Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: P9+ynK/6wyA9tBrQ8Y1aawcjlN7A7GPBCk4Llx86b8g=
Subject key identifier: FD:B0:7A:45:9D:74:5A:B0:83:9E:61:52:3D:F7:95:73:96:DA:C0:BC
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 0196BD80E5724E24D95F17DD7B9491EEB6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1198
Signing time: Sun 11 May 2025 04:01:03 +0000
Manifest this update: Sun 11 May 2025 04:01:03 +0000
Manifest next update: Mon 12 May 2025 04:01:03 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: uvp/KI4R1PCTBansKVz1gLHB/r2Dz+IStuJpQhrIkb8=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:e5:72:4e:24:d9:5f:17:dd:7b:94:91:ee:b6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: May 11 04:01:03 2025 GMT
Not After : May 12 04:01:03 2025 GMT
Subject: CN=fdb07a459d745ab0839e61523df7957396dac0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:49:87:c0:f1:e0:a1:7f:2f:4f:cf:d2:3f:
fb:da:04:d2:59:26:5a:97:90:3c:c0:1f:23:aa:3c:
15:1b:03:11:dd:b1:3b:b3:ca:10:f8:a6:cd:40:a4:
e2:fa:27:16:45:67:dd:14:09:a6:82:f1:13:05:5d:
7a:06:ce:b5:18:45:d0:17:eb:fd:13:1d:2d:8e:33:
d0:71:10:24:2d:3b:9f:c2:10:f8:71:20:17:9e:d5:
fe:5e:be:a1:a8:9b:83:36:77:b1:47:6e:e1:60:3e:
17:36:c6:c3:d0:11:17:6d:62:4b:1d:40:08:a8:2f:
a4:fb:13:91:4b:48:f2:31:bb:ff:00:05:de:ef:21:
2a:11:3b:e8:f7:7c:2f:20:db:69:b9:a7:4b:8d:86:
ca:ab:f6:6a:38:07:ba:82:6d:8a:84:58:0b:95:a8:
e0:9b:8e:47:67:9f:58:74:36:d1:94:dd:83:5c:43:
3e:ed:a3:7a:99:6b:00:f9:03:07:5d:32:05:09:e6:
0a:7e:ba:d8:ef:e5:25:cb:c1:ed:2f:9c:17:df:d2:
70:4e:75:06:9c:a4:8d:3f:15:6c:56:34:62:75:7e:
89:b8:e8:71:76:a7:c1:83:37:cf:ed:c8:aa:07:61:
54:62:d1:ab:a8:d4:dd:53:32:21:f3:d3:d2:40:e0:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:7A:45:9D:74:5A:B0:83:9E:61:52:3D:F7:95:73:96:DA:C0:BC
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f3:34:e3:44:a9:3f:38:56:fa:59:55:f1:36:a7:0e:2f:60:
e5:aa:78:d2:f8:da:4c:f0:a4:cd:ed:0d:cc:4e:fd:fc:74:2d:
4f:2a:81:a4:53:ee:ab:ca:6c:f1:d3:ae:74:3a:b9:a9:b9:6a:
d6:78:89:b2:6e:79:61:1b:b7:ef:05:d9:20:67:a8:2d:ab:19:
66:1f:dd:b8:3a:9b:43:be:95:3c:28:dd:f6:10:62:fa:f6:ce:
0a:c5:18:43:14:41:6a:9e:57:d5:3f:75:03:e4:80:cd:d0:2c:
ae:5f:d3:cd:a1:c1:e4:39:fc:39:db:96:64:78:da:25:93:68:
6b:dc:24:34:83:35:73:4e:0e:c5:ca:b0:5e:d3:e0:91:7b:b0:
db:90:2b:d4:1b:ba:f5:43:3f:00:b5:8a:90:e0:03:a4:92:83:
00:c8:db:8d:dc:3a:d3:e4:e3:38:66:e3:7f:76:39:79:97:b0:
f9:37:00:67:92:de:4c:ea:d8:00:59:8d:a6:97:69:4b:b2:61:
88:84:d0:5d:ef:b5:1e:a0:1b:0b:2f:9d:6e:95:6b:6b:3c:c9:
da:8c:08:13:c1:57:ec:8d:31:fb:a0:be:52:35:e9:8b:2c:0a:
07:12:dd:52:58:fe:2d:03:11:a3:b8:5b:a8:ae:b2:50:f0:db:
89:8b:d4:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gOVyTiTZXxfde5SR7ra+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODQ3N2U1NjlkMWQ3ZDYwZjA0NjlhN2NjOGE3ZjQ3NDYw
MzliYjcwHhcNMjUwNTExMDQwMTAzWhcNMjUwNTEyMDQwMTAzWjAzMTEwLwYDVQQD
EyhmZGIwN2E0NTlkNzQ1YWIwODM5ZTYxNTIzZGY3OTU3Mzk2ZGFjMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlklJh8Dx4KF/L0/P0j/72gTSWSZa
l5A8wB8jqjwVGwMR3bE7s8oQ+KbNQKTi+icWRWfdFAmmgvETBV16Bs61GEXQF+v9
Ex0tjjPQcRAkLTufwhD4cSAXntX+Xr6hqJuDNnexR27hYD4XNsbD0BEXbWJLHUAI
qC+k+xORS0jyMbv/AAXe7yEqETvo93wvINtpuadLjYbKq/ZqOAe6gm2KhFgLlajg
m45HZ59YdDbRlN2DXEM+7aN6mWsA+QMHXTIFCeYKfrrY7+Uly8HtL5wX39JwTnUG
nKSNPxVsVjRidX6JuOhxdqfBgzfP7ciqB2FUYtGrqNTdUzIh89PSQOBt0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2wekWddFqwg55hUj33lXOW2sC8MB8GA1UdIwQY
MBaAFE+Ed+Vp0dfWDwRpp8yKf0dGA5u3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEt
YWQxNDdkOTE1NzkxLzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEtYWQxNDdkOTE1Nzkx
LzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfM040Sp
PzhW+llV8TanDi9g5ap40vjaTPCkze0NzE79/HQtTyqBpFPuq8ps8dOudDq5qblq
1niJsm55YRu37wXZIGeoLasZZh/duDqbQ76VPCjd9hBi+vbOCsUYQxRBap5X1T91
A+SAzdAsrl/TzaHB5Dn8OduWZHjaJZNoa9wkNIM1c04OxcqwXtPgkXuw25Ar1Bu6
9UM/ALWKkOADpJKDAMjbjdw60+TjOGbjf3Y5eZew+TcAZ5LeTOrYAFmNppdpS7Jh
iITQXe+1HqAbCy+dbpVrazzJ2owIE8FX7I0x+6C+UjXpiywKBxLdUlj+LQMRo7hb
qK6yUPDbiYvU2g==
-----END CERTIFICATE-----
Generated at Sun May 11 12:05:06 2025 by rpki-client