Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: NEGIUEBBab6LmRhkiO3Nag1fQRHOijCps9JqLNw69Lw=
Subject key identifier: A2:AD:A7:1E:0B:78:4B:C9:FE:17:8E:58:38:3F:70:CA:C4:AE:DB:8A
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 0196B96CA4CAD5835A4DBF39124CFB478B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 0357
Signing time: Sat 10 May 2025 09:00:26 +0000
Manifest this update: Sat 10 May 2025 09:00:26 +0000
Manifest next update: Sun 11 May 2025 09:00:26 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: TQy2PxzYuLnjSh3pkVhuVIbqHdLQUDyj/n+fof2FPS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:a4:ca:d5:83:5a:4d:bf:39:12:4c:fb:47:8b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: May 10 09:00:26 2025 GMT
Not After : May 11 09:00:26 2025 GMT
Subject: CN=a2ada71e0b784bc9fe178e58383f70cac4aedb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:a4:3c:2f:6e:60:88:77:97:2d:01:16:30:
b8:6f:17:33:76:82:76:9d:8e:72:5a:7b:67:1d:ac:
65:70:82:79:37:85:94:88:f3:bc:31:f0:2d:6c:14:
54:a7:0e:37:35:82:0d:b6:f5:f0:ef:94:8f:5c:57:
0c:82:ba:72:b6:39:aa:0f:c0:c2:2f:dc:c0:2f:82:
36:88:e1:b2:77:b0:c0:b7:88:ea:57:de:c7:84:e5:
ee:41:66:fb:61:09:fb:9f:7a:3c:a6:b0:06:0c:fe:
0d:b4:97:bb:c4:2b:63:d6:df:d0:ff:23:7c:5d:37:
cf:45:17:f4:a9:a7:5e:63:32:1d:1b:d2:90:58:9a:
21:de:0d:9a:b3:a3:86:ad:04:69:18:d1:9a:5f:38:
bd:dd:03:57:86:92:a4:cb:36:3d:eb:76:2f:c0:4f:
91:52:b8:67:94:df:84:00:fc:06:e4:9a:ca:d4:30:
a2:43:90:79:dc:af:3a:fa:4d:0f:30:3f:af:5b:fb:
70:04:81:de:fa:00:91:40:3e:90:8f:0b:a8:65:a4:
50:2b:83:3e:fa:dd:ad:6d:d6:46:06:30:f9:87:f9:
11:83:69:cc:db:29:cf:b2:68:53:e9:73:8e:05:d0:
e0:66:4c:cf:42:1d:3a:98:f9:65:69:0c:3e:71:5c:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:A7:1E:0B:78:4B:C9:FE:17:8E:58:38:3F:70:CA:C4:AE:DB:8A
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6e:40:18:fa:52:86:5c:00:75:d9:40:35:a0:22:b6:9a:f3:
64:0e:b0:4f:ec:ac:26:f4:8c:23:06:31:2e:aa:04:68:82:e2:
77:b8:0a:a6:03:aa:95:2a:57:a7:80:d1:63:9a:88:1a:2a:e5:
87:9c:5c:ee:e5:b1:9b:0c:fa:cb:ad:c4:7a:88:e0:3b:80:43:
dc:ad:a5:ed:73:bf:d1:f6:c3:2b:cf:c4:50:0d:a2:d4:5e:b1:
19:e8:5d:38:10:b9:81:d9:39:18:02:b0:7d:c8:5b:8f:67:0b:
67:7d:4a:89:e2:79:0f:20:80:a0:08:35:8c:bc:64:90:66:bb:
2d:53:e3:c6:de:37:b7:ac:49:49:66:73:69:b9:8e:1d:a9:81:
a1:e0:34:20:4f:bd:0c:71:21:bc:b2:6b:a8:bb:49:cf:a7:fc:
2d:e5:41:6c:da:b6:5b:ae:fa:8c:fb:2d:f0:a3:e3:78:f5:c5:
c7:76:72:dd:e7:54:4a:f8:6d:b2:b1:49:91:3b:32:c3:f2:e2:
9c:1d:6a:3a:f1:b8:b3:75:81:7e:3c:04:7e:10:5f:2c:33:70:
c9:f9:78:74:9c:d1:60:6c:d7:ca:89:7a:51:4b:2b:bd:59:99:
9b:03:e9:f8:50:75:ed:e4:6f:c5:8a:63:5d:b1:ce:f2:c4:01:
0f:0f:ee:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5bKTK1YNaTb85Ekz7R4tQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2
MDI0NDgwHhcNMjUwNTEwMDkwMDI2WhcNMjUwNTExMDkwMDI2WjAzMTEwLwYDVQQD
EyhhMmFkYTcxZTBiNzg0YmM5ZmUxNzhlNTgzODNmNzBjYWM0YWVkYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG2kPC9uYIh3ly0BFjC4bxczdoJ2
nY5yWntnHaxlcIJ5N4WUiPO8MfAtbBRUpw43NYINtvXw75SPXFcMgrpytjmqD8DC
L9zAL4I2iOGyd7DAt4jqV97HhOXuQWb7YQn7n3o8prAGDP4NtJe7xCtj1t/Q/yN8
XTfPRRf0qadeYzIdG9KQWJoh3g2as6OGrQRpGNGaXzi93QNXhpKkyzY963YvwE+R
UrhnlN+EAPwG5JrK1DCiQ5B53K86+k0PMD+vW/twBIHe+gCRQD6QjwuoZaRQK4M+
+t2tbdZGBjD5h/kRg2nM2ynPsmhT6XOOBdDgZkzPQh06mPllaQw+cVzCAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKtpx4LeEvJ/heOWDg/cMrErtuKMB8GA1UdIwQY
MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt
NTU3YTRjMzFlMDJlLzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl
LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG5AGPpS
hlwAddlANaAitprzZA6wT+ysJvSMIwYxLqoEaILid7gKpgOqlSpXp4DRY5qIGirl
h5xc7uWxmwz6y63EeojgO4BD3K2l7XO/0fbDK8/EUA2i1F6xGehdOBC5gdk5GAKw
fchbj2cLZ31KieJ5DyCAoAg1jLxkkGa7LVPjxt43t6xJSWZzabmOHamBoeA0IE+9
DHEhvLJrqLtJz6f8LeVBbNq2W676jPst8KPjePXFx3Zy3edUSvhtsrFJkTsyw/Li
nB1qOvG4s3WBfjwEfhBfLDNwyfl4dJzRYGzXyol6UUsrvVmZmwPp+FB17eRvxYpj
XbHO8sQBDw/uJQ==
-----END CERTIFICATE-----
Generated at Sat May 10 19:06:30 2025 by rpki-client