Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: 4I3MPthygqG+AOY7OlKdZPMqqzXOBmjY0dBEAXRPlR8=
Subject key identifier: D8:2E:CF:68:04:C6:81:D9:CF:35:F8:65:9D:83:5D:99:45:6E:15:1A
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019653B79D1BAA7ABCF1B24B54F2CC2FB1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 0E5A
Signing time: Sun 20 Apr 2025 15:01:04 +0000
Manifest this update: Sun 20 Apr 2025 15:01:04 +0000
Manifest next update: Mon 21 Apr 2025 15:01:04 +0000
Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=)
2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=)
3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: r/iQWgPyJnRcjFN8nMhPcxCNLAq02rs7GJ1cujLa+MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:9d:1b:aa:7a:bc:f1:b2:4b:54:f2:cc:2f:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Apr 20 15:01:04 2025 GMT
Not After : Apr 21 15:01:04 2025 GMT
Subject: CN=d82ecf6804c681d9cf35f8659d835d99456e151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:0f:23:60:b7:fe:21:b4:ca:68:b1:23:2c:
5e:1f:7d:6f:25:1d:fe:ec:7a:77:c7:29:9a:c4:db:
c5:05:aa:fb:0b:8b:78:87:7b:84:56:01:ce:69:09:
9a:a5:db:4b:92:5d:bf:41:b1:ec:b8:74:94:f0:7e:
25:c8:a8:6a:03:67:58:c2:79:06:c1:07:91:40:6e:
5a:8c:bf:bd:f5:c8:d6:53:95:c2:ce:59:18:07:2f:
21:36:c1:e6:6f:89:76:a5:bb:f2:b1:db:ee:ec:59:
27:18:a3:c2:0f:fd:81:82:a3:c3:79:d9:08:c2:84:
e2:e6:7e:2c:f9:9b:85:b2:41:6f:13:96:ca:29:14:
f5:54:c0:f3:b4:7a:5c:c6:9e:8b:1a:8f:98:38:6b:
c8:10:c5:a5:bf:09:5e:83:d1:76:21:16:6a:af:08:
8d:c1:27:03:51:eb:3d:bd:d3:20:96:93:42:00:d6:
a3:fe:17:49:92:7a:2d:64:3d:24:dd:1c:8a:b4:26:
5a:d5:c0:b6:e7:8d:81:d4:10:55:6d:a0:4c:0c:31:
68:6d:14:c8:2e:7a:3c:87:8a:33:88:ce:ad:b4:87:
49:c8:d5:3a:d0:44:84:74:fc:66:ec:60:be:9b:ab:
36:a9:f5:eb:f2:ab:e4:06:9f:48:75:9b:f6:20:47:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:CF:68:04:C6:81:D9:CF:35:F8:65:9D:83:5D:99:45:6E:15:1A
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a5:33:a7:e3:79:5c:29:2c:5f:71:2f:3f:91:96:4d:a2:75:
55:ec:58:16:a8:d9:07:3f:88:46:8b:85:a3:d7:70:6f:28:dc:
c2:bc:b0:82:1a:0b:4e:a8:8f:cc:0c:c5:0b:27:35:03:3a:2a:
e8:07:b7:ca:99:21:61:53:88:30:6e:c2:3f:68:1e:32:22:be:
a0:dc:24:62:4e:76:38:45:b8:8d:4d:82:f7:2f:09:9a:07:53:
ec:0a:7f:01:a1:53:7a:c4:e8:a4:ce:c2:ef:88:d8:49:dc:8f:
af:fe:9b:fb:f2:93:0c:b4:16:ec:e6:58:d3:5a:be:11:cd:72:
24:7d:cb:86:ce:51:df:42:8d:b9:d8:71:cf:9b:8b:6b:8f:dd:
f9:ac:72:d8:5d:56:18:07:b8:b4:79:02:02:69:64:54:0e:e5:
29:79:bd:a5:f8:1b:6a:d4:44:50:4f:65:57:3d:dd:a8:8e:de:
65:07:3a:3f:e8:00:f0:c8:7b:0d:39:25:16:35:61:6b:83:b2:
2e:a0:fe:b5:a0:c5:f9:23:aa:a9:62:ac:ce:5b:fe:c7:91:3f:
b8:88:ee:2a:46:3b:b3:9d:83:7c:25:6f:85:8b:f2:fc:66:30:
14:40:c9:24:5b:60:5a:b6:7f:d3:36:7d:56:0e:5a:d1:c6:75:
f7:27:bc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt50bqnq88bJLVPLML7HuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQ5Yjg0N2QzMTI5M2Y3MDFlMWNmOTlkZDhjYTBlYmJi
MGI1YmQwHhcNMjUwNDIwMTUwMTA0WhcNMjUwNDIxMTUwMTA0WjAzMTEwLwYDVQQD
EyhkODJlY2Y2ODA0YzY4MWQ5Y2YzNWY4NjU5ZDgzNWQ5OTQ1NmUxNTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtMPI2C3/iG0ymixIyxeH31vJR3+
7Hp3xymaxNvFBar7C4t4h3uEVgHOaQmapdtLkl2/QbHsuHSU8H4lyKhqA2dYwnkG
wQeRQG5ajL+99cjWU5XCzlkYBy8hNsHmb4l2pbvysdvu7FknGKPCD/2BgqPDedkI
woTi5n4s+ZuFskFvE5bKKRT1VMDztHpcxp6LGo+YOGvIEMWlvwleg9F2IRZqrwiN
wScDUes9vdMglpNCANaj/hdJknotZD0k3RyKtCZa1cC2542B1BBVbaBMDDFobRTI
Lno8h4oziM6ttIdJyNU60ESEdPxm7GC+m6s2qfXr8qvkBp9IdZv2IEdYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNguz2gExoHZzzX4ZZ2DXZlFbhUaMB8GA1UdIwQY
MBaAFE8Um4R9MSk/cB4c+Z3Yyg67sLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjIt
NDUyYmFkZmQ1YTZkLzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjItNDUyYmFkZmQ1YTZk
LzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKUzp+N5
XCksX3EvP5GWTaJ1VexYFqjZBz+IRouFo9dwbyjcwrywghoLTqiPzAzFCyc1Azoq
6Ae3ypkhYVOIMG7CP2geMiK+oNwkYk52OEW4jU2C9y8JmgdT7Ap/AaFTesTopM7C
74jYSdyPr/6b+/KTDLQW7OZY01q+Ec1yJH3Lhs5R30KNudhxz5uLa4/d+axy2F1W
GAe4tHkCAmlkVA7lKXm9pfgbatREUE9lVz3dqI7eZQc6P+gA8Mh7DTklFjVha4Oy
LqD+taDF+SOqqWKszlv+x5E/uIjuKkY7s52DfCVvhYvy/GYwFEDJJFtgWrZ/0zZ9
Vg5a0cZ19ye8Nw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:41:33 2025 by rpki-client