Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
File: t4UKnl5747TStkImX4JbhQwHI2Y.mft (raw, json)
Hash identifier: WOS5rp80MwC6C533yhDEV8Qt2YmNIpI/x7CUQSUnaCw=
Subject key identifier: B5:DF:36:77:D2:08:68:17:85:37:13:4A:45:18:98:5B:A5:67:68:83
Authority key identifier: B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
Certificate issuer: /CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Certificate serial: 0196CB0516D01B33A5B485B39D55F67723C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
Manifest number: 03CF
Signing time: Tue 13 May 2025 19:00:30 +0000
Manifest this update: Tue 13 May 2025 19:00:30 +0000
Manifest next update: Wed 14 May 2025 19:00:30 +0000
Files and hashes: 1: kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa (hash: LC5M9URWylDvxfMKsYWhEBj1id9NYxvTcyivO+BgMe0=)
2: t4UKnl5747TStkImX4JbhQwHI2Y.crl (hash: pgIngm0pMcG63FixMj2hlxVoVxfRURPkpPTBt15RJEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:16:d0:1b:33:a5:b4:85:b3:9d:55:f6:77:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Validity
Not Before: May 13 19:00:30 2025 GMT
Not After : May 14 19:00:30 2025 GMT
Subject: CN=b5df3677d20868178537134a4518985ba5676883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:17:ba:21:70:e6:de:f0:f1:39:6e:14:b6:
a8:26:ec:a8:12:63:e7:49:94:3d:f3:30:77:c6:2c:
71:d3:36:e8:98:a1:a6:e6:b1:2a:bc:f4:73:e7:c1:
e0:92:13:3b:6c:29:04:e6:e3:64:f6:e3:29:cc:38:
16:e2:36:4c:fc:e0:f2:cb:a8:d7:83:03:96:32:6e:
b8:17:7e:1c:32:4b:8a:36:fa:eb:25:7c:68:f6:17:
96:30:20:c9:4f:45:b4:7a:00:48:ce:af:88:ad:41:
4a:ae:e1:94:2b:79:e5:52:04:62:80:da:e7:b1:f4:
4d:e1:01:cc:14:a6:71:eb:0c:53:54:c9:94:96:89:
6a:a8:62:71:ca:56:57:00:d8:aa:02:24:99:59:80:
82:3a:8f:e0:4a:ec:62:fa:2c:0e:55:cc:ea:90:38:
6c:14:be:d3:92:39:3f:95:47:e1:f4:74:a4:1e:8f:
0f:5e:db:dd:5f:bb:d3:b9:84:f3:1e:d3:9f:93:25:
f5:78:2f:47:1e:3c:ed:25:d1:62:2b:3f:06:22:93:
e5:a5:b5:d5:69:03:4f:d7:1d:e4:fc:6e:73:db:36:
db:8f:8e:f3:ae:80:15:9b:0e:5f:8c:36:8a:91:26:
80:0d:8f:3f:da:43:77:85:4b:24:98:0f:6e:b7:20:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:36:77:D2:08:68:17:85:37:13:4A:45:18:98:5B:A5:67:68:83
X509v3 Authority Key Identifier:
keyid:B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:11:f6:1b:d8:49:40:3e:95:15:67:bd:0e:d2:b0:8e:d3:39:
4a:ab:72:a9:ec:b2:f4:26:7f:3b:5b:35:7b:6d:55:e8:9f:0b:
97:11:2f:db:4d:ca:0d:de:86:37:96:58:18:43:3b:c7:38:79:
a2:7b:91:55:e0:fc:6a:a5:ac:0e:d6:38:80:d3:64:7c:36:8d:
c1:19:0f:61:b3:43:93:e1:74:40:bc:04:cd:53:e3:dc:53:b9:
17:6b:0b:3d:ef:a9:20:c7:05:34:82:a7:85:de:c2:ee:02:9d:
98:78:fe:d9:69:29:31:74:47:84:0e:6d:f3:60:a8:0a:0e:a9:
b2:b8:3d:93:db:e1:83:b9:ca:ba:ba:dc:7e:46:ba:77:45:ca:
65:89:3b:15:19:93:8c:52:c2:1c:4d:31:5a:29:47:aa:30:72:
ad:f7:1e:2a:38:3b:86:53:e8:3b:b4:b4:d0:81:0b:98:68:57:
fb:d0:d5:d7:52:8b:3a:c2:5b:78:b6:24:ed:fe:f0:3a:03:f5:
1b:49:6a:95:49:31:2a:83:77:c2:6a:31:e2:ee:f7:9c:19:2c:
68:e1:0f:64:69:a5:2e:16:10:b2:85:06:55:56:04:79:bc:de:
8a:85:5c:9c:db:8d:e3:e1:a6:5b:d7:7a:70:fb:cc:b8:db:e8:
ac:c6:42:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBRbQGzOltIWznVX2dyPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODUwYTllNWU3YmUzYjRkMmI2NDIyNjVmODI1Yjg1MGMw
NzIzNjYwHhcNMjUwNTEzMTkwMDMwWhcNMjUwNTE0MTkwMDMwWjAzMTEwLwYDVQQD
EyhiNWRmMzY3N2QyMDg2ODE3ODUzNzEzNGE0NTE4OTg1YmE1Njc2ODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAEXuiFw5t7w8TluFLaoJuyoEmPn
SZQ98zB3xixx0zbomKGm5rEqvPRz58HgkhM7bCkE5uNk9uMpzDgW4jZM/ODyy6jX
gwOWMm64F34cMkuKNvrrJXxo9heWMCDJT0W0egBIzq+IrUFKruGUK3nlUgRigNrn
sfRN4QHMFKZx6wxTVMmUlolqqGJxylZXANiqAiSZWYCCOo/gSuxi+iwOVczqkDhs
FL7Tkjk/lUfh9HSkHo8PXtvdX7vTuYTzHtOfkyX1eC9HHjztJdFiKz8GIpPlpbXV
aQNP1x3k/G5z2zbbj47zroAVmw5fjDaKkSaADY8/2kN3hUskmA9utyB2tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXfNnfSCGgXhTcTSkUYmFulZ2iDMB8GA1UdIwQY
MBaAFLeFCp5ee+O00rZCJl+CW4UMByNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQt
OGEwMTAyYWU3YTlmLzEvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQtOGEwMTAyYWU3YTlm
LzEvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRH2G9hJ
QD6VFWe9DtKwjtM5Sqtyqeyy9CZ/O1s1e21V6J8LlxEv203KDd6GN5ZYGEM7xzh5
onuRVeD8aqWsDtY4gNNkfDaNwRkPYbNDk+F0QLwEzVPj3FO5F2sLPe+pIMcFNIKn
hd7C7gKdmHj+2WkpMXRHhA5t82CoCg6psrg9k9vhg7nKurrcfka6d0XKZYk7FRmT
jFLCHE0xWilHqjByrfceKjg7hlPoO7S00IELmGhX+9DV11KLOsJbeLYk7f7wOgP1
G0lqlUkxKoN3wmox4u73nBksaOEPZGmlLhYQsoUGVVYEebzeioVcnNuN4+GmW9d6
cPvMuNvorMZCnw==
-----END CERTIFICATE-----
Generated at Tue May 13 22:28:26 2025 by rpki-client