Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: IrCJiyQubU7zWz3u9gsQDufNgUn0D6cqT3EEcYb+Pmc=
Subject key identifier: 43:31:77:00:DE:C5:34:AC:CB:C7:31:48:7D:9F:13:D4:0A:2D:C2:EF
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 0196C2394328F3767876CE03D3CCDA03FCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 1544
Signing time: Mon 12 May 2025 02:00:54 +0000
Manifest this update: Mon 12 May 2025 02:00:54 +0000
Manifest next update: Tue 13 May 2025 02:00:54 +0000
Files and hashes: 1: P-haGLcvZvQGvLFpnob9lOaXmTs.roa (hash: 4zCg+GccZn/4aPxyfbii7VCbnRc/Ws0LuYTysih4ku8=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: 7XQAP6egKWFWqZhTlBKJeO4izgU2P5PZ1Ex4NKxjFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:43:28:f3:76:78:76:ce:03:d3:cc:da:03:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: May 12 02:00:54 2025 GMT
Not After : May 13 02:00:54 2025 GMT
Subject: CN=43317700dec534accbc731487d9f13d40a2dc2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:92:06:f8:30:b3:7c:5d:6a:2a:d3:c6:15:
6e:f5:59:4e:cd:7e:d4:d6:74:80:9f:b2:89:cf:a5:
c4:d8:45:9c:18:aa:fe:3e:86:b4:aa:50:5a:00:be:
f2:2b:ff:77:8f:4e:ae:37:48:45:28:44:ed:5b:d2:
a6:04:c5:5d:46:6e:df:48:20:01:48:4a:7b:71:1f:
c4:84:5c:c8:af:14:6a:90:fa:4f:29:e5:1a:12:9e:
40:0e:6b:77:ba:63:97:7a:76:a8:d7:b9:d4:14:5e:
76:0e:be:33:80:63:e6:1f:c0:69:22:29:8c:fe:dc:
49:20:42:de:aa:e8:fb:c7:33:82:5e:c5:d0:68:7e:
13:8a:63:d0:98:20:9c:e6:6b:cf:41:7a:2d:13:a1:
ab:e1:03:bd:1a:38:4d:60:d2:96:6d:c2:75:a1:6e:
13:5c:12:11:5e:6d:da:e4:89:b1:eb:66:ce:0d:3f:
4d:9d:33:37:ab:8c:48:97:fd:14:7b:cb:4f:87:12:
08:77:87:1c:0c:11:d1:85:d2:10:a3:1e:76:58:c6:
45:47:14:0b:33:19:c8:33:fb:92:5a:08:7f:1f:a1:
bd:8a:64:61:59:ae:30:49:49:3d:2c:a7:34:da:98:
21:af:81:15:bf:3c:6d:26:41:c8:79:ec:83:1a:27:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:77:00:DE:C5:34:AC:CB:C7:31:48:7D:9F:13:D4:0A:2D:C2:EF
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:17:c6:0f:e5:38:f6:42:bc:72:bb:26:62:88:df:75:37:a2:
62:11:1b:01:ad:1e:16:30:00:bc:1c:a7:c3:7e:c1:90:86:09:
b1:3c:ec:f6:7f:a1:8b:e8:d9:b7:b2:4e:cc:06:32:0a:9a:69:
8c:ea:c7:cf:be:70:92:fe:40:44:93:70:a0:66:08:4f:85:88:
a6:12:d6:6f:f3:88:5c:4c:16:0f:ff:39:e7:a2:dc:45:ca:6c:
17:d8:6a:d3:ae:84:45:57:ee:31:9d:0d:92:ba:b0:86:5b:53:
29:14:10:06:5f:fc:7b:45:f2:bb:1b:bc:8e:4f:dd:52:59:aa:
10:5a:fe:a1:14:2c:28:92:41:a5:29:99:05:95:7b:b9:c3:d1:
9c:d1:e7:68:47:f2:b8:57:6d:ab:58:61:fc:08:77:8b:90:a7:
cf:ed:3f:e1:54:56:63:c0:e0:80:b7:9a:97:8b:4a:98:c6:57:
6e:d9:5e:0b:53:ee:1a:e6:40:98:e4:03:c7:f1:91:8c:e6:5a:
f3:17:d4:e7:5a:7f:9e:f7:56:ff:06:36:52:5b:38:e5:f7:6e:
6b:1b:c7:c5:65:1a:8a:b9:ea:95:1e:dd:6a:c9:b7:58:38:fc:
8e:e3:7d:6f:ae:87:9e:d8:4b:21:c7:be:cb:dd:be:3a:ad:e1:
8a:7e:e0:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOUMo83Z4ds4D08zaA/zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5
MDgyOTkwHhcNMjUwNTEyMDIwMDU0WhcNMjUwNTEzMDIwMDU0WjAzMTEwLwYDVQQD
Eyg0MzMxNzcwMGRlYzUzNGFjY2JjNzMxNDg3ZDlmMTNkNDBhMmRjMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi+SBvgws3xdairTxhVu9VlOzX7U
1nSAn7KJz6XE2EWcGKr+Poa0qlBaAL7yK/93j06uN0hFKETtW9KmBMVdRm7fSCAB
SEp7cR/EhFzIrxRqkPpPKeUaEp5ADmt3umOXenao17nUFF52Dr4zgGPmH8BpIimM
/txJIELequj7xzOCXsXQaH4TimPQmCCc5mvPQXotE6Gr4QO9GjhNYNKWbcJ1oW4T
XBIRXm3a5Imx62bODT9NnTM3q4xIl/0Ue8tPhxIId4ccDBHRhdIQox52WMZFRxQL
MxnIM/uSWgh/H6G9imRhWa4wSUk9LKc02pghr4EVvzxtJkHIeeyDGifbHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMxdwDexTSsy8cxSH2fE9QKLcLvMB8GA1UdIwQY
MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt
Njk5ODM1YzkyYmZlLzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl
LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxfGD+U4
9kK8crsmYojfdTeiYhEbAa0eFjAAvBynw37BkIYJsTzs9n+hi+jZt7JOzAYyCppp
jOrHz75wkv5ARJNwoGYIT4WIphLWb/OIXEwWD/8556LcRcpsF9hq066ERVfuMZ0N
krqwhltTKRQQBl/8e0Xyuxu8jk/dUlmqEFr+oRQsKJJBpSmZBZV7ucPRnNHnaEfy
uFdtq1hh/Ah3i5Cnz+0/4VRWY8DggLeal4tKmMZXbtleC1PuGuZAmOQDx/GRjOZa
8xfU51p/nvdW/wY2Uls45fduaxvHxWUairnqlR7dasm3WDj8juN9b66HnthLIce+
y92+Oq3hin7gZg==
-----END CERTIFICATE-----
Generated at Mon May 12 10:37:32 2025 by rpki-client