Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File: t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier: 7tcErTJlx66wSv40pZym/zAiRkOTtB1dS4ompDlvfCE=
Subject key identifier: 52:15:3C:B1:98:BF:7A:6C:14:70:F7:14:05:8A:C0:FB:5A:98:B5:33
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer: /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial: 019648C5568BC50455999F75A728CDFAE5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number: 14C5
Signing time: Fri 18 Apr 2025 12:00:14 +0000
Manifest this update: Fri 18 Apr 2025 12:00:14 +0000
Manifest next update: Sat 19 Apr 2025 12:00:14 +0000
Files and hashes: 1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=)
2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: 8NQuVSv0oPfeglwK8SPRx4FLH9f7gNg8RSS6/jDs2p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:56:8b:c5:04:55:99:9f:75:a7:28:cd:fa:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Validity
Not Before: Apr 18 12:00:14 2025 GMT
Not After : Apr 19 12:00:14 2025 GMT
Subject: CN=52153cb198bf7a6c1470f714058ac0fb5a98b533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:4c:4e:24:55:31:d4:cc:bf:a7:07:e9:cf:
8b:ba:0b:51:91:4a:3c:9a:66:10:15:f1:e3:df:e4:
33:28:eb:f0:ba:2f:33:b0:bf:46:38:11:50:24:0f:
87:c8:17:86:69:89:81:dd:01:cf:5f:1b:52:65:74:
0e:15:0d:bd:25:d0:77:79:c9:28:50:79:2c:f0:32:
7f:24:78:8b:c3:bb:d6:b8:76:73:56:90:bb:77:d9:
57:4a:35:e8:67:17:1b:de:a4:c1:b5:97:b1:a1:b9:
5b:04:04:90:cc:c0:ee:b6:e8:2c:47:c4:f0:58:8d:
98:3b:ea:df:0c:ee:39:52:b0:ed:a1:08:09:92:bb:
e4:b7:02:5d:34:c9:3a:2a:ae:76:75:ca:6f:69:53:
31:e9:91:2a:50:98:93:6c:ee:6b:ed:fb:1d:af:44:
a4:42:cc:a1:86:45:47:29:22:ea:7c:73:96:55:78:
8b:d7:5b:47:fd:94:db:4b:38:a9:0a:c7:f9:e3:5a:
80:cd:9c:32:49:77:2e:4d:70:ec:08:4f:48:0d:cf:
ab:55:56:05:65:c0:fb:e3:9c:b5:80:98:ce:ca:89:
46:3c:f9:6b:3f:30:72:bd:a0:bd:d0:0d:99:89:9d:
a5:e3:f9:7f:97:1e:8f:4e:5f:b8:d2:05:fe:00:b1:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:3C:B1:98:BF:7A:6C:14:70:F7:14:05:8A:C0:FB:5A:98:B5:33
X509v3 Authority Key Identifier:
keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2d:0c:f5:52:8a:49:7e:c8:ee:5d:b4:28:43:8b:2b:5a:da:
6f:fb:55:fe:a2:05:b9:37:f8:71:46:78:1d:c0:48:00:da:c5:
db:6c:84:98:76:8b:b1:0b:e9:bf:24:ec:46:47:ca:32:27:3f:
ef:89:00:55:f9:4a:71:7d:b5:9e:26:60:0c:84:c6:e8:92:c3:
66:34:1d:1d:03:0c:af:71:55:34:96:4d:4e:46:76:d9:fc:a1:
bb:66:01:66:f8:26:8b:10:a6:8f:91:16:f1:e5:01:73:02:44:
7f:57:03:e1:d7:fd:16:03:00:49:df:fc:7d:63:f2:83:3d:8e:
28:c1:9c:8d:4e:a5:8a:f7:e8:c3:9e:2d:2b:35:97:38:3c:71:
24:ae:07:e0:9f:5c:ae:6a:69:58:db:25:a8:eb:dd:9d:c1:14:
99:37:56:0f:7c:e3:97:ea:67:cb:07:25:70:1c:99:02:6d:ca:
9f:97:b9:a7:0d:a9:6d:35:ff:93:7c:17:1b:7c:7c:d9:fe:85:
87:c4:87:a6:8b:a2:2b:ec:3b:79:b3:43:87:24:bb:4b:f7:df:
4a:ba:c2:28:49:11:09:99:5e:f0:86:60:46:2b:39:b8:56:07:
10:d1:f1:df:e2:4b:ef:75:15:f5:2d:4a:d6:c4:dc:6e:c7:04:
e3:9b:9c:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIxVaLxQRVmZ91pyjN+uXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1
MmIwZWQwHhcNMjUwNDE4MTIwMDE0WhcNMjUwNDE5MTIwMDE0WjAzMTEwLwYDVQQD
Eyg1MjE1M2NiMTk4YmY3YTZjMTQ3MGY3MTQwNThhYzBmYjVhOThiNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4xMTiRVMdTMv6cH6c+LugtRkUo8
mmYQFfHj3+QzKOvwui8zsL9GOBFQJA+HyBeGaYmB3QHPXxtSZXQOFQ29JdB3ecko
UHks8DJ/JHiLw7vWuHZzVpC7d9lXSjXoZxcb3qTBtZexoblbBASQzMDutugsR8Tw
WI2YO+rfDO45UrDtoQgJkrvktwJdNMk6Kq52dcpvaVMx6ZEqUJiTbO5r7fsdr0Sk
QsyhhkVHKSLqfHOWVXiL11tH/ZTbSzipCsf541qAzZwySXcuTXDsCE9IDc+rVVYF
ZcD745y1gJjOyolGPPlrPzByvaC90A2ZiZ2l4/l/lx6PTl+40gX+ALEAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIVPLGYv3psFHD3FAWKwPtamLUzMB8GA1UdIwQY
MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt
YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5
LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci0M9VKK
SX7I7l20KEOLK1rab/tV/qIFuTf4cUZ4HcBIANrF22yEmHaLsQvpvyTsRkfKMic/
74kAVflKcX21niZgDITG6JLDZjQdHQMMr3FVNJZNTkZ22fyhu2YBZvgmixCmj5EW
8eUBcwJEf1cD4df9FgMASd/8fWPygz2OKMGcjU6livfow54tKzWXODxxJK4H4J9c
rmppWNslqOvdncEUmTdWD3zjl+pnywclcByZAm3Kn5e5pw2pbTX/k3wXG3x82f6F
h8SHpouiK+w7ebNDhyS7S/ffSrrCKEkRCZle8IZgRis5uFYHENHx3+JL73UV9S1K
1sTcbscE45uckw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:51:52 2025 by rpki-client