Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: 8Tcm5csx1slCj5WX5BXLPTZJHIROJ8bXB6EyQx3Vm/0=
Subject key identifier: FA:05:B3:31:6C:62:06:92:45:45:1C:7B:E8:24:BB:2B:9C:1D:2D:C9
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 0196C34B4410AD84F55857CA7CDB8C7F80ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 120E
Signing time: Mon 12 May 2025 07:00:11 +0000
Manifest this update: Mon 12 May 2025 07:00:11 +0000
Manifest next update: Tue 13 May 2025 07:00:11 +0000
Files and hashes: 1: WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa (hash: GG3W3sv/8g51OizpERxg8YmbMm76mWXeFGoFM/wpQ9M=)
2: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: 5pYxhQD4jnl1AzJVugjLoNNWhgKhgGB0L9Eo3KGhYT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:44:10:ad:84:f5:58:57:ca:7c:db:8c:7f:80:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: May 12 07:00:11 2025 GMT
Not After : May 13 07:00:11 2025 GMT
Subject: CN=fa05b3316c62069245451c7be824bb2b9c1d2dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:88:0b:28:37:cc:27:10:b3:9a:d8:ce:c6:
98:4a:c7:e1:79:f0:56:8a:4a:62:1a:5c:ba:8f:79:
38:09:69:ca:37:01:bc:46:85:34:57:eb:51:08:ad:
bb:7e:b0:31:37:d9:ca:75:79:7d:48:b3:68:98:68:
be:78:95:3f:41:a5:73:17:8b:f6:a0:aa:c9:27:30:
16:58:64:39:ca:84:37:83:4e:9d:19:4d:50:13:16:
fa:d0:95:83:ba:47:7c:da:f2:68:78:84:f8:c4:fd:
d8:b0:3c:0d:50:a7:ac:e5:42:ba:b5:83:b5:c7:d9:
8d:3a:01:7d:a4:86:28:e9:85:b1:66:48:ec:e1:4a:
52:38:2b:52:7b:b3:4a:f8:e9:3b:f0:43:8e:d9:5b:
9d:37:97:1f:8f:d3:14:e1:9f:db:ad:6b:e6:f7:c3:
56:6b:a6:3d:e9:b1:0d:ba:0a:7d:5e:27:09:7a:90:
23:78:75:f1:7f:8b:1b:fc:86:fd:93:a4:51:40:9c:
f6:24:2f:20:ed:0b:27:9f:9e:2c:6b:11:1b:1b:80:
8e:2b:9f:0b:c7:47:8c:ea:75:fc:48:e5:b1:5a:ff:
6f:0f:15:69:74:ec:70:58:64:15:5e:53:a0:2e:26:
81:50:91:90:ab:79:17:33:91:b8:34:c9:eb:e3:de:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:B3:31:6C:62:06:92:45:45:1C:7B:E8:24:BB:2B:9C:1D:2D:C9
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9d:c8:15:b5:ae:5c:54:3f:e5:c6:1a:38:01:b1:64:f2:69:
8a:18:11:d4:48:19:fa:14:ad:69:5d:48:90:42:bf:bc:8a:71:
90:ce:2a:33:e4:3b:f7:50:4a:92:36:46:e9:07:5c:bc:27:cf:
e8:1b:a4:dd:45:b1:74:83:6b:25:c9:df:94:1f:2b:3a:59:08:
1f:e1:d9:a2:00:fe:2b:a5:69:2b:ec:65:71:0b:cd:d2:f1:17:
a4:07:66:c4:65:6d:88:0a:25:11:2c:09:dd:70:1d:2f:65:dd:
d5:32:d9:dc:8d:94:b9:88:68:3c:bf:ec:48:d3:32:2b:f9:5a:
40:4c:31:c2:d2:fe:dd:ef:97:7f:a1:f7:af:d3:92:ed:ff:1e:
cd:bd:3d:e9:c4:14:2e:b7:52:aa:60:6e:7d:0f:df:31:de:28:
1a:8a:47:9c:ea:5e:e9:3f:a4:7d:35:05:e3:16:a9:32:34:f5:
91:84:08:38:bb:4f:61:bc:da:df:69:f4:de:8b:bc:7b:a4:cd:
9c:96:9d:fd:43:d5:a1:f3:f3:16:12:80:87:50:5a:c2:d7:4b:
1f:35:e2:5b:85:04:d0:0b:70:c5:34:2a:4a:2f:3d:0d:a2:78:
d9:cb:2e:ee:19:11:34:a3:1b:79:f1:66:f0:2f:5a:fe:1a:20:
1b:8d:23:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS0QQrYT1WFfKfNuMf4DtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl
ZTM5YjUwHhcNMjUwNTEyMDcwMDExWhcNMjUwNTEzMDcwMDExWjAzMTEwLwYDVQQD
EyhmYTA1YjMzMTZjNjIwNjkyNDU0NTFjN2JlODI0YmIyYjljMWQyZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z2ICyg3zCcQs5rYzsaYSsfhefBW
ikpiGly6j3k4CWnKNwG8RoU0V+tRCK27frAxN9nKdXl9SLNomGi+eJU/QaVzF4v2
oKrJJzAWWGQ5yoQ3g06dGU1QExb60JWDukd82vJoeIT4xP3YsDwNUKes5UK6tYO1
x9mNOgF9pIYo6YWxZkjs4UpSOCtSe7NK+Ok78EOO2VudN5cfj9MU4Z/brWvm98NW
a6Y96bENugp9XicJepAjeHXxf4sb/Ib9k6RRQJz2JC8g7Qsnn54saxEbG4COK58L
x0eM6nX8SOWxWv9vDxVpdOxwWGQVXlOgLiaBUJGQq3kXM5G4NMnr497veQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoFszFsYgaSRUUce+gkuyucHS3JMB8GA1UdIwQY
MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt
ZTkwNDMxODM0MmVlLzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl
LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGp3IFbWu
XFQ/5cYaOAGxZPJpihgR1EgZ+hStaV1IkEK/vIpxkM4qM+Q791BKkjZG6QdcvCfP
6Buk3UWxdINrJcnflB8rOlkIH+HZogD+K6VpK+xlcQvN0vEXpAdmxGVtiAolESwJ
3XAdL2Xd1TLZ3I2UuYhoPL/sSNMyK/laQEwxwtL+3e+Xf6H3r9OS7f8ezb096cQU
LrdSqmBufQ/fMd4oGopHnOpe6T+kfTUF4xapMjT1kYQIOLtPYbza32n03ou8e6TN
nJad/UPVofPzFhKAh1BawtdLHzXiW4UE0AtwxTQqSi89DaJ42csu7hkRNKMbefFm
8C9a/hogG40jXw==
-----END CERTIFICATE-----
Generated at Mon May 12 08:49:33 2025 by rpki-client