Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: q7XrBe2MAFpBO7ASj8E7kZVz2FNAoN4yctJ926d5SKc=
Subject key identifier: 62:D4:76:92:E4:0A:A8:40:49:AE:35:75:10:24:18:FD:14:70:1E:8D
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 0196B446AF8F64F40A5BCC36466F7610BF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 09:00:53 +0000
Manifest this update: Fri 09 May 2025 09:00:53 +0000
Manifest next update: Sat 10 May 2025 09:00:53 +0000
Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: dNAwqHXerYyoYWbjsfPhgsbNcw2GCzzG1T0QzNFBLXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:af:8f:64:f4:0a:5b:cc:36:46:6f:76:10:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: May 9 09:00:53 2025 GMT
Not After : May 10 09:00:53 2025 GMT
Subject: CN=62d47692e40aa84049ae3575102418fd14701e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:fa:76:5e:87:55:e2:7a:02:68:8f:4b:07:
85:39:98:e0:e8:62:3b:73:06:df:57:82:60:f3:74:
9c:b5:2c:3c:83:1f:91:e3:30:a6:e2:a6:28:e7:47:
db:3c:e1:18:f8:96:81:17:8a:3d:60:22:3a:bd:de:
2c:4d:0c:08:0a:3a:1a:43:bc:0d:73:6d:22:bc:3e:
e5:0b:c1:f6:e1:5c:90:be:2f:f4:ab:29:17:b9:98:
b9:a4:d8:f2:9a:99:98:af:52:0d:aa:ae:fe:1a:53:
a0:8d:44:80:4b:aa:d0:cb:fc:4c:7d:62:63:ce:2c:
70:6c:68:96:ba:78:da:74:7c:9c:25:ae:06:10:8c:
e7:bf:3a:20:7c:1b:7f:9d:36:ba:b2:35:e6:a6:33:
1a:ba:0a:a0:b0:df:90:2d:70:14:72:e7:42:d1:b5:
d6:b7:05:d1:84:fc:26:7a:7c:c1:c7:33:db:84:ab:
dc:91:4b:d0:52:79:47:61:37:73:d4:cb:45:fe:69:
f0:0d:67:f2:b5:77:6a:c6:b7:71:ef:dc:51:5d:99:
77:71:8d:b7:5c:4b:b5:0c:01:42:ab:27:42:b9:35:
10:b1:78:30:35:c0:b9:39:b2:fc:91:30:4b:7d:3b:
f8:8b:68:0e:3c:97:f5:ce:89:f3:50:f5:c3:64:16:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:76:92:E4:0A:A8:40:49:AE:35:75:10:24:18:FD:14:70:1E:8D
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:81:cd:bb:3d:bd:53:30:b2:75:64:34:66:f3:df:63:da:87:
5f:1b:68:db:3b:d4:8c:e9:aa:0e:22:4d:a4:35:54:8f:63:a6:
b6:dc:bb:97:fb:92:03:a2:3d:b4:b3:ad:f0:26:89:0b:67:a8:
65:ec:64:27:1c:4d:14:51:01:7a:db:2f:ac:6d:df:ac:50:ec:
c9:02:24:da:73:e8:6d:76:7b:09:d4:69:51:27:98:22:58:23:
d5:da:ab:d4:08:d8:0a:53:1f:06:8f:45:97:b8:35:7a:a6:a3:
86:8f:64:26:01:b3:9a:16:d9:c9:0e:08:9b:c3:76:e6:75:3c:
de:c9:02:a7:d9:84:0a:bd:39:c5:b9:37:f7:46:da:7f:17:90:
5b:15:48:cc:de:d8:eb:69:46:b5:43:94:63:6f:53:21:6c:c5:
2c:05:2a:0a:10:81:97:82:ec:d1:22:47:9e:be:21:fe:d0:33:
31:28:b7:0b:16:64:0a:c0:69:76:c2:da:db:52:b7:e1:18:4e:
31:b0:40:a1:79:ef:bf:d5:0a:8d:91:07:cb:e2:e4:75:ae:f5:
a1:fb:9c:50:fc:ea:1e:4a:c8:32:bb:f1:d7:20:9e:af:95:fa:
cd:21:fd:50:96:8d:a5:18:f3:ac:43:9b:f1:e9:d0:3e:ca:5d:
e2:b5:a2:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0Rq+PZPQKW8w2Rm92EL85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTg2Y2MzMzRjNmUwZWFiODNmMjUyYmQ4M2VlZTk1Njky
NWNhNDAwHhcNMjUwNTA5MDkwMDUzWhcNMjUwNTEwMDkwMDUzWjAzMTEwLwYDVQQD
Eyg2MmQ0NzY5MmU0MGFhODQwNDlhZTM1NzUxMDI0MThmZDE0NzAxZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvX6dl6HVeJ6AmiPSweFOZjg6GI7
cwbfV4Jg83SctSw8gx+R4zCm4qYo50fbPOEY+JaBF4o9YCI6vd4sTQwICjoaQ7wN
c20ivD7lC8H24VyQvi/0qykXuZi5pNjympmYr1INqq7+GlOgjUSAS6rQy/xMfWJj
zixwbGiWunjadHycJa4GEIznvzogfBt/nTa6sjXmpjMaugqgsN+QLXAUcudC0bXW
twXRhPwmenzBxzPbhKvckUvQUnlHYTdz1MtF/mnwDWfytXdqxrdx79xRXZl3cY23
XEu1DAFCqydCuTUQsXgwNcC5ObL8kTBLfTv4i2gOPJf1zonzUPXDZBY5WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLUdpLkCqhASa41dRAkGP0UcB6NMB8GA1UdIwQY
MBaAFLeobMM0xuDquD8lK9g+7pVpJcpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81MDM2YmUtMTM4Yi00NDJlLTk2M2Yt
NTdjZDcyOTU3Yjg5LzEvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81MDM2YmUtMTM4Yi00NDJlLTk2M2YtNTdjZDcyOTU3Yjg5
LzEvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIHNuz29
UzCydWQ0ZvPfY9qHXxto2zvUjOmqDiJNpDVUj2Omtty7l/uSA6I9tLOt8CaJC2eo
ZexkJxxNFFEBetsvrG3frFDsyQIk2nPobXZ7CdRpUSeYIlgj1dqr1AjYClMfBo9F
l7g1eqajho9kJgGzmhbZyQ4Im8N25nU83skCp9mECr05xbk390bafxeQWxVIzN7Y
62lGtUOUY29TIWzFLAUqChCBl4Ls0SJHnr4h/tAzMSi3CxZkCsBpdsLa21K34RhO
MbBAoXnvv9UKjZEHy+Lkda71ofucUPzqHkrIMrvx1yCer5X6zSH9UJaNpRjzrEOb
8enQPspd4rWiSQ==
-----END CERTIFICATE-----
Generated at Fri May 9 13:44:26 2025 by rpki-client