Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: IIrP9wl+7wV/rPONjLs+kw15ewUwrbipJiXl6k5jiTg=
Subject key identifier: BF:F6:17:40:7E:11:F7:6F:6C:82:FA:BA:2B:45:C0:A0:F4:E8:D1:6D
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 0196545C535621471D807C43132D5D19C555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 1019
Signing time: Sun 20 Apr 2025 18:00:58 +0000
Manifest this update: Sun 20 Apr 2025 18:00:58 +0000
Manifest next update: Mon 21 Apr 2025 18:00:58 +0000
Files and hashes: 1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: t81G1F1n/FqFxXIcOzN8Zo8352mMO/4gbvQ9Z1VEbbI=)
4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:53:56:21:47:1d:80:7c:43:13:2d:5d:19:c5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Apr 20 18:00:58 2025 GMT
Not After : Apr 21 18:00:58 2025 GMT
Subject: CN=bff617407e11f76f6c82faba2b45c0a0f4e8d16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:c8:25:d0:15:93:26:f6:c0:57:35:33:fd:
4c:99:1d:fe:1c:43:a5:8b:f8:ab:04:da:12:39:f6:
90:82:ea:90:71:1b:ff:07:c0:76:39:7d:5a:ea:4e:
06:db:3d:d4:2c:85:db:33:28:11:a9:38:48:0a:0e:
89:94:46:f2:52:a0:a0:a8:12:0b:5d:bd:46:83:b3:
8e:36:cb:bc:bf:6f:71:f9:9c:25:47:e4:9f:3e:ea:
b8:2f:20:bd:2d:a2:dd:e6:93:38:de:7a:cd:be:f4:
9b:e4:40:df:0b:5b:60:31:dc:bd:ea:d2:fb:5d:bd:
47:06:97:a7:b8:99:88:2c:f7:99:34:c3:0a:c0:2f:
51:7a:0a:5d:9a:2e:3f:b7:e0:78:68:e8:9c:2a:f6:
36:32:3a:cf:01:f6:82:2b:bd:ad:db:76:99:f7:ba:
23:bc:c6:67:f7:c2:6d:95:87:c3:e3:ed:d7:56:dd:
9f:0f:23:a2:92:b7:2f:8e:6d:21:05:83:b1:44:a0:
f3:0f:66:ca:46:e5:56:06:66:4f:bb:bf:bf:e9:bd:
9a:47:11:d2:de:77:f6:ae:1c:fa:a8:17:50:95:d1:
fc:0a:ad:cd:2f:35:ea:2f:a2:ea:ba:9a:ec:56:06:
d5:5b:6e:5a:2a:11:bf:df:43:c0:62:09:84:68:f8:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:17:40:7E:11:F7:6F:6C:82:FA:BA:2B:45:C0:A0:F4:E8:D1:6D
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:36:9e:cf:54:2d:22:24:f6:87:66:71:25:82:9f:43:fd:
44:42:50:e8:3e:b0:23:db:8b:00:24:47:89:3e:56:66:b6:2b:
85:ba:74:c8:15:de:d8:21:e7:30:80:0a:91:52:6d:65:58:43:
1c:50:78:a7:8b:ab:da:52:dc:6d:bf:6e:93:f9:81:ec:a8:ff:
a6:05:38:dc:8c:95:57:d9:cc:81:bd:b7:3f:da:3d:ce:6b:36:
63:4c:b8:85:5b:07:a2:b2:45:a2:ad:e4:82:a9:25:a4:d6:45:
e0:01:a5:05:2e:28:be:0c:44:48:9a:f5:f5:88:af:15:d9:60:
21:5c:fe:5e:f0:fd:b5:14:db:d0:70:d9:af:f9:4e:86:61:ce:
d6:2e:68:eb:07:05:04:ac:b4:08:d6:ee:10:c3:bb:20:f0:0d:
bb:f8:50:40:7e:dd:d0:38:d1:3e:34:49:ee:74:7b:fe:62:44:
67:e0:4e:9f:a7:48:fc:8b:2b:50:04:9c:96:31:8f:83:7e:94:
fc:a6:ae:4a:9a:ff:36:8f:a3:cc:3d:f3:5e:b2:12:3f:4f:83:
e7:60:d4:dd:ff:e4:ae:45:a0:de:c5:ba:c0:e8:c9:03:a3:05:
6c:47:54:11:4d:23:34:33:e8:a2:c3:16:56:50:5c:79:c2:45:
c0:ca:c2:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXFNWIUcdgHxDEy1dGcVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx
NmYzYWQwHhcNMjUwNDIwMTgwMDU4WhcNMjUwNDIxMTgwMDU4WjAzMTEwLwYDVQQD
EyhiZmY2MTc0MDdlMTFmNzZmNmM4MmZhYmEyYjQ1YzBhMGY0ZThkMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnfIJdAVkyb2wFc1M/1MmR3+HEOl
i/irBNoSOfaQguqQcRv/B8B2OX1a6k4G2z3ULIXbMygRqThICg6JlEbyUqCgqBIL
Xb1Gg7OONsu8v29x+ZwlR+SfPuq4LyC9LaLd5pM43nrNvvSb5EDfC1tgMdy96tL7
Xb1HBpenuJmILPeZNMMKwC9Regpdmi4/t+B4aOicKvY2MjrPAfaCK72t23aZ97oj
vMZn98JtlYfD4+3XVt2fDyOikrcvjm0hBYOxRKDzD2bKRuVWBmZPu7+/6b2aRxHS
3nf2rhz6qBdQldH8Cq3NLzXqL6LquprsVgbVW25aKhG/30PAYgmEaPhfHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/2F0B+EfdvbIL6uitFwKD06NFtMB8GA1UdIwQY
MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt
NWViZGQ5ZTI4ODdjLzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj
LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/M2ns9U
LSIk9odmcSWCn0P9REJQ6D6wI9uLACRHiT5WZrYrhbp0yBXe2CHnMIAKkVJtZVhD
HFB4p4ur2lLcbb9uk/mB7Kj/pgU43IyVV9nMgb23P9o9zms2Y0y4hVsHorJFoq3k
gqklpNZF4AGlBS4ovgxESJr19YivFdlgIVz+XvD9tRTb0HDZr/lOhmHO1i5o6wcF
BKy0CNbuEMO7IPANu/hQQH7d0DjRPjRJ7nR7/mJEZ+BOn6dI/IsrUAScljGPg36U
/KauSpr/No+jzD3zXrISP0+D52DU3f/krkWg3sW6wOjJA6MFbEdUEU0jNDPoosMW
VlBcecJFwMrChw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:36 2025 by rpki-client