Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: vYDIxoaP6tTmjOHBc2zFwLdkJHwQb9OuJZRWnPMGMi4=
Subject key identifier: BA:96:09:A7:3F:0E:0F:1E:44:E8:0A:BC:32:9A:59:5E:AA:F6:FD:A7
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 0196A3F7C2496EEF634C40030FA15366DA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 05:00:45 +0000
Manifest this update: Tue 06 May 2025 05:00:45 +0000
Manifest next update: Wed 07 May 2025 05:00:45 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: 5owzqwWYE1yihxwz8PBuhd8uncr9W7SJsjQTHhBzH7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:c2:49:6e:ef:63:4c:40:03:0f:a1:53:66:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: May 6 05:00:45 2025 GMT
Not After : May 7 05:00:45 2025 GMT
Subject: CN=ba9609a73f0e0f1e44e80abc329a595eaaf6fda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:1e:72:c1:b3:3c:89:18:4e:98:23:3e:be:
38:90:d7:7e:2a:2d:38:76:36:55:a0:8e:ff:50:32:
d5:81:af:f0:67:db:37:40:4d:0f:4b:18:1e:c4:db:
d0:fd:e5:cb:8f:ee:21:ea:c0:29:be:96:dc:cb:c8:
c1:a4:aa:a8:d3:a3:3c:24:56:f4:ca:26:c4:ee:06:
83:72:5c:0e:9d:3e:8d:36:ed:9f:cb:fc:80:18:82:
96:91:08:09:89:da:37:39:8f:3d:05:d7:d1:3c:4b:
5f:b1:a3:dc:c5:d6:c2:af:b4:49:3c:69:32:e4:10:
20:ad:6b:b3:25:d5:b7:26:84:eb:2f:5c:28:db:5e:
fa:36:75:e7:ed:4f:6d:fc:49:c4:e2:aa:1e:53:b2:
f4:3d:da:2f:83:c7:8b:13:48:42:03:72:c5:90:51:
2b:73:b2:58:94:f0:d8:6b:1c:2f:f2:bf:12:49:6a:
18:77:f2:ab:9d:10:7d:1a:82:2b:55:a6:72:5b:b5:
22:8a:86:e5:e3:9d:1b:ac:13:02:7c:ff:ff:9a:76:
b1:44:6b:e6:34:dc:15:b0:16:eb:80:7b:15:75:ab:
00:aa:fb:8b:c6:b3:c4:f9:4f:68:9b:fc:84:dc:3b:
da:5d:08:bf:b9:47:88:70:6c:5f:33:c5:23:b5:4f:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:09:A7:3F:0E:0F:1E:44:E8:0A:BC:32:9A:59:5E:AA:F6:FD:A7
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:74:1a:db:34:40:92:96:28:27:bb:1b:6a:3d:9a:cb:1b:
52:05:4b:21:fe:75:55:a9:66:a7:ea:58:03:83:dd:07:52:bf:
16:e9:a9:4d:bc:b7:e1:9d:fe:9c:41:f8:69:41:cd:30:63:c9:
9a:db:15:a2:2f:e2:3b:46:9b:c2:25:78:64:18:32:55:06:7d:
e8:f1:a1:0f:5c:7e:d6:62:26:b8:9e:5b:2d:06:61:09:28:8e:
6e:b6:af:b5:a7:d1:a9:76:8f:4c:9a:04:0a:54:6b:25:28:5c:
87:5d:6e:d5:64:21:0b:d8:6f:1f:91:84:b6:15:bf:d6:d9:ba:
9a:a8:80:9c:43:a2:1c:a9:9f:35:41:b3:f6:a2:76:c3:e4:3c:
98:b8:36:f5:29:03:95:69:3c:05:9e:5a:23:e0:dc:9f:fa:27:
9c:76:f7:99:db:46:66:8a:4a:9d:04:39:98:d2:5e:44:ba:2f:
1a:67:d7:d9:41:e1:bf:b2:42:5f:de:4b:f7:9e:04:c1:84:16:
e0:cc:e9:7c:5e:6e:c1:7d:47:83:d0:a2:ab:7e:51:7c:1c:24:
8a:de:1d:96:79:6b:0e:ad:2b:e1:64:39:6a:72:0d:d8:6b:6e:
7f:7e:f7:e5:8a:03:7d:b5:0a:68:0a:b2:e6:ba:7d:61:27:ee:
93:d7:a8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaj98JJbu9jTEADD6FTZtpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjUwNTA2MDUwMDQ1WhcNMjUwNTA3MDUwMDQ1WjAzMTEwLwYDVQQD
EyhiYTk2MDlhNzNmMGUwZjFlNDRlODBhYmMzMjlhNTk1ZWFhZjZmZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoEecsGzPIkYTpgjPr44kNd+Ki04
djZVoI7/UDLVga/wZ9s3QE0PSxgexNvQ/eXLj+4h6sApvpbcy8jBpKqo06M8JFb0
yibE7gaDclwOnT6NNu2fy/yAGIKWkQgJido3OY89BdfRPEtfsaPcxdbCr7RJPGky
5BAgrWuzJdW3JoTrL1wo2176NnXn7U9t/EnE4qoeU7L0Pdovg8eLE0hCA3LFkFEr
c7JYlPDYaxwv8r8SSWoYd/KrnRB9GoIrVaZyW7Uiiobl450brBMCfP//mnaxRGvm
NNwVsBbrgHsVdasAqvuLxrPE+U9om/yE3DvaXQi/uUeIcGxfM8UjtU+iDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqWCac/Dg8eROgKvDKaWV6q9v2nMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWx0Gts0
QJKWKCe7G2o9mssbUgVLIf51Valmp+pYA4PdB1K/FumpTby34Z3+nEH4aUHNMGPJ
mtsVoi/iO0abwiV4ZBgyVQZ96PGhD1x+1mImuJ5bLQZhCSiObravtafRqXaPTJoE
ClRrJShch11u1WQhC9hvH5GEthW/1tm6mqiAnEOiHKmfNUGz9qJ2w+Q8mLg29SkD
lWk8BZ5aI+Dcn/onnHb3mdtGZopKnQQ5mNJeRLovGmfX2UHhv7JCX95L954EwYQW
4MzpfF5uwX1Hg9Ciq35RfBwkit4dlnlrDq0r4WQ5anIN2Gtuf3735YoDfbUKaAqy
5rp9YSfuk9eo9g==
-----END CERTIFICATE-----
Generated at Tue May 6 12:53:19 2025 by rpki-client