Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier: OWmC5xF6DVOoYFApJkACLM0YTVa3fyZoYMA2drNa58o=
Subject key identifier: 71:24:FD:C1:C9:95:49:07:B6:37:3B:C0:77:C6:F7:97:A7:39:DF:3D
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 0196C7966C80689F066CAB8FF455781C14CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number: 0C0F
Signing time: Tue 13 May 2025 03:00:46 +0000
Manifest this update: Tue 13 May 2025 03:00:46 +0000
Manifest next update: Wed 14 May 2025 03:00:46 +0000
Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: tdbcMA6eOjoCsQkfjNmcZ7Fe3oUr4GH1wghaXgbqsDc=)
2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:6c:80:68:9f:06:6c:ab:8f:f4:55:78:1c:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: May 13 03:00:46 2025 GMT
Not After : May 14 03:00:46 2025 GMT
Subject: CN=7124fdc1c9954907b6373bc077c6f797a739df3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:49:56:6d:5e:e5:4a:dc:51:8f:85:07:bd:
09:82:01:ed:3c:ef:71:d8:e1:29:e5:9d:b0:0f:a3:
2d:4e:ea:04:45:a9:59:26:08:82:12:18:06:65:27:
b4:1a:0b:ef:3b:c1:2d:54:ae:cb:94:33:60:4c:92:
3d:c1:b7:43:21:40:b3:90:15:df:c2:5c:b0:92:0d:
85:1c:21:7f:0b:df:73:53:c1:10:1a:82:f8:36:cb:
e2:26:6c:87:0e:39:a6:fa:4b:e5:95:b2:f9:6c:8e:
50:6e:12:dd:3f:a2:d3:f9:c2:53:d2:23:0a:4d:c6:
94:6a:9b:28:05:77:5b:a7:8f:60:dd:60:e7:03:33:
32:83:7e:5c:4e:32:99:98:c3:15:97:4f:95:46:fb:
05:b2:54:70:7b:c8:26:a8:02:2e:51:d2:f8:f2:4d:
88:a3:2f:c9:cb:4b:26:a5:9b:ea:e4:84:3c:39:2b:
93:bf:63:ac:db:91:65:7e:23:07:ba:04:63:9c:ad:
aa:4e:b3:46:3b:66:73:56:bf:e2:b7:24:45:56:94:
8f:76:a2:9e:c8:90:f7:58:23:9d:a0:be:42:2d:02:
ba:1a:1f:40:02:11:c9:f3:ff:22:b1:d6:74:88:0b:
2c:5e:bb:48:2e:8d:a0:35:8e:c2:d8:39:3b:5d:8e:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:FD:C1:C9:95:49:07:B6:37:3B:C0:77:C6:F7:97:A7:39:DF:3D
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7c:dd:e6:13:fa:05:95:a8:d0:97:cd:04:f7:9d:0b:f9:d8:
be:b2:fd:ff:e5:ef:31:f3:46:3f:86:e8:d0:c6:24:fa:2d:15:
a9:ce:5f:9e:cf:92:ac:6d:5e:bf:19:a5:e8:6d:65:9f:27:72:
59:0b:28:9d:a0:33:8a:74:30:a0:1e:a0:e8:49:97:50:19:a7:
06:b0:40:71:b8:fc:63:bf:b5:d6:3b:de:98:5f:61:69:e6:2d:
1c:cf:e7:20:d9:ce:70:ab:81:7b:0d:05:de:51:81:bf:94:37:
5b:2e:a5:1c:b8:73:b7:8b:d8:f4:0f:7b:37:a7:36:8c:a1:ab:
af:9a:cc:45:01:dc:35:fb:cd:8b:33:c1:14:f6:7d:24:60:ce:
cd:70:3f:84:0f:18:72:b2:7f:f6:ed:39:22:63:7a:bf:e0:bd:
57:c6:ed:73:fd:61:e8:fc:ae:f1:6d:6d:70:05:bf:50:81:2b:
94:b8:ac:27:f4:97:2d:eb:a9:92:18:1d:ce:85:e3:5b:26:37:
85:07:36:36:31:e5:f1:65:ca:82:98:95:21:18:80:43:a3:d6:
eb:08:f9:6a:cd:a9:71:ac:8d:40:21:97:cd:94:43:5b:7f:bb:
9e:a8:0c:94:bc:3e:7d:8d:90:31:c1:b3:d3:b9:35:3c:99:1b:
2e:4b:3e:1f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbHlmyAaJ8GbKuP9FV4HBTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDkyMzIzZDIyYjQ0Mjc1ZGNlY2Q0ZGUyOTViNDQ3OTQ2
MjNlOTIwHhcNMjUwNTEzMDMwMDQ2WhcNMjUwNTE0MDMwMDQ2WjAzMTEwLwYDVQQD
Eyg3MTI0ZmRjMWM5OTU0OTA3YjYzNzNiYzA3N2M2Zjc5N2E3MzlkZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3BJVm1e5UrcUY+FB70JggHtPO9x
2OEp5Z2wD6MtTuoERalZJgiCEhgGZSe0GgvvO8EtVK7LlDNgTJI9wbdDIUCzkBXf
wlywkg2FHCF/C99zU8EQGoL4NsviJmyHDjmm+kvllbL5bI5QbhLdP6LT+cJT0iMK
TcaUapsoBXdbp49g3WDnAzMyg35cTjKZmMMVl0+VRvsFslRwe8gmqAIuUdL48k2I
oy/Jy0smpZvq5IQ8OSuTv2Os25FlfiMHugRjnK2qTrNGO2ZzVr/ityRFVpSPdqKe
yJD3WCOdoL5CLQK6Gh9AAhHJ8/8isdZ0iAssXrtILo2gNY7C2Dk7XY557QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHEk/cHJlUkHtjc7wHfG95enOd89MB8GA1UdIwQY
MBaAFPrZIyPSK0QnXc7NTeKVtEeUYj6SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10a2pJOUlyUkNkZHpzMU40cFcwUjVSaVBwSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0
LTRmMzcwMTFlZTU4MS8xLzEtdGtqSTlJclJDZGR6czFONHBXMFI1UmlQcEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgzLzQ5ZjNhZC1lZjllLTRmYzQtOTVjNC00ZjM3MDExZWU1
ODEvMS8xLXRrakk5SXJSQ2RkenMxTjRwVzBSNVJpUHBJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHzd
5hP6BZWo0JfNBPedC/nYvrL9/+XvMfNGP4bo0MYk+i0Vqc5fns+SrG1evxml6G1l
nydyWQsonaAzinQwoB6g6EmXUBmnBrBAcbj8Y7+11jvemF9haeYtHM/nINnOcKuB
ew0F3lGBv5Q3Wy6lHLhzt4vY9A97N6c2jKGrr5rMRQHcNfvNizPBFPZ9JGDOzXA/
hA8YcrJ/9u05ImN6v+C9V8btc/1h6Pyu8W1tcAW/UIErlLisJ/SXLeupkhgdzoXj
WyY3hQc2NjHl8WXKgpiVIRiAQ6PW6wj5as2pcayNQCGXzZRDW3+7nqgMlLw+fY2Q
McGz07k1PJkbLks+Hw==
-----END CERTIFICATE-----
Generated at Tue May 13 12:55:21 2025 by rpki-client