Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: LBIdZqtuHP6wN7j9d0WbYwP7L8rp2wyu38o7/u6Y9Tw=
Subject key identifier: 06:D4:5F:09:78:7B:E9:1C:00:DA:6E:D9:C8:EB:D7:86:75:DE:51:F4
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 019656EEF8E8B4B28CECAD94A2CEEEDC5DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 02C0
Signing time: Mon 21 Apr 2025 06:00:23 +0000
Manifest this update: Mon 21 Apr 2025 06:00:23 +0000
Manifest next update: Tue 22 Apr 2025 06:00:23 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: iOWifMIMPJJAcYb7qnBhxmA39EjKrK2kbyvZ96KhMn0=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:f8:e8:b4:b2:8c:ec:ad:94:a2:ce:ee:dc:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Apr 21 06:00:23 2025 GMT
Not After : Apr 22 06:00:23 2025 GMT
Subject: CN=06d45f09787be91c00da6ed9c8ebd78675de51f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:a9:03:ec:8d:36:5e:cc:c0:18:f4:a2:fd:
97:25:f1:34:c3:ff:cb:58:16:ea:91:b4:bc:8d:29:
0b:d6:3e:fe:b4:8d:33:e6:20:76:07:3f:f8:48:b7:
b5:2e:5c:ff:d8:4e:8b:32:fd:26:d5:58:f6:77:49:
be:7a:b2:df:64:90:21:1c:65:15:bc:29:17:a0:ad:
d2:e0:a7:28:76:5d:87:9a:1b:d9:db:73:1b:02:76:
0f:3a:80:3d:4a:24:58:79:66:ad:a6:3a:7d:75:13:
41:17:64:5e:1b:9a:25:a9:1c:01:cf:58:28:b1:63:
f6:d3:58:6a:d0:eb:1a:56:a5:54:e8:4b:cf:94:b8:
82:1f:48:b9:f1:1f:f7:4f:ed:dc:3a:9b:c4:a7:45:
48:aa:fc:b9:9a:86:e0:52:5f:f8:0f:9b:37:cf:69:
9c:1f:ef:bf:a3:f1:3d:0d:7b:ca:2b:a5:67:7f:e3:
36:2a:c5:df:60:65:7c:f7:cd:95:9c:d5:cc:ef:4e:
bd:3b:49:7b:3d:24:5f:33:56:03:bb:67:e3:17:9c:
18:54:68:32:51:58:ca:b1:5a:73:76:99:65:1e:f9:
f3:40:d0:75:2f:bf:60:f8:97:32:a7:8a:af:7c:02:
22:f5:29:99:8d:9c:54:3e:03:5a:bb:ef:d4:d3:36:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:5F:09:78:7B:E9:1C:00:DA:6E:D9:C8:EB:D7:86:75:DE:51:F4
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fe:d4:be:32:5a:83:8c:48:9e:98:e0:80:1a:0e:c5:d4:2a:
19:18:bd:40:1b:cd:15:6b:4c:8e:af:c9:e5:06:5f:28:a0:51:
24:7a:3f:8a:1b:c1:11:69:d3:e7:59:c9:12:6a:8d:f1:95:35:
3d:03:57:aa:39:41:6c:31:19:d6:c0:2a:a9:f9:c2:a7:8f:05:
da:60:0a:ea:ef:11:bf:d5:09:7e:18:cc:85:6c:c9:e0:a9:09:
4d:5a:c6:9f:ec:15:95:68:f1:88:c9:1f:bb:ed:25:56:9a:7d:
2c:1b:7f:4c:c7:1f:71:a0:6d:d6:98:e0:2f:1c:e6:e6:cd:74:
f1:33:0a:6f:79:f0:69:c8:98:d4:45:03:7d:ce:51:27:44:0b:
cc:6c:7c:2d:bb:e0:90:03:a4:80:fe:6f:49:15:e1:cf:ec:79:
70:c2:ee:f1:a1:09:3c:13:85:8c:fc:ec:19:90:2e:cc:65:6d:
99:07:c5:0e:1c:6f:06:96:4d:8c:4d:de:e6:c4:a3:29:c5:63:
32:48:c9:85:18:9e:1d:5e:ff:2f:3d:21:59:17:0f:9d:53:80:
d8:20:b1:c8:ce:24:3b:68:d1:95:df:f0:f7:80:fd:88:99:9b:
cb:8e:77:65:fc:87:b0:62:13:c1:a3:b1:87:6b:58:d4:8c:c4:
b8:ae:30:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZW7vjotLKM7K2Uos7u3F3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGRlNzJlNTAwNmFmNmRiNTUxMTVlMWI3MDkzMjAyM2Nl
ZWNiYTQwHhcNMjUwNDIxMDYwMDIzWhcNMjUwNDIyMDYwMDIzWjAzMTEwLwYDVQQD
EygwNmQ0NWYwOTc4N2JlOTFjMDBkYTZlZDljOGViZDc4Njc1ZGU1MWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5GpA+yNNl7MwBj0ov2XJfE0w//L
WBbqkbS8jSkL1j7+tI0z5iB2Bz/4SLe1Llz/2E6LMv0m1Vj2d0m+erLfZJAhHGUV
vCkXoK3S4Kcodl2HmhvZ23MbAnYPOoA9SiRYeWatpjp9dRNBF2ReG5olqRwBz1go
sWP201hq0OsaVqVU6EvPlLiCH0i58R/3T+3cOpvEp0VIqvy5mobgUl/4D5s3z2mc
H++/o/E9DXvKK6Vnf+M2KsXfYGV8982VnNXM7069O0l7PSRfM1YDu2fjF5wYVGgy
UVjKsVpzdpllHvnzQNB1L79g+Jcyp4qvfAIi9SmZjZxUPgNau+/U0zb54wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbUXwl4e+kcANpu2cjr14Z13lH0MB8GA1UdIwQY
MBaAFE+N5y5QBq9ttVEV4bcJMgI87sukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQt
NWI1MDc4NjI1ZGVhLzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQtNWI1MDc4NjI1ZGVh
LzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv7UvjJa
g4xInpjggBoOxdQqGRi9QBvNFWtMjq/J5QZfKKBRJHo/ihvBEWnT51nJEmqN8ZU1
PQNXqjlBbDEZ1sAqqfnCp48F2mAK6u8Rv9UJfhjMhWzJ4KkJTVrGn+wVlWjxiMkf
u+0lVpp9LBt/TMcfcaBt1pjgLxzm5s108TMKb3nwaciY1EUDfc5RJ0QLzGx8Lbvg
kAOkgP5vSRXhz+x5cMLu8aEJPBOFjPzsGZAuzGVtmQfFDhxvBpZNjE3e5sSjKcVj
MkjJhRieHV7/Lz0hWRcPnVOA2CCxyM4kO2jRld/w94D9iJmby453ZfyHsGITwaOx
h2tY1IzEuK4wdw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:02 2025 by rpki-client