Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: WbjnPASS/TnmHdDB7V4W19ePulJRrEIRfLKc2Yw4+/E=
Subject key identifier: 83:21:D8:7E:6A:31:44:1D:25:32:AF:FC:7C:6E:04:E7:01:F1:FE:B4
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 01969E2C568D05BE96354B2E8292BAF4C4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 14B5
Signing time: Mon 05 May 2025 02:00:27 +0000
Manifest this update: Mon 05 May 2025 02:00:27 +0000
Manifest next update: Tue 06 May 2025 02:00:27 +0000
Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=)
2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: 1thhgHv/q/ticYRP/qv0QWlltTmEXAJynfnwczrs1ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:56:8d:05:be:96:35:4b:2e:82:92:ba:f4:c4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: May 5 02:00:27 2025 GMT
Not After : May 6 02:00:27 2025 GMT
Subject: CN=8321d87e6a31441d2532affc7c6e04e701f1feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:e0:56:34:33:a9:56:25:7a:a0:eb:35:28:
53:1c:68:f9:83:b8:41:1e:76:b9:ff:8c:29:38:dd:
f8:dc:6a:ea:00:69:c7:b1:6c:7c:92:d7:74:f0:bf:
e8:0b:59:98:b5:9e:52:ba:86:2a:bb:13:fe:41:23:
3f:76:b0:0d:c1:bd:ca:8e:4d:5c:b8:c8:65:ee:01:
76:5e:9a:ce:74:e4:a6:9a:e0:4c:5b:e9:75:34:58:
53:69:b4:2d:2a:13:4d:56:b9:1f:da:11:f2:0f:22:
af:84:30:53:ab:69:60:6c:2c:0f:81:82:f4:7e:8b:
84:69:09:c6:b1:83:da:94:a9:30:99:28:d5:44:9e:
69:8c:0c:42:bb:c1:55:8e:45:a4:ce:ac:29:3f:38:
11:ea:14:56:b6:73:dc:2c:e5:08:77:36:45:b6:bf:
88:04:09:18:83:aa:22:17:df:79:ab:d3:19:19:b0:
1b:be:72:27:05:54:7f:46:ac:a0:79:0f:53:b2:bc:
e8:e9:ae:91:a8:de:ee:25:02:17:6e:1e:47:b9:fa:
fc:9d:64:23:58:da:f2:0a:5d:2a:61:01:52:2f:e0:
09:43:e5:e7:0b:9d:57:86:64:20:eb:14:aa:c9:96:
38:d1:31:dd:06:2d:3b:d9:e5:db:89:90:75:e2:97:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:D8:7E:6A:31:44:1D:25:32:AF:FC:7C:6E:04:E7:01:F1:FE:B4
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:71:d4:d4:de:20:51:40:f8:2f:5d:45:dc:92:88:e3:dd:
4e:bd:4d:c6:3a:0a:45:c6:5f:28:11:43:68:cf:3e:15:64:4a:
56:3b:7c:48:50:eb:e4:31:79:56:e3:ca:26:2b:aa:6d:49:bb:
95:ed:88:a3:78:80:c8:af:b8:e8:38:3a:7b:03:33:19:68:f7:
4f:c3:d5:2b:38:2c:d9:6a:63:cb:08:cb:82:12:e9:65:9a:16:
df:47:df:58:5d:27:1b:7e:61:8e:cf:01:5a:eb:53:e3:a4:0d:
64:e1:0d:4f:8b:ec:3c:6c:15:21:fd:45:3b:97:6d:fa:5a:4c:
6d:fa:7e:99:b9:64:b3:23:fe:a1:37:42:a0:58:eb:c3:34:eb:
d5:2a:09:8c:ac:64:f4:e2:42:11:00:46:d8:2f:55:a6:ca:c0:
30:d8:25:85:db:67:15:2d:49:b4:93:03:57:a6:97:4f:68:10:
7b:6c:64:1d:08:e0:06:b8:37:89:2d:a1:1f:61:e2:c4:c2:9c:
9f:f6:f8:59:b2:36:5b:6a:37:03:a9:9c:f2:3c:ca:37:93:a7:
31:fb:32:25:51:af:58:77:f6:b7:94:82:5b:c3:6e:32:a2:15:
1c:60:07:87:48:2f:89:52:9d:7c:c8:ac:c1:fa:a7:93:2f:49:
21:93:ff:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLFaNBb6WNUsugpK69MTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzdlNTZmNDY4N2VhMWIyZDc3NjNkMDg4OGQxMDUwMjM1
YjU3NGIwHhcNMjUwNTA1MDIwMDI3WhcNMjUwNTA2MDIwMDI3WjAzMTEwLwYDVQQD
Eyg4MzIxZDg3ZTZhMzE0NDFkMjUzMmFmZmM3YzZlMDRlNzAxZjFmZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssjgVjQzqVYleqDrNShTHGj5g7hB
Hna5/4wpON343GrqAGnHsWx8ktd08L/oC1mYtZ5SuoYquxP+QSM/drANwb3Kjk1c
uMhl7gF2XprOdOSmmuBMW+l1NFhTabQtKhNNVrkf2hHyDyKvhDBTq2lgbCwPgYL0
fouEaQnGsYPalKkwmSjVRJ5pjAxCu8FVjkWkzqwpPzgR6hRWtnPcLOUIdzZFtr+I
BAkYg6oiF995q9MZGbAbvnInBVR/RqygeQ9Tsrzo6a6RqN7uJQIXbh5Hufr8nWQj
WNryCl0qYQFSL+AJQ+XnC51XhmQg6xSqyZY40THdBi072eXbiZB14pcPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMh2H5qMUQdJTKv/HxuBOcB8f60MB8GA1UdIwQY
MBaAFLTH5W9Gh+obLXdj0IiNEFAjW1dLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTIt
MDU5OWYwYjJiMDlhLzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTItMDU5OWYwYjJiMDlh
LzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwlx1NTe
IFFA+C9dRdySiOPdTr1NxjoKRcZfKBFDaM8+FWRKVjt8SFDr5DF5VuPKJiuqbUm7
le2Io3iAyK+46Dg6ewMzGWj3T8PVKzgs2WpjywjLghLpZZoW30ffWF0nG35hjs8B
WutT46QNZOENT4vsPGwVIf1FO5dt+lpMbfp+mblksyP+oTdCoFjrwzTr1SoJjKxk
9OJCEQBG2C9VpsrAMNglhdtnFS1JtJMDV6aXT2gQe2xkHQjgBrg3iS2hH2HixMKc
n/b4WbI2W2o3A6mc8jzKN5OnMfsyJVGvWHf2t5SCW8NuMqIVHGAHh0gviVKdfMis
wfqnky9JIZP/Jg==
-----END CERTIFICATE-----
Generated at Mon May 5 11:23:06 2025 by rpki-client