Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: Y/fXdKt5zg6pNiwdIXuWBJpNarz8HUnt/58eIGuj2Yk=
Subject key identifier: CF:D6:D0:11:3F:5A:4F:71:1E:2E:66:5D:5D:73:01:D6:C6:40:F0:92
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 0196575CA994E9B3EF4B4E9C5B6AC6D9AEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0F
Signing time: Mon 21 Apr 2025 08:00:12 +0000
Manifest this update: Mon 21 Apr 2025 08:00:12 +0000
Manifest next update: Tue 22 Apr 2025 08:00:12 +0000
Files and hashes: 1: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: QNME0wFDm7gg4p9PcRygoiBqAd3haBxgI02v34sTlto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:a9:94:e9:b3:ef:4b:4e:9c:5b:6a:c6:d9:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Apr 21 08:00:12 2025 GMT
Not After : Apr 22 08:00:12 2025 GMT
Subject: CN=cfd6d0113f5a4f711e2e665d5d7301d6c640f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:89:0c:41:62:29:97:c2:b8:e5:2e:c5:db:
18:95:36:0b:e4:c7:d3:f8:3e:5d:ec:b5:9f:c5:a5:
30:c2:4b:bd:fa:76:6b:85:7a:38:9f:d4:e5:5a:c8:
a2:9f:37:d4:98:00:28:5f:e8:e7:f5:44:ea:82:20:
6b:43:65:9e:4f:07:f8:6d:49:e2:26:4d:5c:89:82:
df:43:6a:04:1f:d8:a8:a4:6f:1b:cb:fe:72:70:58:
6b:87:6a:18:3d:59:87:b2:c2:4b:d6:fc:33:09:f6:
1c:8e:8a:5c:e5:a9:59:b9:78:55:13:4a:b4:58:bc:
40:63:18:d6:38:b9:eb:d5:3c:07:d3:27:a1:9b:93:
71:0b:0c:be:02:99:c1:b0:62:86:1f:b6:dc:00:4f:
63:7a:35:e3:96:f1:7d:b9:cb:23:7b:39:7c:e1:97:
c1:e6:b2:c1:1d:6d:6e:30:ce:ab:13:e2:03:bf:db:
bf:09:2a:48:4a:34:68:64:83:51:23:5b:4c:00:e3:
fd:61:a9:4d:1f:7b:7f:86:bf:9b:2b:f5:1b:b4:91:
7d:a0:3a:2c:c7:ed:c7:9f:fb:08:0e:1f:44:67:d3:
90:98:7e:45:a8:31:8d:b5:15:44:cb:65:f4:b7:18:
36:71:35:2e:46:5a:8e:07:36:ab:02:42:af:25:45:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:D0:11:3F:5A:4F:71:1E:2E:66:5D:5D:73:01:D6:C6:40:F0:92
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2e:12:83:c6:a8:24:71:fc:eb:af:13:7b:64:62:fd:34:f3:
09:a7:25:38:bb:86:3a:56:6f:5b:ea:57:79:2d:98:b7:0b:d5:
51:9e:bb:3c:c0:c3:d1:bb:6c:08:9e:48:d3:d7:fe:63:a1:2a:
0d:ac:ac:73:cd:c9:45:ff:69:fc:50:3a:87:fb:90:92:59:e2:
f9:71:b3:bd:90:fc:98:6d:7e:74:7d:fe:72:c0:35:b0:45:05:
49:e6:e5:9e:86:65:36:e2:68:e1:ac:ce:d0:cb:a5:40:71:ee:
6d:9b:e5:23:70:16:93:5a:68:e5:21:ad:61:e3:a6:be:41:17:
e2:c1:92:cc:f2:5f:1a:e6:d5:78:f0:78:12:1a:1c:a6:3a:8e:
b9:bb:7f:8a:b7:3a:d3:49:5d:d1:a9:16:67:ac:e8:f1:bf:80:
fe:e8:c8:6a:a4:d9:e7:94:32:13:5d:5d:ff:3f:ca:1e:bb:a0:
24:43:87:48:57:87:ab:e9:00:7d:2f:7e:d6:df:4d:0b:62:25:
a8:a2:5a:c7:f0:55:87:e4:05:66:dc:63:ca:f3:cb:2a:cb:c4:
7a:42:42:dc:27:86:ef:f2:01:23:45:e6:ae:8a:4c:28:2e:30:
1e:0c:26:ab:e8:99:d0:90:d2:d8:07:f1:83:e4:2f:65:3a:01:
2b:54:e2:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXKmU6bPvS06cW2rG2a6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTRiMjJjNTU0MDUwOGQ5NjI5YTMxMWVmMWU4MzU0MzY1
N2M0ZWUwHhcNMjUwNDIxMDgwMDEyWhcNMjUwNDIyMDgwMDEyWjAzMTEwLwYDVQQD
EyhjZmQ2ZDAxMTNmNWE0ZjcxMWUyZTY2NWQ1ZDczMDFkNmM2NDBmMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJCJDEFiKZfCuOUuxdsYlTYL5MfT
+D5d7LWfxaUwwku9+nZrhXo4n9TlWsiinzfUmAAoX+jn9UTqgiBrQ2WeTwf4bUni
Jk1ciYLfQ2oEH9iopG8by/5ycFhrh2oYPVmHssJL1vwzCfYcjopc5alZuXhVE0q0
WLxAYxjWOLnr1TwH0yehm5NxCwy+ApnBsGKGH7bcAE9jejXjlvF9ucsjezl84ZfB
5rLBHW1uMM6rE+IDv9u/CSpISjRoZINRI1tMAOP9YalNH3t/hr+bK/UbtJF9oDos
x+3Hn/sIDh9EZ9OQmH5FqDGNtRVEy2X0txg2cTUuRlqOBzarAkKvJUWghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/W0BE/Wk9xHi5mXV1zAdbGQPCSMB8GA1UdIwQY
MBaAFLdUsixVQFCNlimjEe8eg1Q2V8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUt
NTZlYzEzMjY5YTFjLzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUtNTZlYzEzMjY5YTFj
LzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai4Sg8ao
JHH8668Te2Ri/TTzCaclOLuGOlZvW+pXeS2YtwvVUZ67PMDD0btsCJ5I09f+Y6Eq
Daysc83JRf9p/FA6h/uQklni+XGzvZD8mG1+dH3+csA1sEUFSeblnoZlNuJo4azO
0MulQHHubZvlI3AWk1po5SGtYeOmvkEX4sGSzPJfGubVePB4EhocpjqOubt/irc6
00ld0akWZ6zo8b+A/ujIaqTZ55QyE11d/z/KHrugJEOHSFeHq+kAfS9+1t9NC2Il
qKJax/BVh+QFZtxjyvPLKsvEekJC3CeG7/IBI0XmropMKC4wHgwmq+iZ0JDS2Afx
g+QvZToBK1TiJA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:40 2025 by rpki-client