Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: fHIN+pDOaUCEYZZSjn1hRHfZjzG6wBBE2Y/7g7ROySU=
Subject key identifier: 1B:11:25:2E:BF:A9:CD:65:C3:64:22:68:2D:92:B2:B8:7D:25:48:C4
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 01965236C4577F88DF0B6430CB7C2DAE4CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 140A
Signing time: Sun 20 Apr 2025 08:00:43 +0000
Manifest this update: Sun 20 Apr 2025 08:00:43 +0000
Manifest next update: Mon 21 Apr 2025 08:00:43 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: Y00aGZsugmFJnxsd1lrRknukn11yPoDSLTS1aABM64U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:c4:57:7f:88:df:0b:64:30:cb:7c:2d:ae:4c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Apr 20 08:00:43 2025 GMT
Not After : Apr 21 08:00:43 2025 GMT
Subject: CN=1b11252ebfa9cd65c36422682d92b2b87d2548c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:87:1e:05:b6:cb:4a:d1:8c:75:de:76:11:
43:ed:1d:db:da:bf:57:ef:59:be:80:9d:12:ca:25:
8c:23:93:27:af:e0:88:4f:0e:c8:7a:a9:24:a6:0e:
e9:3c:d6:ee:20:9a:d7:03:a7:1b:08:31:dc:90:a1:
35:02:3d:cf:47:73:c4:2b:db:15:61:df:c7:e4:25:
58:0e:1b:4e:71:eb:eb:e0:7e:99:18:1c:10:89:07:
f9:3e:ef:d5:8d:f1:cd:38:d1:fe:56:d7:64:86:1f:
42:1b:0a:0f:43:e1:a2:66:69:4d:01:c7:b0:9e:26:
cb:90:d5:da:ac:31:43:ef:be:fc:12:83:35:77:cb:
ac:fa:cf:14:04:a4:54:41:31:a7:4a:23:af:e0:a2:
8f:46:74:03:4e:13:5e:76:d4:6c:50:1a:36:da:c9:
da:26:82:91:07:fe:90:ee:60:23:da:f2:a7:07:ad:
98:4b:77:45:bf:bd:fa:36:f4:b8:ee:36:d4:fb:10:
9e:67:73:4e:53:2d:a9:cf:f1:e9:b5:1f:cd:7b:6b:
38:07:ac:dc:9b:73:1f:07:50:69:23:bf:1b:d7:ae:
0c:3f:f6:d7:ee:6c:ef:b0:df:a5:e5:85:6c:f8:15:
df:5d:da:75:2e:34:e9:b9:0f:cd:98:e8:ce:fb:38:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:11:25:2E:BF:A9:CD:65:C3:64:22:68:2D:92:B2:B8:7D:25:48:C4
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:04:8c:c9:cb:2e:0e:34:41:5d:a6:30:42:63:32:bb:d2:
62:64:a3:48:b4:1f:1d:ef:a3:2c:05:b3:fb:db:9b:61:15:12:
f2:68:b5:d3:45:a6:05:ff:f0:96:22:01:9d:09:ff:3e:5c:4f:
71:21:41:63:35:c4:b6:9d:4c:f9:3f:43:60:53:47:00:d7:78:
59:4b:75:1d:ce:e9:c2:b8:48:fe:a7:cb:45:1f:60:ec:5f:e7:
a3:d9:24:33:ed:3d:3d:ce:c3:80:29:3c:21:51:e3:cd:e4:c4:
2d:78:a2:84:73:ca:6c:32:8d:4c:1e:1a:e8:7c:e9:f6:57:a4:
78:e0:55:a3:4f:a0:49:88:13:b7:aa:ce:6a:9e:ad:92:0e:c6:
5f:d8:11:03:1c:0c:ca:4b:1a:5c:88:49:a6:b9:2a:ac:08:cb:
3c:0b:ea:c6:06:9c:6d:18:d8:b7:43:87:f0:1f:93:38:ed:82:
79:c8:11:9e:75:a0:c3:e8:c0:51:e5:e7:db:ed:f0:17:58:f2:
6d:17:17:e4:0a:2e:19:f3:87:eb:d5:10:9f:f2:64:9e:6d:a7:
db:49:0e:15:87:a9:df:8e:ec:08:79:01:ad:6d:59:81:04:63:
20:59:cf:dd:12:fe:41:67:b4:e7:ee:80:f4:91:48:34:ba:42:
30:24:33:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNsRXf4jfC2Qwy3wtrkz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA2YmNlM2Y3ZTFhZTNhN2UyY2I5YWQyMDVjNGNkZmIw
MmRkYjUwHhcNMjUwNDIwMDgwMDQzWhcNMjUwNDIxMDgwMDQzWjAzMTEwLwYDVQQD
EygxYjExMjUyZWJmYTljZDY1YzM2NDIyNjgyZDkyYjJiODdkMjU0OGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc2HHgW2y0rRjHXedhFD7R3b2r9X
71m+gJ0SyiWMI5Mnr+CITw7Ieqkkpg7pPNbuIJrXA6cbCDHckKE1Aj3PR3PEK9sV
Yd/H5CVYDhtOcevr4H6ZGBwQiQf5Pu/VjfHNONH+Vtdkhh9CGwoPQ+GiZmlNAcew
nibLkNXarDFD7778EoM1d8us+s8UBKRUQTGnSiOv4KKPRnQDThNedtRsUBo22sna
JoKRB/6Q7mAj2vKnB62YS3dFv736NvS47jbU+xCeZ3NOUy2pz/HptR/Ne2s4B6zc
m3MfB1BpI78b164MP/bX7mzvsN+l5YVs+BXfXdp1LjTpuQ/NmOjO+zjf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsRJS6/qc1lw2QiaC2Ssrh9JUjEMB8GA1UdIwQY
MBaAFLRQa84/fhrjp+LLmtIFxM37At21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMt
ZjhhMzc4MGMzNDhlLzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMtZjhhMzc4MGMzNDhl
LzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc40EjMnL
Lg40QV2mMEJjMrvSYmSjSLQfHe+jLAWz+9ubYRUS8mi100WmBf/wliIBnQn/PlxP
cSFBYzXEtp1M+T9DYFNHANd4WUt1Hc7pwrhI/qfLRR9g7F/no9kkM+09Pc7DgCk8
IVHjzeTELXiihHPKbDKNTB4a6Hzp9lekeOBVo0+gSYgTt6rOap6tkg7GX9gRAxwM
yksaXIhJprkqrAjLPAvqxgacbRjYt0OH8B+TOO2CecgRnnWgw+jAUeXn2+3wF1jy
bRcX5AouGfOH69UQn/Jknm2n20kOFYep347sCHkBrW1ZgQRjIFnP3RL+QWe05+6A
9JFINLpCMCQzfQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:11:54 2025 by rpki-client