Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: CoRQvqNnpmRMyyGt/Mz9VnwWNJYeTZaE+yG2biJf8ZE=
Subject key identifier: C2:20:06:70:D1:77:1C:D2:21:AF:FA:6A:5E:57:3B:D0:F2:B7:EC:0C
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 0196176C5352FC423D36A464B1BFC122C2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 14E1
Signing time: Tue 08 Apr 2025 22:01:36 +0000
Manifest this update: Tue 08 Apr 2025 22:01:36 +0000
Manifest next update: Wed 09 Apr 2025 22:01:36 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: 8lzqe1fTd74T5bqiLjeqfeohR4IziHqF+E6ubkZ7mOk=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:6c:53:52:fc:42:3d:36:a4:64:b1:bf:c1:22:c2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Apr 8 22:01:36 2025 GMT
Not After : Apr 9 22:01:36 2025 GMT
Subject: CN=c2200670d1771cd221affa6a5e573bd0f2b7ec0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:cd:c8:5e:5e:d1:01:a3:6d:18:9a:b5:e5:
bc:18:34:66:09:f5:46:a5:b4:7d:20:d0:08:96:82:
8a:e4:b8:bc:d8:4d:4f:b0:54:6c:0c:8e:9c:d1:2d:
0f:52:8d:b8:fb:d7:b1:fc:cb:0c:85:84:4b:ca:83:
56:87:5a:ec:e3:d1:0d:c5:f8:9d:95:ed:48:bc:c6:
7e:be:9d:50:2e:de:78:6b:75:5f:11:f3:36:2d:ea:
b2:d2:c0:ef:be:f6:74:70:40:e8:eb:16:e6:21:fc:
44:53:be:5c:e9:9d:86:01:87:9e:c9:77:87:96:77:
5a:fe:db:45:1f:5c:b8:ad:03:f4:20:ec:07:25:30:
f5:67:e8:44:18:b6:3e:67:be:ae:f5:ac:9e:ff:3e:
47:7e:c3:ab:a8:48:29:8c:87:8b:62:a8:26:a7:03:
47:76:b2:3f:ff:17:61:07:e6:a9:d7:01:67:62:86:
f7:ef:22:5e:47:0b:9b:a6:8f:62:c0:71:27:65:61:
e3:47:d2:d3:dd:a5:8c:37:3e:cd:ae:7e:a4:dd:b7:
48:9a:51:3e:d8:96:7f:8b:3e:69:be:78:24:b0:dc:
aa:a9:52:8c:4d:af:2c:2b:04:85:75:06:75:b8:8f:
7b:b4:62:51:cc:51:68:f8:ba:0a:5f:2e:92:a5:3f:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:06:70:D1:77:1C:D2:21:AF:FA:6A:5E:57:3B:D0:F2:B7:EC:0C
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c5:c5:e2:46:7d:4c:02:7a:ff:6a:d7:42:c7:70:d6:8f:ff:
35:39:09:b7:d7:dd:9d:6d:08:63:d8:9a:54:b1:a6:87:95:73:
43:9f:28:91:26:9e:07:f9:02:3d:e6:d5:ab:20:15:e7:dc:94:
8a:1c:fc:03:de:ae:70:6b:59:aa:51:6a:c7:07:f2:12:3f:cf:
a3:6d:40:40:83:32:ab:6d:e0:e1:96:07:cd:df:dc:ff:a6:33:
cc:8b:3f:41:12:fd:9b:fe:df:95:b3:65:6e:30:40:09:d4:df:
ea:e3:03:de:96:65:74:58:31:a9:60:8e:26:f6:7d:42:76:55:
4e:4f:3c:08:da:96:18:a5:da:c0:23:ce:c7:42:f3:28:8b:f8:
3d:55:92:87:3f:88:db:35:84:f6:24:ac:6a:90:80:ae:03:43:
37:0f:b8:56:7d:77:b7:65:ef:36:7c:58:93:ae:0a:a3:52:53:
44:45:c7:6b:64:de:db:18:72:5e:d4:33:a9:0f:d0:77:12:2b:
88:75:42:ea:c0:4c:df:a9:25:90:72:ce:cb:ce:69:2b:a8:0b:
73:54:25:f9:5f:d4:d3:f6:2a:19:48:f0:1d:c3:ff:85:2a:d6:
e2:93:a1:94:c5:eb:08:8d:cb:11:c2:d7:20:79:9f:a7:87:d6:
80:e6:86:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYXbFNS/EI9NqRksb/BIsK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjUwNDA4MjIwMTM2WhcNMjUwNDA5MjIwMTM2WjAzMTEwLwYDVQQD
EyhjMjIwMDY3MGQxNzcxY2QyMjFhZmZhNmE1ZTU3M2JkMGYyYjdlYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDnNyF5e0QGjbRiateW8GDRmCfVG
pbR9INAIloKK5Li82E1PsFRsDI6c0S0PUo24+9ex/MsMhYRLyoNWh1rs49ENxfid
le1IvMZ+vp1QLt54a3VfEfM2Leqy0sDvvvZ0cEDo6xbmIfxEU75c6Z2GAYeeyXeH
lnda/ttFH1y4rQP0IOwHJTD1Z+hEGLY+Z76u9aye/z5HfsOrqEgpjIeLYqgmpwNH
drI//xdhB+ap1wFnYob37yJeRwubpo9iwHEnZWHjR9LT3aWMNz7Nrn6k3bdImlE+
2JZ/iz5pvngksNyqqVKMTa8sKwSFdQZ1uI97tGJRzFFo+LoKXy6SpT/ZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIgBnDRdxzSIa/6al5XO9Dyt+wMMB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8XF4kZ9
TAJ6/2rXQsdw1o//NTkJt9fdnW0IY9iaVLGmh5VzQ58okSaeB/kCPebVqyAV59yU
ihz8A96ucGtZqlFqxwfyEj/Po21AQIMyq23g4ZYHzd/c/6YzzIs/QRL9m/7flbNl
bjBACdTf6uMD3pZldFgxqWCOJvZ9QnZVTk88CNqWGKXawCPOx0LzKIv4PVWShz+I
2zWE9iSsapCArgNDNw+4Vn13t2XvNnxYk64Ko1JTREXHa2Te2xhyXtQzqQ/QdxIr
iHVC6sBM36klkHLOy85pK6gLc1Ql+V/U0/YqGUjwHcP/hSrW4pOhlMXrCI3LEcLX
IHmfp4fWgOaGZw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:14:39 2025 by rpki-client