Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: ByfWyuhO2hbwttjyh1eh9qGJHDPQREYUhDXalq+/u0U=
Subject key identifier: FF:96:6B:88:DF:69:57:13:13:A2:0D:77:ED:70:BC:39:F4:98:0B:F8
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 0196583871CBC6AEF43692807E0AC9A0735B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 12:00:16 +0000
Manifest this update: Mon 21 Apr 2025 12:00:16 +0000
Manifest next update: Tue 22 Apr 2025 12:00:16 +0000
Files and hashes: 1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: VuF7TcML8Br2wgUfs0+zkUeF63x/Gj9Lnx0ZONu3acs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:71:cb:c6:ae:f4:36:92:80:7e:0a:c9:a0:73:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Apr 21 12:00:16 2025 GMT
Not After : Apr 22 12:00:16 2025 GMT
Subject: CN=ff966b88df69571313a20d77ed70bc39f4980bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:fa:51:ef:a2:22:18:b3:b8:11:bd:cb:eb:
a2:d2:3c:15:1f:ea:1b:82:34:1a:21:9c:1a:c8:26:
df:5e:51:80:e0:90:df:4f:2c:2c:02:8e:25:fe:50:
a0:bf:cf:7b:dd:72:fb:70:c0:b8:4a:c1:1f:ce:b7:
a5:b8:f4:46:af:73:c1:50:ef:6f:7c:ec:c0:a7:f4:
11:33:3b:4a:b6:c6:b9:a3:4a:f3:2b:9d:8a:59:89:
b8:d8:16:f2:26:3d:de:2a:2b:36:5b:13:43:81:24:
97:70:81:f8:a1:ae:41:65:d5:88:0c:62:50:78:a7:
0e:55:87:ba:a1:2a:42:b5:7c:80:16:04:0c:3a:af:
66:82:94:47:dd:95:85:97:6c:61:1f:91:19:9b:64:
14:45:6f:d3:1b:bc:ef:86:6f:b7:f0:1f:b7:01:94:
85:b4:11:cf:42:cd:38:82:77:6f:8f:b7:74:80:8c:
2d:7c:86:5d:98:a9:ad:1d:33:10:df:40:c9:85:35:
51:85:7f:33:14:90:a1:6c:54:b4:8d:83:0b:c5:ea:
b0:a3:a7:45:ec:27:8a:6a:7f:43:d0:6f:da:b8:20:
b3:be:eb:5d:0b:cd:72:53:d8:e9:90:99:97:c5:fa:
ae:98:78:c4:d3:8b:bd:50:c1:3d:e3:42:72:e1:84:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:6B:88:DF:69:57:13:13:A2:0D:77:ED:70:BC:39:F4:98:0B:F8
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d8:ac:b6:9d:b6:b3:fb:f6:5d:7e:6b:4e:9c:fa:22:3d:ca:
d6:4a:91:d6:db:8d:99:25:4f:a3:6d:81:1e:c9:84:d0:47:18:
1d:c6:e2:30:1d:6b:ad:64:cf:8a:7f:25:f0:20:fa:7c:c9:68:
c2:06:4d:f1:24:ce:e4:8f:10:21:78:1a:53:a9:51:8e:12:cb:
d2:94:ac:0b:00:78:31:67:61:78:1a:fc:b1:fd:eb:98:68:15:
f0:8f:01:b4:ae:62:95:58:dd:a7:5a:98:2b:5a:fb:e5:28:03:
a2:a4:10:27:b3:b6:ce:cd:4f:73:c6:22:73:31:a2:2c:ff:60:
45:b4:ba:92:2d:b3:58:5a:00:40:c8:2b:c6:7f:13:86:d0:0d:
db:4f:9c:b6:0b:ac:fa:02:7b:a1:39:1c:55:0c:48:bd:a8:ac:
a3:26:ea:f9:73:13:7b:8c:72:cb:ce:7e:75:f6:f1:d7:9b:a0:
55:7b:7e:07:9f:ce:bf:65:26:cd:d6:13:90:37:c1:4c:b2:6a:
90:dc:a3:a5:52:c8:91:ef:76:3d:64:00:7f:a0:53:06:7c:4d:
3d:27:6b:9c:e4:a9:82:1a:f3:b6:db:18:61:94:10:17:aa:3f:
70:0d:ac:88:0c:ce:23:f5:17:7f:83:ed:25:cf:6d:a5:e6:1a:
15:77:8c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOHHLxq70NpKAfgrJoHNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzY0NjZkMDM2ODUyZTJmNzM3NmFkZTEzODA0NjE0M2I5
OTRjYzMwHhcNMjUwNDIxMTIwMDE2WhcNMjUwNDIyMTIwMDE2WjAzMTEwLwYDVQQD
EyhmZjk2NmI4OGRmNjk1NzEzMTNhMjBkNzdlZDcwYmMzOWY0OTgwYmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J76Ue+iIhizuBG9y+ui0jwVH+ob
gjQaIZwayCbfXlGA4JDfTywsAo4l/lCgv8973XL7cMC4SsEfzreluPRGr3PBUO9v
fOzAp/QRMztKtsa5o0rzK52KWYm42BbyJj3eKis2WxNDgSSXcIH4oa5BZdWIDGJQ
eKcOVYe6oSpCtXyAFgQMOq9mgpRH3ZWFl2xhH5EZm2QURW/TG7zvhm+38B+3AZSF
tBHPQs04gndvj7d0gIwtfIZdmKmtHTMQ30DJhTVRhX8zFJChbFS0jYMLxeqwo6dF
7CeKan9D0G/auCCzvutdC81yU9jpkJmXxfqumHjE04u9UME940Jy4YTzwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+Wa4jfaVcTE6INd+1wvDn0mAv4MB8GA1UdIwQY
MBaAFLU2Rm0DaFLi9zdq3hOARhQ7mUzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lMWI0MjItMTYyYS00OThhLTkyZDgt
YjEwMmZlMzI4M2EzLzEvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lMWI0MjItMTYyYS00OThhLTkyZDgtYjEwMmZlMzI4M2Ez
LzEvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9istp22
s/v2XX5rTpz6Ij3K1kqR1tuNmSVPo22BHsmE0EcYHcbiMB1rrWTPin8l8CD6fMlo
wgZN8STO5I8QIXgaU6lRjhLL0pSsCwB4MWdheBr8sf3rmGgV8I8BtK5ilVjdp1qY
K1r75SgDoqQQJ7O2zs1Pc8YiczGiLP9gRbS6ki2zWFoAQMgrxn8ThtAN20+ctgus
+gJ7oTkcVQxIvaisoybq+XMTe4xyy85+dfbx15ugVXt+B5/Ov2UmzdYTkDfBTLJq
kNyjpVLIke92PWQAf6BTBnxNPSdrnOSpghrzttsYYZQQF6o/cA2siAzOI/UXf4Pt
Jc9tpeYaFXeMoQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:44 2025 by rpki-client