Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: 1WiaMs6CMzNVVUMLmB4TyMe0c8GQ5T0cj4Q4UApEW1g=
Subject key identifier: 78:D0:05:FB:26:B2:62:39:1C:5D:52:FF:97:7D:1F:5B:96:AC:CD:BA
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 0196C91780FB336EFEE9056F0777559ADF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 08D2
Signing time: Tue 13 May 2025 10:01:22 +0000
Manifest this update: Tue 13 May 2025 10:01:22 +0000
Manifest next update: Wed 14 May 2025 10:01:22 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: lJYV8HjZrCGXs/7PKmjijreH2OS20uCfA5k+MzgH6Vc=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:80:fb:33:6e:fe:e9:05:6f:07:77:55:9a:df:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: May 13 10:01:22 2025 GMT
Not After : May 14 10:01:22 2025 GMT
Subject: CN=78d005fb26b262391c5d52ff977d1f5b96accdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:4f:75:fb:2a:b3:0b:fa:96:20:45:bf:17:
eb:15:26:4f:c6:f2:f5:09:03:4a:19:f2:14:4c:bb:
c6:7f:c5:ee:c6:58:90:b2:3a:f3:f0:f7:d3:df:d4:
68:2d:ca:3e:fd:7b:d6:a8:e2:33:f5:75:d1:e0:f3:
80:ba:b2:55:0f:ec:00:d9:19:97:fe:0f:13:be:3b:
01:bb:f4:6e:36:59:ff:61:05:c7:66:35:34:a9:db:
78:7f:da:ad:c8:d7:e9:1a:95:5e:d3:4b:81:a4:a3:
2f:ac:0a:d3:34:8b:e0:74:95:f7:96:bb:02:4b:1c:
9d:91:2d:05:89:bc:23:6d:d7:f8:d6:73:27:5e:5f:
22:2d:99:2e:b1:e5:fb:d2:0c:8d:c3:3b:ee:7b:e8:
8c:07:0f:f2:bb:6f:d4:5f:5a:6c:eb:06:5d:29:6f:
d2:11:79:3b:33:ee:ed:75:5b:f3:ae:e0:a8:51:be:
a1:3a:74:50:86:6c:e8:61:81:28:3b:26:08:22:a9:
0b:75:3d:82:4f:d0:f0:25:fb:67:b5:c0:db:86:17:
9a:30:e2:26:1a:c0:1b:03:0d:37:41:4d:e5:e7:09:
e6:77:d1:1c:4b:fe:36:89:b8:79:ba:d4:8e:60:6f:
fc:e4:8d:ce:fa:66:6e:88:c1:8a:a0:f3:ad:6d:dd:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D0:05:FB:26:B2:62:39:1C:5D:52:FF:97:7D:1F:5B:96:AC:CD:BA
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:67:73:b9:f6:c8:1c:f1:85:46:be:85:c4:03:ed:79:93:19:
37:4b:59:0f:03:d1:7b:84:7e:87:af:d6:f7:ce:f3:b0:15:53:
46:fa:d0:a0:2a:6f:ca:25:c5:19:86:87:a3:4c:20:c4:3c:02:
ac:12:75:28:5a:fd:a2:63:5f:e2:53:08:ec:a7:02:37:6b:c8:
38:aa:33:4f:db:08:7f:4c:65:dd:3e:b3:82:f0:b7:7d:41:33:
95:65:f9:07:83:04:1d:cb:b8:47:b9:96:99:e4:e9:18:09:34:
5c:92:21:64:45:85:7d:54:a1:b9:53:8d:4b:de:90:04:65:b8:
5a:e8:19:52:88:7b:54:ff:00:45:b6:b7:1c:37:50:30:2b:22:
87:60:56:fc:54:77:7b:07:56:9c:f5:15:f4:e4:31:2e:a3:f0:
43:56:4c:44:24:45:ab:c6:c3:89:0a:45:50:f9:ec:77:9e:c2:
ee:e2:ce:b4:57:a9:43:b9:4e:74:33:2e:c0:2a:8f:22:49:75:
a1:79:44:80:1a:d5:27:44:8c:aa:ca:80:e7:c1:1f:1c:d5:0f:
12:6a:94:12:8d:90:50:d1:e8:56:42:7f:d2:ab:c1:f8:a7:2b:
79:95:ea:3f:ea:d1:d6:40:21:8e:65:f7:9d:48:d3:69:e7:e2:
e8:f2:a0:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJF4D7M27+6QVvB3dVmt9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ4NDljYzQzYjczMmRhYjY2NDFmYzZmZDVhNGRiM2Ey
ZGI5NDcwHhcNMjUwNTEzMTAwMTIyWhcNMjUwNTE0MTAwMTIyWjAzMTEwLwYDVQQD
Eyg3OGQwMDVmYjI2YjI2MjM5MWM1ZDUyZmY5NzdkMWY1Yjk2YWNjZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6BPdfsqswv6liBFvxfrFSZPxvL1
CQNKGfIUTLvGf8XuxliQsjrz8PfT39RoLco+/XvWqOIz9XXR4POAurJVD+wA2RmX
/g8TvjsBu/RuNln/YQXHZjU0qdt4f9qtyNfpGpVe00uBpKMvrArTNIvgdJX3lrsC
SxydkS0Fibwjbdf41nMnXl8iLZkuseX70gyNwzvue+iMBw/yu2/UX1ps6wZdKW/S
EXk7M+7tdVvzruCoUb6hOnRQhmzoYYEoOyYIIqkLdT2CT9DwJftntcDbhheaMOIm
GsAbAw03QU3l5wnmd9EcS/42ibh5utSOYG/85I3O+mZuiMGKoPOtbd35rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjQBfsmsmI5HF1S/5d9H1uWrM26MB8GA1UdIwQY
MBaAFLQNhJzEO3Mtq2ZB/G/VpNs6LblHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzIt
NjJlMjdjZDFlOTc1LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzItNjJlMjdjZDFlOTc1
LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmdzufbI
HPGFRr6FxAPteZMZN0tZDwPRe4R+h6/W987zsBVTRvrQoCpvyiXFGYaHo0wgxDwC
rBJ1KFr9omNf4lMI7KcCN2vIOKozT9sIf0xl3T6zgvC3fUEzlWX5B4MEHcu4R7mW
meTpGAk0XJIhZEWFfVShuVONS96QBGW4WugZUoh7VP8ARba3HDdQMCsih2BW/FR3
ewdWnPUV9OQxLqPwQ1ZMRCRFq8bDiQpFUPnsd57C7uLOtFepQ7lOdDMuwCqPIkl1
oXlEgBrVJ0SMqsqA58EfHNUPEmqUEo2QUNHoVkJ/0qvB+KcreZXqP+rR1kAhjmX3
nUjTaefi6PKguA==
-----END CERTIFICATE-----
Generated at Tue May 13 15:41:13 2025 by rpki-client