Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: IO6lwnXhDD+AROWkKVr6/GxLh1hvpev8JqabUxRJDT0=
Subject key identifier: 13:5C:E8:A7:95:7C:E1:64:08:CB:D5:98:FD:CE:27:A3:13:64:08:21
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 01960FB273D2535CF74F58DDD05692C755E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0778
Signing time: Mon 07 Apr 2025 10:01:15 +0000
Manifest this update: Mon 07 Apr 2025 10:01:15 +0000
Manifest next update: Tue 08 Apr 2025 10:01:15 +0000
Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: JFULl93Lox0JS4Mi4j1I0Hrada+m819OQzez0yMsvaI=)
3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:73:d2:53:5c:f7:4f:58:dd:d0:56:92:c7:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Apr 7 10:01:15 2025 GMT
Not After : Apr 8 10:01:15 2025 GMT
Subject: CN=135ce8a7957ce16408cbd598fdce27a313640821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:6d:43:af:db:1a:bc:94:20:96:88:cb:54:
79:cb:29:e6:e6:d3:0a:84:d2:c5:ce:c4:d7:d3:6d:
56:14:f8:ec:82:46:fa:c2:7a:fa:78:ad:20:b2:16:
01:2b:1b:be:0b:83:5f:35:83:96:07:5b:e3:5d:17:
67:6e:f2:ea:97:f6:f7:08:2c:d7:fd:72:03:74:3f:
87:d2:0e:55:53:de:f6:54:70:74:99:30:4c:15:e3:
30:49:7d:71:77:b6:06:8c:30:65:6d:ea:11:0d:4a:
42:6c:cc:0d:4a:e9:f5:5d:f2:7a:94:f2:b0:84:22:
76:88:be:18:18:3f:30:19:eb:e4:0c:0a:a3:a7:50:
6f:7c:dc:70:77:33:5f:28:fe:91:da:bf:01:8c:4f:
c7:60:74:6b:bd:06:e6:e7:6d:5e:3d:6e:1c:1a:58:
73:75:1f:0a:8e:f1:a7:49:10:71:f6:80:b7:99:db:
91:89:e4:93:24:07:dd:c3:44:5a:8a:16:9e:e0:4c:
d1:57:b8:be:71:37:f8:44:67:18:72:34:c2:34:25:
dd:2f:ed:c7:e1:bf:bb:21:7b:47:71:5f:04:fc:14:
b2:b7:5d:e2:71:a6:b8:d1:ff:42:2f:10:79:64:b5:
59:93:a7:b2:cd:7b:cf:24:21:74:94:3d:75:ad:fd:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:E8:A7:95:7C:E1:64:08:CB:D5:98:FD:CE:27:A3:13:64:08:21
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:61:1c:e7:82:ea:d0:c4:3a:43:ac:86:4b:de:9c:36:7c:b2:
23:72:39:42:84:e5:95:06:10:9b:04:bc:14:e2:b6:dc:70:10:
4a:9e:49:0a:3f:b5:bb:e1:cc:ca:2c:97:11:a9:b1:fa:88:8d:
62:1f:0f:c9:f5:e7:a9:a7:be:2a:28:56:12:89:08:d3:7e:6f:
94:18:5d:c6:3f:a9:77:87:4c:b8:f4:7f:d6:ee:f1:ab:e5:8f:
be:d9:55:4f:02:ff:2a:22:6f:67:a2:32:01:5b:21:b2:ff:79:
17:5b:da:4e:4a:0f:c5:d9:10:98:36:ae:3e:bb:14:03:cb:e8:
13:8d:05:cd:d5:46:41:43:18:c4:64:55:3d:38:16:15:07:04:
40:62:c2:4b:6b:56:5e:26:f3:b2:42:7d:51:4b:21:94:1f:f5:
b8:38:fd:53:fb:71:fc:4c:e9:46:17:fb:1b:7a:34:2b:de:ab:
cc:c9:34:e4:d3:23:de:9b:78:21:be:6c:54:52:34:8d:e9:77:
f9:83:29:37:dc:12:25:7c:51:15:95:66:a7:9f:ea:b2:55:84:
40:74:b1:90:71:05:ac:8f:47:cf:81:22:a5:e6:a0:d7:25:09:
48:89:c0:21:38:5d:38:14:dd:20:1c:a5:11:e8:e3:4b:f9:53:
75:04:e2:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPsnPSU1z3T1jd0FaSx1XgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi
NDYyZTcwHhcNMjUwNDA3MTAwMTE1WhcNMjUwNDA4MTAwMTE1WjAzMTEwLwYDVQQD
EygxMzVjZThhNzk1N2NlMTY0MDhjYmQ1OThmZGNlMjdhMzEzNjQwODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJtQ6/bGryUIJaIy1R5yynm5tMK
hNLFzsTX021WFPjsgkb6wnr6eK0gshYBKxu+C4NfNYOWB1vjXRdnbvLql/b3CCzX
/XIDdD+H0g5VU972VHB0mTBMFeMwSX1xd7YGjDBlbeoRDUpCbMwNSun1XfJ6lPKw
hCJ2iL4YGD8wGevkDAqjp1BvfNxwdzNfKP6R2r8BjE/HYHRrvQbm521ePW4cGlhz
dR8KjvGnSRBx9oC3mduRieSTJAfdw0Raihae4EzRV7i+cTf4RGcYcjTCNCXdL+3H
4b+7IXtHcV8E/BSyt13icaa40f9CLxB5ZLVZk6eyzXvPJCF0lD11rf08JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNc6KeVfOFkCMvVmP3OJ6MTZAghMB8GA1UdIwQY
MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt
OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm
LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGEc54Lq
0MQ6Q6yGS96cNnyyI3I5QoTllQYQmwS8FOK23HAQSp5JCj+1u+HMyiyXEamx+oiN
Yh8PyfXnqae+KihWEokI035vlBhdxj+pd4dMuPR/1u7xq+WPvtlVTwL/KiJvZ6Iy
AVshsv95F1vaTkoPxdkQmDauPrsUA8voE40FzdVGQUMYxGRVPTgWFQcEQGLCS2tW
XibzskJ9UUshlB/1uDj9U/tx/EzpRhf7G3o0K96rzMk05NMj3pt4Ib5sVFI0jel3
+YMpN9wSJXxRFZVmp5/qslWEQHSxkHEFrI9Hz4Eipeag1yUJSInAIThdOBTdIByl
EejjS/lTdQTibg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:09 2025 by rpki-client