Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
File: t4FQ8EwyNNv58R4RB5kygC0mj7E.mft (raw, json)
Hash identifier: tKHjVrc/4iAJOmR6CzcRQ9xMoffbhXsAZN5bpBvI52c=
Subject key identifier: A3:72:7F:7F:64:56:BE:68:EB:D0:94:7C:EA:7A:36:6B:D5:31:76:10
Authority key identifier: B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
Certificate issuer: /CN=b78150f04c3234dbf9f11e11079932802d268fb1
Certificate serial: 01965A94D968AE958AC7D766CB76443A1547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
Manifest number: 0664
Signing time: Mon 21 Apr 2025 23:00:26 +0000
Manifest this update: Mon 21 Apr 2025 23:00:26 +0000
Manifest next update: Tue 22 Apr 2025 23:00:26 +0000
Files and hashes: 1: MDCWnt2rzIXWYWaxPmc0KCazQYc.roa (hash: 9x3sa/eMNtozgLkEhCL0NnGHAKtQHds50tsgQhEMBDs=)
2: t4FQ8EwyNNv58R4RB5kygC0mj7E.crl (hash: iNb6gDHzPxjdV8pRZ5Y7HUpks8vF/xu8XhH49uaLtMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:d9:68:ae:95:8a:c7:d7:66:cb:76:44:3a:15:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78150f04c3234dbf9f11e11079932802d268fb1
Validity
Not Before: Apr 21 23:00:26 2025 GMT
Not After : Apr 22 23:00:26 2025 GMT
Subject: CN=a3727f7f6456be68ebd0947cea7a366bd5317610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:2b:90:a0:26:a0:69:98:b7:02:75:e6:bf:
e2:a3:86:b7:6d:8a:dd:e2:6c:78:f5:29:fc:f6:51:
cf:aa:7a:71:55:7b:d2:66:8b:5d:2a:71:37:62:f7:
de:40:85:ec:b7:07:18:12:06:e6:00:6e:8e:05:0c:
12:af:cb:01:b2:04:83:30:97:cf:2a:c0:5a:82:9a:
99:9e:5e:9c:e5:11:f6:b2:e5:d6:2e:b7:b1:3b:f3:
f8:59:98:8c:b5:c1:e2:c9:e9:83:e6:9a:76:20:4d:
48:7d:b4:d5:f5:33:8b:12:38:92:df:3f:db:31:bf:
7d:2a:12:fe:bb:14:d7:30:c7:7e:68:f5:8b:20:15:
29:45:18:1e:71:52:ca:8a:ad:ce:d9:d0:75:40:2b:
b0:c8:33:c5:a8:56:c7:18:83:73:53:d1:d1:8f:ed:
df:34:32:71:40:5f:de:30:42:3a:27:f3:c3:12:e6:
e1:b7:0c:2b:ac:1c:48:75:0e:88:25:82:9a:9e:52:
ca:32:b4:28:ae:d5:61:4f:00:4c:08:f5:a3:32:4f:
6c:82:1f:45:b3:f7:6d:1f:25:3f:c4:05:d0:41:42:
04:8d:05:36:f2:2a:6e:66:82:f2:b8:16:06:2f:77:
cb:6a:b6:41:18:63:19:ea:f3:da:c5:e4:df:92:c8:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:72:7F:7F:64:56:BE:68:EB:D0:94:7C:EA:7A:36:6B:D5:31:76:10
X509v3 Authority Key Identifier:
keyid:B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:be:6a:64:20:ff:d2:4b:06:ad:95:09:3f:0f:1b:55:49:29:
78:0f:f6:34:e0:07:71:07:f1:32:b6:a4:4c:de:f7:cc:ba:63:
1a:c0:78:c5:8c:11:1a:b2:68:35:f0:43:18:df:78:e1:b7:0a:
b0:49:0f:45:c0:bf:3f:9a:9e:5f:02:ca:5a:ca:5e:99:9a:0c:
2b:17:d5:82:a6:a3:bc:b3:1f:b8:0a:82:bc:16:77:de:41:0e:
88:ed:94:69:7e:a8:41:9e:0a:f2:62:55:a6:70:b8:41:e1:0e:
0a:39:c9:af:8e:22:52:62:48:37:ec:0e:df:21:41:df:37:46:
13:c1:4e:29:5e:b6:00:34:50:d7:80:cd:68:e8:3b:bc:80:46:
a3:60:d1:8a:d4:a7:da:17:c0:cc:ef:9c:4c:c6:c0:49:52:18:
01:a1:94:93:c7:df:ca:b4:ec:9d:7e:80:33:42:8b:d9:d9:be:
83:1d:5e:aa:81:a6:d5:0a:7e:d7:39:c6:db:47:68:34:cf:5f:
cd:b1:a5:d9:ca:85:f9:0c:df:e2:9e:69:9b:75:c5:d3:30:29:
31:1e:0d:07:20:0d:dc:48:6c:a0:ed:a4:5c:bc:d3:f9:53:e7:
0d:8b:49:9e:63:ed:d7:f3:71:17:d2:1a:fe:56:d4:f1:99:de:
12:e3:a6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalNlorpWKx9dmy3ZEOhVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODE1MGYwNGMzMjM0ZGJmOWYxMWUxMTA3OTkzMjgwMmQy
NjhmYjEwHhcNMjUwNDIxMjMwMDI2WhcNMjUwNDIyMjMwMDI2WjAzMTEwLwYDVQQD
EyhhMzcyN2Y3ZjY0NTZiZTY4ZWJkMDk0N2NlYTdhMzY2YmQ1MzE3NjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQrkKAmoGmYtwJ15r/io4a3bYrd
4mx49Sn89lHPqnpxVXvSZotdKnE3YvfeQIXstwcYEgbmAG6OBQwSr8sBsgSDMJfP
KsBagpqZnl6c5RH2suXWLrexO/P4WZiMtcHiyemD5pp2IE1IfbTV9TOLEjiS3z/b
Mb99KhL+uxTXMMd+aPWLIBUpRRgecVLKiq3O2dB1QCuwyDPFqFbHGINzU9HRj+3f
NDJxQF/eMEI6J/PDEubhtwwrrBxIdQ6IJYKanlLKMrQortVhTwBMCPWjMk9sgh9F
s/dtHyU/xAXQQUIEjQU28ipuZoLyuBYGL3fLarZBGGMZ6vPaxeTfkshQWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNyf39kVr5o69CUfOp6NmvVMXYQMB8GA1UdIwQY
MBaAFLeBUPBMMjTb+fEeEQeZMoAtJo+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iNTlhOGItODc1My00MDk0LWJiYTct
ZWNjYzJjMWIxYzIzLzEvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iNTlhOGItODc1My00MDk0LWJiYTctZWNjYzJjMWIxYzIz
LzEvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN75qZCD/
0ksGrZUJPw8bVUkpeA/2NOAHcQfxMrakTN73zLpjGsB4xYwRGrJoNfBDGN944bcK
sEkPRcC/P5qeXwLKWspemZoMKxfVgqajvLMfuAqCvBZ33kEOiO2UaX6oQZ4K8mJV
pnC4QeEOCjnJr44iUmJIN+wO3yFB3zdGE8FOKV62ADRQ14DNaOg7vIBGo2DRitSn
2hfAzO+cTMbASVIYAaGUk8ffyrTsnX6AM0KL2dm+gx1eqoGm1Qp+1znG20doNM9f
zbGl2cqF+Qzf4p5pm3XF0zApMR4NByAN3EhsoO2kXLzT+VPnDYtJnmPt1/NxF9Ia
/lbU8ZneEuOmAQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:58 2025 by rpki-client