Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: AEiq2MhX0QoHF1su/xzvvlcPSTY4JUNHmzhdnw+HgTo=
Subject key identifier: CF:51:84:64:36:BC:D7:93:5F:5F:D5:B4:4F:24:81:1D:B9:DC:8E:BC
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 0196C201E539ED08A8BF7A72D4C13D24F656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 01:00:26 +0000
Manifest this update: Mon 12 May 2025 01:00:26 +0000
Manifest next update: Tue 13 May 2025 01:00:26 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: /tzSifKv3Gj64UOtkDvPETa0Gq/DmH4iWoF+sOe/oRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:e5:39:ed:08:a8:bf:7a:72:d4:c1:3d:24:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: May 12 01:00:26 2025 GMT
Not After : May 13 01:00:26 2025 GMT
Subject: CN=cf51846436bcd7935f5fd5b44f24811db9dc8ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d7:f8:27:cf:77:ec:b0:03:ae:e8:c6:7e:60:
cb:9b:50:e1:c0:d7:0d:6d:92:4d:5f:dc:2a:d5:b5:
ce:ad:e5:84:0c:cb:a4:c6:61:fa:3c:05:1a:18:0a:
42:77:39:d1:28:15:69:e4:f3:4e:34:89:fd:95:3a:
d8:81:42:88:e1:4f:d1:1a:36:0f:9d:3c:11:82:17:
c3:a2:00:f6:eb:17:9f:9e:b2:c3:e1:21:c9:2b:7c:
71:09:10:d3:3f:e2:e6:d1:1d:cd:40:4f:f7:72:02:
c7:12:eb:0a:bd:8e:48:fb:58:e1:23:ca:7b:b3:9a:
e0:cd:ef:e3:d0:35:10:80:da:17:1e:d9:02:70:95:
d3:53:19:3f:14:3b:8c:c8:2e:30:59:13:b0:3d:28:
03:df:0a:e4:4d:97:a4:ce:7e:49:25:a8:76:e0:1b:
72:d3:06:1e:e7:b4:83:cb:ad:cc:34:85:28:9b:5d:
6b:e7:dc:d0:fb:d4:e6:ba:58:f7:69:b4:0e:8b:65:
fe:d0:a2:4d:56:26:8e:7e:dc:25:73:69:0c:8e:8c:
d4:2f:95:bc:ab:7e:ac:63:83:10:19:f0:a7:9c:e3:
99:35:c0:f7:f2:d5:15:85:73:d6:7c:d7:90:36:f5:
f6:5f:b4:e0:07:ef:f4:88:63:3a:0c:eb:d6:2e:bd:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:84:64:36:BC:D7:93:5F:5F:D5:B4:4F:24:81:1D:B9:DC:8E:BC
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c5:80:4e:57:c3:78:55:1c:7d:87:76:43:c9:c8:0c:5d:e1:
05:ab:dd:69:89:7a:11:73:c2:8e:0b:bd:4b:bb:24:b7:71:68:
11:40:83:57:04:5f:1b:11:69:32:f7:56:9b:3f:1d:54:31:6b:
35:64:3b:ce:78:a5:69:26:e5:43:3d:fd:c1:9a:7b:f1:cc:3f:
db:3d:af:b3:9b:ca:b4:ec:34:d4:a5:42:c6:0f:e6:a8:03:92:
1f:4a:6c:81:29:05:85:9e:6c:fb:a8:23:a3:ab:33:30:03:27:
f9:c6:20:0a:84:62:bb:74:93:84:59:75:cf:d4:c8:3f:2a:70:
68:4b:33:85:06:da:4b:96:2b:c0:26:57:ab:14:d5:a1:4c:02:
5f:b5:af:67:94:e3:27:1e:ce:89:f0:c5:b7:f6:d1:8c:48:01:
26:89:f9:b6:ea:e8:e9:7c:f6:12:7e:f8:55:4d:68:26:26:bc:
0d:70:e7:df:af:02:85:7a:3f:f6:93:e1:ef:67:df:b1:41:4d:
98:ba:d0:39:5a:32:c4:81:93:39:72:08:85:5e:70:f6:03:bf:
37:df:fd:c6:f3:9a:4e:df:e8:a7:5a:53:e3:44:04:0d:e0:f1:
21:a0:bf:28:e1:1e:42:e6:c2:ca:a5:95:95:87:d8:bf:27:b7:
04:0a:4b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAeU57Qiov3py1ME9JPZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh
NzIwZjgwHhcNMjUwNTEyMDEwMDI2WhcNMjUwNTEzMDEwMDI2WjAzMTEwLwYDVQQD
EyhjZjUxODQ2NDM2YmNkNzkzNWY1ZmQ1YjQ0ZjI0ODExZGI5ZGM4ZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9df4J8937LADrujGfmDLm1DhwNcN
bZJNX9wq1bXOreWEDMukxmH6PAUaGApCdznRKBVp5PNONIn9lTrYgUKI4U/RGjYP
nTwRghfDogD26xefnrLD4SHJK3xxCRDTP+Lm0R3NQE/3cgLHEusKvY5I+1jhI8p7
s5rgze/j0DUQgNoXHtkCcJXTUxk/FDuMyC4wWROwPSgD3wrkTZekzn5JJah24Bty
0wYe57SDy63MNIUom11r59zQ+9Tmulj3abQOi2X+0KJNViaOftwlc2kMjozUL5W8
q36sY4MQGfCnnOOZNcD38tUVhXPWfNeQNvX2X7TgB+/0iGM6DOvWLr0XPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9RhGQ2vNeTX1/VtE8kgR253I68MB8GA1UdIwQY
MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt
MWIwOGY3ZjUwMTVkLzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk
LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucWATlfD
eFUcfYd2Q8nIDF3hBavdaYl6EXPCjgu9S7skt3FoEUCDVwRfGxFpMvdWmz8dVDFr
NWQ7znilaSblQz39wZp78cw/2z2vs5vKtOw01KVCxg/mqAOSH0psgSkFhZ5s+6gj
o6szMAMn+cYgCoRiu3SThFl1z9TIPypwaEszhQbaS5YrwCZXqxTVoUwCX7WvZ5Tj
Jx7OifDFt/bRjEgBJon5turo6Xz2En74VU1oJia8DXDn368ChXo/9pPh72ffsUFN
mLrQOVoyxIGTOXIIhV5w9gO/N9/9xvOaTt/op1pT40QEDeDxIaC/KOEeQubCyqWV
lYfYvye3BApL0w==
-----END CERTIFICATE-----
Generated at Mon May 12 04:55:58 2025 by rpki-client