Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: BsQWdkH7OSMW9Fn72QYAWnFlK0mvenpv2Wtyw7iMm/0=
Subject key identifier: 31:45:DC:94:D9:88:40:B2:E9:38:CF:35:4A:43:B8:F4:DA:F2:B6:5A
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0196B9357E6C119FE9B6B6D0107C52F3B83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 1507
Signing time: Sat 10 May 2025 08:00:12 +0000
Manifest this update: Sat 10 May 2025 08:00:12 +0000
Manifest next update: Sun 11 May 2025 08:00:12 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: 04D6RtJolvzIKVxrO4gnmfvUAP3o0UkekmiyNxow/n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:7e:6c:11:9f:e9:b6:b6:d0:10:7c:52:f3:b8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: May 10 08:00:12 2025 GMT
Not After : May 11 08:00:12 2025 GMT
Subject: CN=3145dc94d98840b2e938cf354a43b8f4daf2b65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:0a:80:eb:f7:64:77:bb:2d:66:8c:bb:72:
b0:2e:1f:fb:1f:90:e4:31:6f:bd:70:4e:27:98:61:
03:eb:89:b6:42:9f:f6:54:32:46:7f:03:b8:b2:86:
7a:6b:6a:5c:0a:5f:e8:02:4a:41:ef:d5:fa:56:cd:
35:77:d0:fa:57:f1:4b:f4:33:0b:4c:c1:ec:c3:7b:
7f:e1:55:5c:d1:59:e7:51:9b:03:9a:d4:60:40:4d:
21:58:74:a9:2e:b3:16:1d:5b:f9:0d:ee:61:54:24:
12:2e:43:81:74:ee:fa:bb:6d:33:1f:6c:18:0f:4c:
0f:97:3f:45:c6:76:96:62:b4:77:46:2c:b3:cc:b2:
82:ce:64:40:6c:74:61:35:79:57:36:81:49:84:10:
f2:bd:e6:07:ad:1f:23:b0:14:63:3d:06:f1:7b:31:
9e:16:26:44:0a:74:9e:20:c3:98:ad:29:da:76:e8:
16:07:77:fa:cf:82:3d:b1:16:5d:aa:4a:de:26:bb:
17:28:14:9a:5b:2d:9c:a7:ef:45:70:35:d1:d9:af:
b7:34:4b:be:6d:02:6c:98:f4:bf:03:2a:8c:1b:2b:
23:ae:1a:3f:4c:3d:57:83:49:e4:82:ec:6f:2a:d6:
83:c3:9e:a4:9f:6a:1f:60:0c:6a:6c:cc:01:c0:e4:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:DC:94:D9:88:40:B2:E9:38:CF:35:4A:43:B8:F4:DA:F2:B6:5A
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:07:ac:ef:23:e6:31:f7:af:1e:fb:05:20:0b:d0:be:40:f7:
44:df:a8:61:dd:f0:af:c2:8a:00:d1:8c:21:d3:86:d8:cb:8f:
39:ff:73:ef:a9:6a:7e:e0:19:1e:59:11:0b:89:7f:38:fb:58:
39:47:16:d8:fe:a3:32:34:bd:e5:b8:cf:f0:ec:7f:05:57:75:
47:fa:ab:fc:54:3c:54:20:43:65:db:66:d6:b0:70:6b:55:80:
03:2b:eb:1b:38:46:0f:3c:3c:eb:d3:c9:5e:a5:29:e6:57:2f:
5e:3a:07:52:30:84:ad:03:4f:82:e5:e3:30:6e:41:c5:b0:32:
bb:30:72:d8:30:5a:74:79:04:4c:9f:81:2b:2c:bc:5f:bb:e0:
37:3f:51:39:58:09:1a:b5:c9:9f:18:fa:f3:fb:1e:ba:01:bf:
8f:92:6f:2f:c5:5d:9a:6a:28:33:83:e5:9f:9e:e5:d8:02:24:
2b:16:97:6d:af:51:0d:d4:c1:cb:fa:97:75:8e:22:d9:8c:6a:
4f:8c:b4:8d:ec:2a:5e:dc:24:d4:66:69:56:94:d1:90:e9:bd:
27:dc:3b:e2:9c:ea:81:c1:01:c2:f9:64:14:ce:af:3e:3f:7b:
7a:26:b4:a7:66:59:3f:a2:58:45:30:2f:f8:ba:aa:5f:dd:36:
bb:a1:bc:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5NX5sEZ/ptrbQEHxS87g9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTIwODVjN2RlM2I1OTgyMTZiODlmYjBmMmIxZDkzMGRl
NjZjMTkwHhcNMjUwNTEwMDgwMDEyWhcNMjUwNTExMDgwMDEyWjAzMTEwLwYDVQQD
EygzMTQ1ZGM5NGQ5ODg0MGIyZTkzOGNmMzU0YTQzYjhmNGRhZjJiNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquMKgOv3ZHe7LWaMu3KwLh/7H5Dk
MW+9cE4nmGED64m2Qp/2VDJGfwO4soZ6a2pcCl/oAkpB79X6Vs01d9D6V/FL9DML
TMHsw3t/4VVc0VnnUZsDmtRgQE0hWHSpLrMWHVv5De5hVCQSLkOBdO76u20zH2wY
D0wPlz9FxnaWYrR3RiyzzLKCzmRAbHRhNXlXNoFJhBDyveYHrR8jsBRjPQbxezGe
FiZECnSeIMOYrSnadugWB3f6z4I9sRZdqkreJrsXKBSaWy2cp+9FcDXR2a+3NEu+
bQJsmPS/AyqMGysjrho/TD1Xg0nkguxvKtaDw56kn2ofYAxqbMwBwOTsvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFF3JTZiECy6TjPNUpDuPTa8rZaMB8GA1UdIwQY
MBaAFLSiCFx947WYIWuJ+w8rHZMN5mwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAt
MzExNzk4OTYwMWFkLzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAtMzExNzk4OTYwMWFk
LzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwwes7yPm
MfevHvsFIAvQvkD3RN+oYd3wr8KKANGMIdOG2MuPOf9z76lqfuAZHlkRC4l/OPtY
OUcW2P6jMjS95bjP8Ox/BVd1R/qr/FQ8VCBDZdtm1rBwa1WAAyvrGzhGDzw869PJ
XqUp5lcvXjoHUjCErQNPguXjMG5BxbAyuzBy2DBadHkETJ+BKyy8X7vgNz9ROVgJ
GrXJnxj68/seugG/j5JvL8VdmmooM4Pln57l2AIkKxaXba9RDdTBy/qXdY4i2Yxq
T4y0jewqXtwk1GZpVpTRkOm9J9w74pzqgcEBwvlkFM6vPj97eia0p2ZZP6JYRTAv
+LqqX902u6G8RQ==
-----END CERTIFICATE-----
Generated at Sat May 10 13:55:00 2025 by rpki-client