:00:96:d8:4c:2d:e5:
57:f1:b1:c9:e6:e7:0a:e7:7c:7e:97:fa:1e:85:5b:ee:b7:96:
98:16:ca:39:f8:7a:dc:53:32:fe:0a:a5:96:67:2b:8f:4f:d8:
a4:f0:1c:46:2c:eb:99:e1:6c:0c:0b:1f:f2:6b:da:ae:43:2a:
7a:c2:b5:c9:c7:8c:f5:e3:4a:1f:fe:d1:58:de:d6:1e:02:16:
5b:c0:b2:eb:cd:2a:76:dd:5d:ce:43:b9:fa:72:e7:4e:22:6b:
f2:75:1f:f2:8e:d8:30:3d:a5:30:3f:82:00:f4:c6:5a:cd:bd:
41:bd:fd:a2:a8:4f:13:4b:9b:47:59:4b:30:58:40:b7:44:ec:
84:05:dd:cd:1e:ce:ff:cf:25:c2:0d:60:66:79:85:bb:97:87:
02:9b:53:48:f9:c4:0b:79:95:ef:da:e6:0f:bd:44:48:c9:2e:
38:7d:73:a7:9d:26:2b:9a:f1:6d:1a:82:77:19:98:b2:1c:0c:
e2:0c:75:90:00:f0:ca:ed:bd:c3:3a:5a:9a:24:ef:25:75:f3:
ac:fb:74:e6:99:4c:09:11:3a:97:82:eb:94:0f:30:f0:85:4c:
a1:3c:5d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WneQ2u1wuTQ5VqqA6p73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4
NTEwNjkwHhcNMjUwNTEwMDQwMDU4WhcNMjUwNTExMDQwMDU4WjAzMTEwLwYDVQQD
Eyg3MTQyOTE0NWQwM2E3ZWM4MDU0MDU4ZTU0YTM2ZjBjNzVlNDE2MzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4EPoC8YNWjLHPcOxp/1AziudGxc
QXhNNonKE4IoapeZkXtWpuHuNfREhF1WToEe6W5Aj6L57cEp6NPm70/t2JvuNEOI
12Se8lIZjY4LeLkb3ZSPSPguZ3glbaAhO0wCX8qXT4UMUZFNUf9AMrEJpcIa99wJ
e0fejU9pdAUDOeJNgSXtbaZoNkGWEFE4O6tpDZxE1Ah4XTwvjiH3QfGQprms5Bis
9Y+XwnZaWnqyDj/iBOYDtbhW3eceAOINApgz5/lqQqwBElZbVen3JviZBM9K8Po9
kae2Df8no+O3JsouZpL/LyeQA6Yzh4r00MZY7UBHrCcrMS1h5T2qqglEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFCkUXQOn7IBUBY5Uo28MdeQWNVMB8GA1UdIwQY
MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct
ZDk2MzkzYWYyZjIwLzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw
LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiniIjmY1
kZDNxI/uza45DU79+LzeC6P535dpWEEQAJbYTC3lV/GxyebnCud8fpf6HoVb7reW
mBbKOfh63FMy/gqllmcrj0/YpPAcRizrmeFsDAsf8mvarkMqesK1yceM9eNKH/7R
WN7WHgIWW8Cy680qdt1dzkO5+nLnTiJr8nUf8o7YMD2lMD+CAPTGWs29Qb39oqhP
E0ubR1lLMFhAt0TshAXdzR7O/88lwg1gZnmFu5eHAptTSPnEC3mV79rmD71ESMku
OH1zp50mK5rxbRqCdxmYshwM4gx1kADwyu29wzpamiTvJXXzrPt05plMCRE6l4Lr
lA8w8IVMoTxd5g==
-----END CERTIFICATE-----
Generated at Sat May 10 12:29:46 2025 by rpki-client