Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File: tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier: tAJyZkLOR6InVzDoGw5BnDVddPrqzrDlnBy/dM2Oa+M=
Subject key identifier: 72:56:06:B0:35:F0:60:43:8C:9C:1F:7D:4A:E3:B0:22:88:91:5A:57
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer: /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial: 0196507F74AB6308384F53CDC8E12451850D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 00:00:51 +0000
Manifest this update: Sun 20 Apr 2025 00:00:51 +0000
Manifest next update: Mon 21 Apr 2025 00:00:51 +0000
Files and hashes: 1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: Ajw33jVbhClRdZ8wz+yl07aWRsEUfgVkqE6/BiTxShY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:74:ab:63:08:38:4f:53:cd:c8:e1:24:51:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Validity
Not Before: Apr 20 00:00:51 2025 GMT
Not After : Apr 21 00:00:51 2025 GMT
Subject: CN=725606b035f060438c9c1f7d4ae3b02288915a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:52:7c:53:39:0e:4e:24:cb:44:2f:5e:f0:
91:42:3f:07:ff:b4:8d:5e:26:9d:c9:1d:ee:4c:16:
84:ab:fe:af:28:d8:dc:ae:8b:87:06:cf:8c:c2:e4:
01:bf:ac:af:fc:96:ae:e4:77:85:24:44:51:cc:11:
94:a9:f0:40:5a:a6:4a:89:ba:12:0e:b5:6f:75:ad:
1f:83:4f:b0:f9:19:4e:00:61:4a:2b:8c:47:51:a0:
1b:90:6c:95:79:5a:78:dc:1a:3d:5c:2c:65:48:9c:
73:47:5e:fa:94:2d:64:e7:2d:5d:b3:8c:43:62:55:
09:5e:7b:e6:3b:02:0c:cc:67:3f:7c:92:d1:52:65:
2e:05:e6:9a:81:26:fe:f7:c1:24:69:ea:54:74:9e:
ec:8b:d8:bc:00:42:c7:5c:f5:d4:09:24:94:32:39:
5a:5c:c6:ce:4a:d7:8c:97:b8:eb:7a:cd:a9:6f:83:
ee:aa:40:53:ba:82:2d:7d:c3:0e:f9:5c:2c:59:3d:
1d:b4:d8:1a:3c:6f:86:2c:41:4f:32:9b:7d:48:90:
2f:bc:70:a5:3f:82:82:d3:72:77:b0:de:51:2b:1a:
38:41:fb:9e:ba:4b:65:a5:97:78:b0:b0:69:53:25:
da:07:36:bd:6d:63:fd:d9:c0:05:5e:46:a3:3a:db:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:06:B0:35:F0:60:43:8C:9C:1F:7D:4A:E3:B0:22:88:91:5A:57
X509v3 Authority Key Identifier:
keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4d:a1:da:dd:26:cd:7c:49:6e:26:10:5e:b2:3f:25:dc:03:
23:7a:a0:80:e2:41:4b:a5:8b:71:c0:8c:d6:77:40:d2:66:16:
cc:16:9f:20:20:d8:75:7d:5f:c0:3f:f9:ef:39:31:0e:8b:78:
6b:5b:f5:ba:0c:80:08:8c:1d:b4:60:ab:7b:8a:d1:76:e4:a1:
26:21:57:2d:21:73:d0:c6:d8:4e:75:58:16:0c:67:dc:96:e7:
40:d4:f2:74:0e:7e:9a:fb:b0:46:40:a9:f3:c3:f5:ef:6f:23:
37:01:df:b3:42:83:1b:1e:93:cc:5a:37:fa:cc:81:a4:89:81:
dc:50:d5:98:d6:69:c1:69:74:de:55:36:15:d4:5a:47:cf:c0:
5c:88:52:f2:13:e7:97:dc:c6:08:94:eb:c9:d5:21:a6:2f:47:
37:17:ab:e1:9e:06:eb:c4:fb:11:e3:4d:3c:bc:b1:22:f2:bc:
a3:9d:9d:7f:af:9a:0c:5c:c6:a3:60:83:b6:81:4c:e5:ee:c4:
4f:1c:7c:5b:25:60:78:65:a2:d8:cf:c2:34:11:cc:24:c8:d5:
cb:a5:23:2b:e0:f1:49:14:ff:0b:72:f3:1b:1a:f0:fa:2c:a5:
b5:5c:ec:90:94:ea:e1:77:ba:dc:10:a9:e3:80:06:6c:4d:87:
f1:d4:4e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQf3SrYwg4T1PNyOEkUYUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NWUzYjc0ZmM5MzRiMDkyMTkzYWRlZDdlY2EwMWRhMWVm
MTg2YWQwHhcNMjUwNDIwMDAwMDUxWhcNMjUwNDIxMDAwMDUxWjAzMTEwLwYDVQQD
Eyg3MjU2MDZiMDM1ZjA2MDQzOGM5YzFmN2Q0YWUzYjAyMjg4OTE1YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4dSfFM5Dk4ky0QvXvCRQj8H/7SN
XiadyR3uTBaEq/6vKNjcrouHBs+MwuQBv6yv/Jau5HeFJERRzBGUqfBAWqZKiboS
DrVvda0fg0+w+RlOAGFKK4xHUaAbkGyVeVp43Bo9XCxlSJxzR176lC1k5y1ds4xD
YlUJXnvmOwIMzGc/fJLRUmUuBeaagSb+98EkaepUdJ7si9i8AELHXPXUCSSUMjla
XMbOSteMl7jres2pb4PuqkBTuoItfcMO+VwsWT0dtNgaPG+GLEFPMpt9SJAvvHCl
P4KC03J3sN5RKxo4QfueuktlpZd4sLBpUyXaBza9bWP92cAFXkajOtuvnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJWBrA18GBDjJwffUrjsCKIkVpXMB8GA1UdIwQY
MBaAFLZeO3T8k0sJIZOt7X7KAdoe8YatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mNTlmOGUtZjU0NC00ZmJlLTk1YzMt
Y2ZmMDBlNGNkMmJlLzEvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mNTlmOGUtZjU0NC00ZmJlLTk1YzMtY2ZmMDBlNGNkMmJl
LzEvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtk2h2t0m
zXxJbiYQXrI/JdwDI3qggOJBS6WLccCM1ndA0mYWzBafICDYdX1fwD/57zkxDot4
a1v1ugyACIwdtGCre4rRduShJiFXLSFz0MbYTnVYFgxn3JbnQNTydA5+mvuwRkCp
88P1728jNwHfs0KDGx6TzFo3+syBpImB3FDVmNZpwWl03lU2FdRaR8/AXIhS8hPn
l9zGCJTrydUhpi9HNxer4Z4G68T7EeNNPLyxIvK8o52df6+aDFzGo2CDtoFM5e7E
Txx8WyVgeGWi2M/CNBHMJMjVy6UjK+DxSRT/C3LzGxrw+iyltVzskJTq4Xe63BCp
44AGbE2H8dROuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:08:21 2025 by rpki-client