Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier: fqXtxsew9hWSULmq20V53AikPRAifO9eM8W8ELDVQ5Q=
Subject key identifier: 20:8C:94:1F:3C:B8:AA:1E:33:02:08:A7:39:09:31:B0:F4:C2:BD:69
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 01965A275A8426AC7D4812C1C9D66FA8C0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number: 0EFC
Signing time: Mon 21 Apr 2025 21:00:50 +0000
Manifest this update: Mon 21 Apr 2025 21:00:50 +0000
Manifest next update: Tue 22 Apr 2025 21:00:50 +0000
Files and hashes: 1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: Xbf//xFDBLEWGNYJRJkY5DMCZARHyUuTLJ51ITfGmfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:5a:84:26:ac:7d:48:12:c1:c9:d6:6f:a8:c0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Apr 21 21:00:50 2025 GMT
Not After : Apr 22 21:00:50 2025 GMT
Subject: CN=208c941f3cb8aa1e330208a7390931b0f4c2bd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:ce:a6:f1:c7:52:d5:c2:7f:19:f6:45:cf:
93:2d:6c:93:d5:19:ab:ae:58:a1:13:a6:71:02:ff:
b7:ee:71:80:80:37:32:4e:57:f5:08:50:4c:f9:58:
7f:14:f0:39:82:d9:59:7b:fd:3d:5c:17:53:aa:9a:
d6:f1:d6:a9:52:23:dd:17:b6:ab:c8:39:f4:0e:97:
76:01:1b:7a:4c:fa:5a:45:29:55:84:28:91:8f:5a:
e9:37:c5:5e:6c:f6:a5:85:db:70:63:7a:72:22:28:
84:86:51:f3:77:ef:62:3f:5f:89:4b:71:3e:9a:bd:
58:bb:99:a6:81:f8:70:53:55:20:d0:d9:fb:a7:f0:
51:a2:b2:d5:f2:11:22:fc:4f:ef:88:7e:20:3a:bc:
1f:f6:27:24:23:95:38:91:1d:d2:02:11:cb:5e:75:
b9:e2:18:46:da:63:4a:10:25:5e:8a:67:a2:07:29:
51:65:9c:5d:30:4e:d7:8b:50:11:7f:5e:ed:b3:58:
5c:e1:80:c1:ab:78:fd:79:26:8a:b2:19:3a:82:74:
ed:17:e3:29:3a:29:8c:fb:7e:43:4c:b3:40:32:9e:
1a:02:22:35:d2:6f:b7:76:64:9f:6d:4c:81:ba:7a:
72:32:c3:2a:6b:6b:ae:fc:ca:1c:c4:05:aa:13:93:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:94:1F:3C:B8:AA:1E:33:02:08:A7:39:09:31:B0:F4:C2:BD:69
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:22:a4:32:1c:18:d7:51:47:ea:cc:de:49:e6:0c:bb:d9:
97:80:36:bf:e8:3b:46:fe:a8:84:45:bc:9b:98:7f:ca:74:e9:
4e:8b:16:9c:1a:91:c1:11:27:cb:a1:b4:11:20:7d:df:8f:b2:
c3:f0:44:0f:04:68:73:16:6b:4c:3a:14:d7:96:c3:03:1a:12:
d3:5a:4c:a8:d6:b0:d2:da:f5:3e:5b:2e:03:22:a4:45:63:f3:
a9:b2:ec:b1:9e:95:38:1f:0b:d9:6e:2d:1b:a4:f3:b9:87:27:
ba:6a:b5:e9:25:49:a0:09:6d:ea:b6:a1:d3:1a:43:30:f0:15:
9d:77:b9:9c:d4:3a:3a:3f:08:9b:97:a3:c2:0d:8d:14:64:39:
4a:a0:76:53:86:f4:f8:fa:06:06:e3:ee:4e:03:f7:8f:6e:67:
63:be:76:dd:59:fa:fb:19:21:f7:23:55:42:a0:e2:ae:a8:0a:
e9:96:b0:6f:0f:cc:b5:fd:06:0b:cf:a8:a4:f2:48:4e:22:80:
45:2a:e0:83:10:25:b6:f1:de:aa:e8:14:6c:ba:92:62:85:94:
6e:6f:be:c3:6c:66:9f:b3:86:67:fb:81:0e:1d:e3:29:e3:0b:
c3:9a:c3:26:ef:d1:4c:35:1c:98:e0:57:3d:45:c7:71:7e:7c:
99:17:b5:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaJ1qEJqx9SBLBydZvqMDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2IwYTQ1ZjA2MGUxMGVjY2YxMjZiNmY2Njc1ODliODAz
MjhjOTUwHhcNMjUwNDIxMjEwMDUwWhcNMjUwNDIyMjEwMDUwWjAzMTEwLwYDVQQD
EygyMDhjOTQxZjNjYjhhYTFlMzMwMjA4YTczOTA5MzFiMGY0YzJiZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbTOpvHHUtXCfxn2Rc+TLWyT1Rmr
rlihE6ZxAv+37nGAgDcyTlf1CFBM+Vh/FPA5gtlZe/09XBdTqprW8dapUiPdF7ar
yDn0Dpd2ARt6TPpaRSlVhCiRj1rpN8VebPalhdtwY3pyIiiEhlHzd+9iP1+JS3E+
mr1Yu5mmgfhwU1Ug0Nn7p/BRorLV8hEi/E/viH4gOrwf9ickI5U4kR3SAhHLXnW5
4hhG2mNKECVeimeiBylRZZxdME7Xi1ARf17ts1hc4YDBq3j9eSaKshk6gnTtF+Mp
OimM+35DTLNAMp4aAiI10m+3dmSfbUyBunpyMsMqa2uu/MocxAWqE5OhxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCMlB88uKoeMwIIpzkJMbD0wr1pMB8GA1UdIwQY
MBaAFLU7CkXwYOEOzPEmtvZnWJuAMoyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEt
ODE4Mzc1MTgxM2Q5LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEtODE4Mzc1MTgxM2Q5
LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfMipDIc
GNdRR+rM3knmDLvZl4A2v+g7Rv6ohEW8m5h/ynTpTosWnBqRwREny6G0ESB934+y
w/BEDwRocxZrTDoU15bDAxoS01pMqNaw0tr1PlsuAyKkRWPzqbLssZ6VOB8L2W4t
G6TzuYcnumq16SVJoAlt6rah0xpDMPAVnXe5nNQ6Oj8Im5ejwg2NFGQ5SqB2U4b0
+PoGBuPuTgP3j25nY7523Vn6+xkh9yNVQqDirqgK6Zawbw/Mtf0GC8+opPJITiKA
RSrggxAltvHequgUbLqSYoWUbm++w2xmn7OGZ/uBDh3jKeMLw5rDJu/RTDUcmOBX
PUXHcX58mRe1KQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:44 2025 by rpki-client