Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: wTkxZ5GApIWOBpjsFqtzrnMNcjI1kDN+MWkBynTWEek=
Subject key identifier: 0A:4E:AA:7C:3B:9E:B7:71:35:1F:33:93:E2:74:76:A9:2B:DC:81:02
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 0196BDEE138F8DA252AE507A7DC40DB92202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 1488
Signing time: Sun 11 May 2025 06:00:18 +0000
Manifest this update: Sun 11 May 2025 06:00:18 +0000
Manifest next update: Mon 12 May 2025 06:00:18 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: U617pE90Ws6YAO+gspUC8bn0xgA2uP6uLG+u4x+9R7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:13:8f:8d:a2:52:ae:50:7a:7d:c4:0d:b9:22:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: May 11 06:00:18 2025 GMT
Not After : May 12 06:00:18 2025 GMT
Subject: CN=0a4eaa7c3b9eb771351f3393e27476a92bdc8102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:39:a2:2e:8b:97:32:c9:d8:7a:03:e7:cf:
d6:4b:17:ea:0b:87:75:79:a0:fa:92:14:0b:c5:87:
60:ac:4f:3b:c9:eb:2b:ed:2f:c6:76:31:c6:83:04:
b7:5a:0a:df:72:d3:45:df:92:2d:c7:43:e7:f6:20:
44:1b:43:4c:17:ad:09:06:18:0e:bc:aa:71:26:5f:
29:36:d2:a3:ae:e4:5b:5e:9d:ac:59:80:09:ee:cb:
47:fd:fd:e0:ea:79:0e:59:fd:18:af:d6:b0:c1:7e:
ae:f4:20:3f:3a:2e:fc:cc:b4:05:bf:3f:6a:bb:48:
f4:fc:ef:15:3c:c1:cd:ac:49:34:c8:eb:f6:ea:0e:
50:9e:ca:3a:cc:f8:0a:8c:8a:3e:93:43:46:bb:9c:
6c:c3:b9:84:36:95:8c:89:0b:d4:00:bf:32:c1:25:
bf:f3:ae:27:98:a3:ce:ec:1b:d1:dc:71:8d:20:d0:
6c:fa:6e:be:27:d6:5c:3e:f1:86:ed:5b:7f:84:8c:
f7:d8:a0:4e:a3:38:ba:12:9b:dc:dd:13:e2:44:c1:
11:99:4d:af:38:ee:c1:98:99:24:4c:71:ff:21:87:
27:a6:d6:20:32:ed:ae:9f:59:e2:b7:61:40:55:e0:
d5:f3:9d:b9:86:3b:23:e4:1b:27:eb:86:12:97:ac:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:AA:7C:3B:9E:B7:71:35:1F:33:93:E2:74:76:A9:2B:DC:81:02
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1b:61:1b:17:5f:bb:18:a7:10:14:e1:27:b8:53:10:27:34:
7b:00:e7:52:e8:79:62:74:77:d6:61:47:6e:2f:92:86:5f:f0:
a4:20:59:9c:9d:07:3e:32:06:31:8d:4a:40:6b:ed:9e:21:95:
cb:95:7c:ce:0f:c4:1a:6e:50:16:13:89:86:24:1b:d9:17:98:
97:d4:bd:47:4d:ad:a0:5c:5f:c1:cb:3d:40:d9:10:52:b8:6e:
09:c2:08:89:04:96:5e:bd:58:0c:6c:96:51:f9:9b:c4:e1:a0:
0f:4a:d1:9f:64:f3:e8:57:b1:28:b0:75:68:a6:d2:8c:51:82:
e3:b4:65:b9:f0:4e:a2:65:6f:6a:bb:e9:cb:6d:9e:aa:86:b0:
8f:2a:a5:ed:f0:86:96:e4:35:f2:4b:16:d2:fd:8a:dc:9c:f0:
69:83:15:06:73:b2:9a:e8:9a:51:ad:6f:b1:ca:e4:34:b7:35:
1f:a3:f7:0f:a5:d0:41:2f:5f:36:11:eb:d3:29:09:59:75:84:
b1:70:28:66:e4:a6:54:5a:ec:e2:32:6c:81:7b:88:a7:a8:51:
35:e5:89:3f:cb:5a:e8:c8:4a:a9:ec:90:d4:4a:1d:1a:36:12:
8c:02:e6:99:9b:dc:84:34:31:fb:6b:8a:7c:12:3e:fe:0d:3d:
44:d9:f5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97hOPjaJSrlB6fcQNuSICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj
ZDUxMTIwHhcNMjUwNTExMDYwMDE4WhcNMjUwNTEyMDYwMDE4WjAzMTEwLwYDVQQD
EygwYTRlYWE3YzNiOWViNzcxMzUxZjMzOTNlMjc0NzZhOTJiZGM4MTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tU5oi6LlzLJ2HoD58/WSxfqC4d1
eaD6khQLxYdgrE87yesr7S/GdjHGgwS3WgrfctNF35Itx0Pn9iBEG0NMF60JBhgO
vKpxJl8pNtKjruRbXp2sWYAJ7stH/f3g6nkOWf0Yr9awwX6u9CA/Oi78zLQFvz9q
u0j0/O8VPMHNrEk0yOv26g5Qnso6zPgKjIo+k0NGu5xsw7mENpWMiQvUAL8ywSW/
864nmKPO7BvR3HGNINBs+m6+J9ZcPvGG7Vt/hIz32KBOozi6Epvc3RPiRMERmU2v
OO7BmJkkTHH/IYcnptYgMu2un1nit2FAVeDV8525hjsj5Bsn64YSl6xNeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApOqnw7nrdxNR8zk+J0dqkr3IECMB8GA1UdIwQY
MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt
MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj
LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhthGxdf
uxinEBThJ7hTECc0ewDnUuh5YnR31mFHbi+Shl/wpCBZnJ0HPjIGMY1KQGvtniGV
y5V8zg/EGm5QFhOJhiQb2ReYl9S9R02toFxfwcs9QNkQUrhuCcIIiQSWXr1YDGyW
UfmbxOGgD0rRn2Tz6FexKLB1aKbSjFGC47RlufBOomVvarvpy22eqoawjyql7fCG
luQ18ksW0v2K3JzwaYMVBnOymuiaUa1vscrkNLc1H6P3D6XQQS9fNhHr0ykJWXWE
sXAoZuSmVFrs4jJsgXuIp6hRNeWJP8ta6MhKqeyQ1EodGjYSjALmmZvchDQx+2uK
fBI+/g09RNn1LA==
-----END CERTIFICATE-----
Generated at Sun May 11 13:23:22 2025 by rpki-client