Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: 9MQFZCNGdVZayBceF3X8DjCxzn8fIzF0LYoHXBmAyUU=
Subject key identifier: 3B:A8:8A:17:72:0F:A3:42:BA:05:1A:F1:46:3D:FE:21:30:59:A5:B8
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01964443E1375F36FB70084B6013FA31FA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 15:00:21 +0000
Manifest this update: Thu 17 Apr 2025 15:00:21 +0000
Manifest next update: Fri 18 Apr 2025 15:00:21 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: aT43G3l/CFKPD+3b+ZY9s38lgLYsWtHPd9op8/v6XPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:e1:37:5f:36:fb:70:08:4b:60:13:fa:31:fa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Apr 17 15:00:21 2025 GMT
Not After : Apr 18 15:00:21 2025 GMT
Subject: CN=3ba88a17720fa342ba051af1463dfe213059a5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:d0:cf:25:2a:d9:75:2c:4f:8c:9a:09:94:
be:0c:4a:d1:e7:f0:f0:5d:3c:86:62:04:e7:29:23:
53:fc:9d:0a:88:33:34:3d:57:cf:6a:a9:29:6d:67:
90:c9:1a:b1:25:2e:17:47:6c:bb:bc:2a:59:78:19:
e6:20:50:a8:4d:c3:ba:25:dd:98:b7:4e:b1:fd:63:
f2:f7:23:9a:64:84:4b:85:e4:c2:65:a8:65:ec:fa:
1a:59:46:05:6e:4f:54:03:e7:24:47:5b:6a:03:77:
ba:60:26:da:20:b1:12:7a:45:72:15:82:3b:7f:55:
49:63:95:66:f8:46:3b:46:91:85:ea:ef:88:10:75:
df:20:a2:46:d0:b3:35:b0:cd:e4:3e:1d:39:3f:fc:
80:aa:e9:36:cc:f3:82:a0:46:bf:a9:8c:d7:87:1d:
56:65:44:5a:68:57:5a:d3:75:0a:c3:aa:b2:5b:bb:
d6:9d:1b:54:07:14:89:bb:16:3f:e1:b7:17:1c:52:
fa:35:9c:73:5b:06:d4:df:44:6c:d6:71:6e:8a:ba:
fc:df:a2:e6:30:64:0b:03:ed:bb:ea:bb:15:5e:bf:
c7:0c:bc:aa:84:24:96:5e:18:a1:ad:75:67:5a:37:
5e:97:cd:59:4e:39:ec:2c:2f:3e:9c:db:b2:23:3f:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:8A:17:72:0F:A3:42:BA:05:1A:F1:46:3D:FE:21:30:59:A5:B8
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:49:81:0f:bd:c9:12:0a:71:c1:27:b4:78:ad:16:bf:5f:
b3:b9:72:18:f8:4b:37:ed:7e:2c:90:75:9b:68:1d:8f:1e:06:
cb:da:6d:14:6f:7a:dc:c6:68:c7:c9:f8:1a:21:02:56:5e:54:
22:cf:66:ec:c5:ed:fd:ca:23:12:36:23:89:95:a8:8b:1e:b6:
d9:ee:12:12:a3:b7:ea:6b:4e:e0:da:6e:87:92:e2:7d:9b:4c:
31:55:9a:d9:c3:2b:e0:b1:86:09:fe:43:f7:3a:b6:d9:4c:0d:
be:f2:cf:fa:cf:7d:22:3e:59:39:0a:82:0c:ca:07:36:82:6a:
07:7f:1a:c9:1d:93:63:76:83:17:3f:75:a0:89:b7:2c:3a:81:
7c:60:17:2d:2a:a0:3c:21:0b:e4:ad:ec:17:74:60:e7:16:07:
26:53:06:f8:97:f8:00:55:c5:ed:0e:e8:9d:b2:25:40:b3:8b:
d3:80:4e:5c:7d:83:20:27:69:59:5a:02:18:9f:60:ff:2d:30:
c8:70:9e:1a:cf:a8:5a:be:8f:f9:a9:17:1f:06:37:be:f8:dc:
ef:8c:4e:8f:27:39:8d:34:d2:d8:77:46:31:d6:67:8c:87:d9:
a1:e8:17:80:ff:fe:42:a1:9d:84:e0:08:9d:cb:a2:14:f9:7e:
da:bb:fa:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEQ+E3Xzb7cAhLYBP6Mfp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjAxZDdjYzgyMGRjNzE5MTVlYTkzMDY3M2VmNDdmMjQx
YTcxYzgwHhcNMjUwNDE3MTUwMDIxWhcNMjUwNDE4MTUwMDIxWjAzMTEwLwYDVQQD
EygzYmE4OGExNzcyMGZhMzQyYmEwNTFhZjE0NjNkZmUyMTMwNTlhNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyTQzyUq2XUsT4yaCZS+DErR5/Dw
XTyGYgTnKSNT/J0KiDM0PVfPaqkpbWeQyRqxJS4XR2y7vCpZeBnmIFCoTcO6Jd2Y
t06x/WPy9yOaZIRLheTCZahl7PoaWUYFbk9UA+ckR1tqA3e6YCbaILESekVyFYI7
f1VJY5Vm+EY7RpGF6u+IEHXfIKJG0LM1sM3kPh05P/yAquk2zPOCoEa/qYzXhx1W
ZURaaFda03UKw6qyW7vWnRtUBxSJuxY/4bcXHFL6NZxzWwbU30Rs1nFuirr836Lm
MGQLA+276rsVXr/HDLyqhCSWXhihrXVnWjdel81ZTjnsLC8+nNuyIz9f8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuoihdyD6NCugUa8UY9/iEwWaW4MB8GA1UdIwQY
MBaAFLdgHXzIINxxkV6pMGc+9H8kGnHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEt
NjcxZDY4MTg4Njg4LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEtNjcxZDY4MTg4Njg4
LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdK9JgQ+9
yRIKccEntHitFr9fs7lyGPhLN+1+LJB1m2gdjx4Gy9ptFG963MZox8n4GiECVl5U
Is9m7MXt/cojEjYjiZWoix622e4SEqO36mtO4Npuh5LifZtMMVWa2cMr4LGGCf5D
9zq22UwNvvLP+s99Ij5ZOQqCDMoHNoJqB38ayR2TY3aDFz91oIm3LDqBfGAXLSqg
PCEL5K3sF3Rg5xYHJlMG+Jf4AFXF7Q7onbIlQLOL04BOXH2DICdpWVoCGJ9g/y0w
yHCeGs+oWr6P+akXHwY3vvjc74xOjyc5jTTS2HdGMdZnjIfZoegXgP/+QqGdhOAI
ncuiFPl+2rv6pw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:26 2025 by rpki-client