Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: DQn48N+i5NB+5+4DKZa57xqwevi8cbdWoTi1lLuO8MY=
Subject key identifier: FA:01:EA:53:5B:A9:DD:F0:18:6D:5B:B7:F2:89:47:0A:7F:A0:BA:63
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 0196D51ACE7FB7999E31BF20AF4B766D69A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0DD5
Signing time: Thu 15 May 2025 18:00:25 +0000
Manifest this update: Thu 15 May 2025 18:00:25 +0000
Manifest next update: Fri 16 May 2025 18:00:25 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: tgCp3329ESwgdQh7eCaVKGy4SYyViLuRWeTCbaiHxkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1a:ce:7f:b7:99:9e:31:bf:20:af:4b:76:6d:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: May 15 18:00:25 2025 GMT
Not After : May 16 18:00:25 2025 GMT
Subject: CN=fa01ea535ba9ddf0186d5bb7f289470a7fa0ba63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:d4:a2:24:97:13:7e:3e:01:4a:e6:58:cb:
fc:d2:42:f3:8c:da:e9:f4:8b:96:3e:19:3e:03:8d:
ea:84:37:12:db:ee:27:fe:b4:37:c3:3a:ce:6c:72:
22:8c:58:5c:ed:11:ea:59:fe:d3:94:dc:cf:2c:01:
3c:0a:e7:3b:34:68:a5:0e:e4:ec:67:df:96:14:07:
54:cf:87:7d:ae:e5:9e:97:02:17:72:b8:2f:a3:93:
ae:ae:d7:4d:3d:49:bf:a7:df:5a:aa:71:23:f4:ed:
30:15:6b:cb:f5:cc:16:1a:70:0e:08:d5:19:c3:6d:
87:a4:a3:f9:68:d2:ac:10:f9:1b:0a:6c:10:87:ac:
73:73:ac:f3:66:81:7d:b3:72:77:a0:14:6a:53:5d:
8a:60:7f:b0:51:e4:a7:1e:9c:81:dc:bc:f6:3a:d8:
a5:16:8f:81:b4:2e:b9:05:84:02:20:3c:26:c4:09:
c0:61:55:1d:39:6a:60:c3:ff:c8:3d:23:84:8e:2f:
7f:0c:d3:9b:06:b7:e2:ff:d5:b3:67:9a:d1:8c:30:
02:08:35:7f:91:04:e1:7a:6f:13:c4:7f:ec:b8:34:
b6:50:7b:2e:29:0e:90:ce:95:25:7b:b6:93:4d:31:
c3:70:1b:d5:79:d9:10:42:03:34:0d:a7:59:3a:a6:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:EA:53:5B:A9:DD:F0:18:6D:5B:B7:F2:89:47:0A:7F:A0:BA:63
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a7:6a:07:c8:59:38:97:d1:56:39:4b:10:08:04:d6:5c:99:
68:91:6b:d3:20:69:7d:ea:b1:a7:04:48:f6:ba:79:18:e0:0f:
24:3f:56:1d:1d:5d:c9:c3:55:43:b1:dc:c6:7f:fa:09:cc:a0:
51:e7:d4:57:e0:71:cd:e1:a7:a8:7f:79:71:88:8a:98:06:09:
20:20:9a:9c:5a:28:3b:fe:5a:6a:a5:dd:95:26:2b:2b:05:1b:
ab:84:14:df:24:20:dd:d9:fc:b1:94:8d:39:57:60:83:6b:c4:
80:02:c8:8b:08:2c:89:01:38:94:7a:04:17:28:22:4b:0d:4a:
1c:b3:30:b2:a0:d4:7d:e8:69:67:99:fd:1b:06:ab:0e:ec:33:
5b:49:c8:51:04:8e:25:58:b8:32:e1:f0:fc:c9:34:bb:d8:a0:
b6:1a:72:c3:78:37:53:c6:45:d1:d6:4f:d9:ce:89:cc:b4:93:
cc:2f:a4:ef:ef:99:5f:ca:b1:c6:7b:bf:c1:1e:c3:f4:9e:04:
29:e3:95:cb:af:59:dc:6c:eb:c6:39:ba:62:7f:57:6d:8e:0c:
04:15:89:2c:ff:4d:c4:ec:ab:21:68:20:8e:70:60:70:8e:8c:
6a:76:0a:ed:12:30:88:f1:fd:13:f4:97:0a:3d:17:0e:c0:76:
47:11:a5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbVGs5/t5meMb8gr0t2bWmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjUwNTE1MTgwMDI1WhcNMjUwNTE2MTgwMDI1WjAzMTEwLwYDVQQD
EyhmYTAxZWE1MzViYTlkZGYwMTg2ZDViYjdmMjg5NDcwYTdmYTBiYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDrUoiSXE34+AUrmWMv80kLzjNrp
9IuWPhk+A43qhDcS2+4n/rQ3wzrObHIijFhc7RHqWf7TlNzPLAE8Cuc7NGilDuTs
Z9+WFAdUz4d9ruWelwIXcrgvo5OurtdNPUm/p99aqnEj9O0wFWvL9cwWGnAOCNUZ
w22HpKP5aNKsEPkbCmwQh6xzc6zzZoF9s3J3oBRqU12KYH+wUeSnHpyB3Lz2Otil
Fo+BtC65BYQCIDwmxAnAYVUdOWpgw//IPSOEji9/DNObBrfi/9WzZ5rRjDACCDV/
kQThem8TxH/suDS2UHsuKQ6QzpUle7aTTTHDcBvVedkQQgM0DadZOqZI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoB6lNbqd3wGG1bt/KJRwp/oLpjMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6dqB8hZ
OJfRVjlLEAgE1lyZaJFr0yBpfeqxpwRI9rp5GOAPJD9WHR1dycNVQ7Hcxn/6Ccyg
UefUV+BxzeGnqH95cYiKmAYJICCanFooO/5aaqXdlSYrKwUbq4QU3yQg3dn8sZSN
OVdgg2vEgALIiwgsiQE4lHoEFygiSw1KHLMwsqDUfehpZ5n9GwarDuwzW0nIUQSO
JVi4MuHw/Mk0u9igthpyw3g3U8ZF0dZP2c6JzLSTzC+k7++ZX8qxxnu/wR7D9J4E
KeOVy69Z3Gzrxjm6Yn9XbY4MBBWJLP9NxOyrIWggjnBgcI6ManYK7RIwiPH9E/SX
Cj0XDsB2RxGlrQ==
-----END CERTIFICATE-----
Generated at Thu May 15 20:31:07 2025 by rpki-client