Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: vS9s15WxUmAUaGCDfu1Fgv/Rme33hz06m+c9+RQ0Hvo=
Subject key identifier: B9:FD:26:49:E0:1F:F0:8F:36:DE:58:DD:FF:1C:AB:06:AE:80:C2:E7
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 0196BB5B254B4239B3086D003A9287DA8F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 04B1
Signing time: Sat 10 May 2025 18:00:34 +0000
Manifest this update: Sat 10 May 2025 18:00:34 +0000
Manifest next update: Sun 11 May 2025 18:00:34 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: M54N4rmOzuk2o2eJ8tpe86Kj0fYNnnAc4HJ4yxQTPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:25:4b:42:39:b3:08:6d:00:3a:92:87:da:8f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: May 10 18:00:34 2025 GMT
Not After : May 11 18:00:34 2025 GMT
Subject: CN=b9fd2649e01ff08f36de58ddff1cab06ae80c2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:94:28:f3:35:7a:5e:b0:3d:26:8c:44:c7:
f8:0e:f6:90:93:a4:2b:93:8f:d2:9e:9f:df:e5:a5:
af:fe:ad:db:9f:36:1c:88:31:99:19:55:36:5b:99:
86:1a:61:5d:da:97:ae:91:2b:4b:95:3b:fd:41:72:
7e:65:de:a4:41:72:3f:da:ed:4b:48:be:37:24:10:
c4:7b:57:b5:ba:ee:63:2e:43:bd:63:ba:df:f7:30:
a7:89:04:39:5e:85:89:a1:00:84:b5:81:7c:5b:03:
61:c3:d4:13:b0:ac:2a:52:e6:c9:d1:a4:ba:e0:91:
af:48:d7:b5:8c:71:0f:31:9f:f5:17:b6:7d:4a:bb:
9a:fe:1b:b7:a5:c7:0d:fe:4d:c8:00:32:f8:80:f2:
84:54:9b:18:a9:a7:1c:16:de:57:e2:62:c6:38:b8:
7e:14:3f:84:65:9c:39:e2:6c:95:19:e3:ce:18:e9:
5a:49:f6:44:fc:8b:35:4f:fd:25:7f:ea:b6:a7:e2:
5a:4b:3f:41:66:f1:4f:98:1d:4c:12:31:d9:fc:37:
e3:09:0f:b6:be:7d:f0:de:dd:89:19:c5:ae:33:2a:
90:e8:89:25:e3:38:af:bc:50:f3:72:38:5b:31:35:
8d:ee:0d:fb:51:f3:f0:f1:7d:e1:fb:ea:cd:df:7f:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:26:49:E0:1F:F0:8F:36:DE:58:DD:FF:1C:AB:06:AE:80:C2:E7
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f3:9f:0e:15:a7:9c:08:e3:e2:a1:fe:f0:91:0f:71:52:35:
39:e0:4a:ab:48:28:63:1d:7a:29:e3:32:40:2e:b9:67:4f:b8:
1d:92:3d:82:4f:67:74:c8:c9:59:fe:43:3a:24:20:b6:4c:8f:
49:fa:b8:09:0c:a6:be:5e:4c:cf:28:45:45:2b:00:46:c6:1c:
9a:5a:6a:2c:61:46:f9:44:2a:83:2a:66:38:cf:ff:3c:59:24:
7e:69:5a:cf:00:d2:3d:2c:d2:81:45:b8:e5:b3:cb:95:3a:f9:
37:b4:97:9e:cb:18:0c:68:dd:75:9f:1c:6d:67:15:4a:0c:ec:
36:8c:5e:0b:90:74:20:95:ae:56:9e:03:4d:76:78:7d:4a:2c:
5d:32:df:31:dc:62:4b:df:d9:69:88:e5:88:9c:1c:10:5e:b1:
d9:9a:78:e1:c2:73:45:7c:f4:b7:4e:11:4b:da:3f:69:c7:ab:
8f:3a:b1:d1:39:11:50:66:79:da:f8:a3:33:4c:7b:cd:d5:d2:
a4:34:ef:72:29:1f:e8:c7:58:44:0c:a5:f0:69:04:29:f7:7f:
f4:99:1b:00:75:e6:72:60:bc:96:5a:8b:0c:21:89:e6:91:a0:
96:c8:e8:a4:d4:0d:d8:2a:81:47:c6:d2:7e:20:69:72:4b:98:
7e:c1:58:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WyVLQjmzCG0AOpKH2o+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzM5OGMwNzMyNWM0MGU3ZDc2ZDIzOTZhMWJlODVjNDJm
ZGMyYzgwHhcNMjUwNTEwMTgwMDM0WhcNMjUwNTExMTgwMDM0WjAzMTEwLwYDVQQD
EyhiOWZkMjY0OWUwMWZmMDhmMzZkZTU4ZGRmZjFjYWIwNmFlODBjMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmeUKPM1el6wPSaMRMf4DvaQk6Qr
k4/Snp/f5aWv/q3bnzYciDGZGVU2W5mGGmFd2peukStLlTv9QXJ+Zd6kQXI/2u1L
SL43JBDEe1e1uu5jLkO9Y7rf9zCniQQ5XoWJoQCEtYF8WwNhw9QTsKwqUubJ0aS6
4JGvSNe1jHEPMZ/1F7Z9Srua/hu3pccN/k3IADL4gPKEVJsYqaccFt5X4mLGOLh+
FD+EZZw54myVGePOGOlaSfZE/Is1T/0lf+q2p+JaSz9BZvFPmB1MEjHZ/DfjCQ+2
vn3w3t2JGcWuMyqQ6Ikl4zivvFDzcjhbMTWN7g37UfPw8X3h++rN339vsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn9JkngH/CPNt5Y3f8cqwaugMLnMB8GA1UdIwQY
MBaAFLXDmMBzJcQOfXbSOWob6FxC/cLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUt
YWYxMzdjY2IyYjY5LzEvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUtYWYxMzdjY2IyYjY5
LzEvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/OfDhWn
nAjj4qH+8JEPcVI1OeBKq0goYx16KeMyQC65Z0+4HZI9gk9ndMjJWf5DOiQgtkyP
Sfq4CQymvl5MzyhFRSsARsYcmlpqLGFG+UQqgypmOM//PFkkfmlazwDSPSzSgUW4
5bPLlTr5N7SXnssYDGjddZ8cbWcVSgzsNoxeC5B0IJWuVp4DTXZ4fUosXTLfMdxi
S9/ZaYjliJwcEF6x2Zp44cJzRXz0t04RS9o/acerjzqx0TkRUGZ52vijM0x7zdXS
pDTvcikf6MdYRAyl8GkEKfd/9JkbAHXmcmC8llqLDCGJ5pGglsjopNQN2CqBR8bS
fiBpckuYfsFY6g==
-----END CERTIFICATE-----
Generated at Sat May 10 19:38:21 2025 by rpki-client