Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: ivBiHC0eb9F42DzZZ6g/z3Ub0ONnTW7Ns3747b8JrqI=
Subject key identifier: 8E:28:E0:68:3F:30:7F:37:57:4B:BD:5A:8D:C9:D1:A7:BB:B4:89:AC
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 0196B58FC0DA7D9CA42BD1B0C66693A3A8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 02F1
Signing time: Fri 09 May 2025 15:00:19 +0000
Manifest this update: Fri 09 May 2025 15:00:19 +0000
Manifest next update: Sat 10 May 2025 15:00:19 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: gly1xpY77JvNAdhB4hcc70B2+4nqOfn629R+iki8hKw=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:8f:c0:da:7d:9c:a4:2b:d1:b0:c6:66:93:a3:a8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: May 9 15:00:19 2025 GMT
Not After : May 10 15:00:19 2025 GMT
Subject: CN=8e28e0683f307f37574bbd5a8dc9d1a7bbb489ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:7e:71:ba:56:12:7c:08:4e:0d:bc:7a:72:
ac:f3:92:8d:30:23:d8:63:a8:b4:34:88:1d:32:b5:
cb:68:af:d6:4b:c1:48:03:19:4b:ef:eb:17:56:98:
1a:59:47:9c:be:70:56:ad:e4:55:14:5d:f4:48:fb:
69:11:1e:78:5b:2b:dc:a8:2f:97:cf:b2:cb:42:c7:
3c:02:c9:9d:62:44:cf:c9:cd:d6:af:27:96:d1:2d:
6f:9b:7d:9e:a2:45:7f:50:0f:ec:11:7a:47:94:ba:
28:66:e5:73:56:7f:c5:9f:5b:76:d6:1a:02:95:26:
eb:c1:e6:0a:b2:53:03:bf:26:c6:79:28:5a:15:44:
eb:ff:97:52:c2:67:88:ee:38:af:f7:0e:94:87:4c:
9b:1c:05:4f:0a:a3:37:37:b2:c9:82:16:69:f9:0b:
68:c8:00:eb:4f:32:e3:24:02:0f:80:9e:87:cc:06:
90:a4:5d:40:2b:d6:6b:61:28:d5:02:b5:81:ee:ba:
f3:51:c8:31:cf:ad:87:19:e0:6e:18:f7:57:b1:b4:
19:d4:29:ea:4f:f9:20:af:93:1d:8f:f2:ce:fe:d7:
2d:57:a9:be:b0:a3:01:b1:6c:b0:f7:ed:cb:22:2a:
c4:7e:08:2e:9c:a8:05:79:1d:59:6e:fb:83:79:bb:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:28:E0:68:3F:30:7F:37:57:4B:BD:5A:8D:C9:D1:A7:BB:B4:89:AC
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9a:53:e1:0f:59:5a:f7:37:a8:6b:5b:64:04:76:e9:42:4e:
29:c8:c3:56:56:fa:14:3c:1a:3d:f3:26:46:48:88:fe:c6:25:
22:c3:df:3e:85:30:07:ed:13:b7:af:d0:97:55:f5:72:60:d4:
78:92:1c:e6:7f:5c:45:e3:95:65:20:91:56:71:37:d3:fa:cf:
dd:cb:92:6f:26:d5:4e:e1:d7:66:84:0c:6c:8f:6f:05:48:1e:
5c:d4:13:e4:23:47:3c:8f:72:89:c5:d1:66:e2:4e:05:d8:7a:
81:08:0b:5e:1f:f2:ed:1b:de:d0:18:45:27:7b:86:c6:ab:56:
c2:8a:ec:ed:44:c1:48:2a:83:b6:1a:f1:32:93:ac:d0:82:f6:
fe:94:5e:ab:3d:e4:0a:6e:07:50:53:fb:77:c0:57:e1:7b:21:
e5:93:d0:79:8a:dd:85:41:f3:93:cc:f8:25:a9:6f:99:db:2f:
77:5f:c5:97:99:f8:89:a0:18:fa:0e:80:ca:0d:b2:e6:52:31:
de:ed:be:c1:97:fc:83:43:cb:fc:40:e3:ff:57:9b:c4:89:c0:
05:eb:05:d6:1d:77:9f:a4:81:95:88:a4:f2:51:3b:b1:e0:26:
52:98:92:f6:b6:ba:fa:54:f9:a5:9e:02:96:85:dd:ff:99:d3:
cf:ca:47:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1j8DafZykK9GwxmaTo6jUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGRlNzJlNTAwNmFmNmRiNTUxMTVlMWI3MDkzMjAyM2Nl
ZWNiYTQwHhcNMjUwNTA5MTUwMDE5WhcNMjUwNTEwMTUwMDE5WjAzMTEwLwYDVQQD
Eyg4ZTI4ZTA2ODNmMzA3ZjM3NTc0YmJkNWE4ZGM5ZDFhN2JiYjQ4OWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW5+cbpWEnwITg28enKs85KNMCPY
Y6i0NIgdMrXLaK/WS8FIAxlL7+sXVpgaWUecvnBWreRVFF30SPtpER54WyvcqC+X
z7LLQsc8AsmdYkTPyc3WryeW0S1vm32eokV/UA/sEXpHlLooZuVzVn/Fn1t21hoC
lSbrweYKslMDvybGeShaFUTr/5dSwmeI7jiv9w6Uh0ybHAVPCqM3N7LJghZp+Qto
yADrTzLjJAIPgJ6HzAaQpF1AK9ZrYSjVArWB7rrzUcgxz62HGeBuGPdXsbQZ1Cnq
T/kgr5Mdj/LO/tctV6m+sKMBsWyw9+3LIirEfggunKgFeR1ZbvuDebtx+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4o4Gg/MH83V0u9Wo3J0ae7tImsMB8GA1UdIwQY
MBaAFE+N5y5QBq9ttVEV4bcJMgI87sukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQt
NWI1MDc4NjI1ZGVhLzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQtNWI1MDc4NjI1ZGVh
LzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUppT4Q9Z
Wvc3qGtbZAR26UJOKcjDVlb6FDwaPfMmRkiI/sYlIsPfPoUwB+0Tt6/Ql1X1cmDU
eJIc5n9cReOVZSCRVnE30/rP3cuSbybVTuHXZoQMbI9vBUgeXNQT5CNHPI9yicXR
ZuJOBdh6gQgLXh/y7Rve0BhFJ3uGxqtWwors7UTBSCqDthrxMpOs0IL2/pReqz3k
Cm4HUFP7d8BX4Xsh5ZPQeYrdhUHzk8z4Jalvmdsvd1/Fl5n4iaAY+g6Ayg2y5lIx
3u2+wZf8g0PL/EDj/1ebxInABesF1h13n6SBlYik8lE7seAmUpiS9ra6+lT5pZ4C
loXd/5nTz8pHEg==
-----END CERTIFICATE-----
Generated at Fri May 9 20:34:42 2025 by rpki-client