Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: WuU3sYyHMz7+NHFlGycZdSkijFTkZS+6tyZytB5+fMA=
Subject key identifier: 13:26:B1:87:99:0A:0F:1D:A7:08:0F:6C:7C:65:57:FC:84:F1:3D:80
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 01965C15380C286EC63F8C5C59A7289FA832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 14CE
Signing time: Tue 22 Apr 2025 06:00:16 +0000
Manifest this update: Tue 22 Apr 2025 06:00:16 +0000
Manifest next update: Wed 23 Apr 2025 06:00:16 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: WkUJQ12/dmpRkui5Q/JzMTYZ6xSciA/UzoNllu9uvFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:38:0c:28:6e:c6:3f:8c:5c:59:a7:28:9f:a8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: Apr 22 06:00:16 2025 GMT
Not After : Apr 23 06:00:16 2025 GMT
Subject: CN=1326b187990a0f1da7080f6c7c6557fc84f13d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:1a:a7:65:8b:b4:e3:66:8b:9c:cd:5e:c9:
d6:0e:0d:90:14:3f:1a:1f:34:e4:95:d3:0a:e6:09:
0f:b9:80:e4:90:f6:98:87:5a:57:2b:8b:9b:cc:31:
a6:a0:2a:de:90:bd:a3:87:f1:a0:b7:40:93:79:27:
70:34:98:1c:f6:b4:66:2a:b1:f3:91:ef:c1:9d:de:
11:ae:b0:b8:48:dc:b3:d8:54:69:29:86:cb:6f:8c:
73:0d:65:9a:37:c8:79:81:0d:88:7d:1b:6c:df:8e:
32:e2:ba:11:13:eb:1d:89:50:34:83:e8:0c:3b:0e:
2c:58:12:07:09:23:38:7d:c0:a2:a0:78:30:93:03:
08:26:b0:d9:90:47:ee:22:07:63:7e:9b:95:6a:5e:
1a:0c:ab:3d:87:7b:f9:4d:e7:3f:9e:3e:e7:c2:b7:
60:8c:2d:72:08:73:db:58:4a:db:bc:59:13:56:c5:
b4:c7:c3:f0:10:9c:39:f0:21:ca:1e:19:6c:64:08:
a0:c7:fe:3b:49:7c:14:33:e7:d1:e6:24:04:8a:23:
9d:58:d5:21:ae:fd:0b:89:3b:06:aa:69:74:18:9c:
09:6d:ec:92:0d:d5:7f:5a:ef:59:56:0f:fb:11:3a:
dc:ce:0c:05:ba:c6:5e:b2:ff:d2:83:4e:f8:41:e8:
ce:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:B1:87:99:0A:0F:1D:A7:08:0F:6C:7C:65:57:FC:84:F1:3D:80
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:31:80:4b:7a:cd:fc:97:29:e1:49:df:26:5b:1f:2f:e9:e7:
40:ba:63:35:e5:df:e0:27:d0:66:67:2b:b2:9f:76:6e:4a:c4:
bc:48:9f:80:6b:d3:be:7d:4a:0e:4c:8d:42:ef:8f:b9:30:5b:
1e:83:7f:a0:13:e1:63:ab:e6:ca:5c:2e:74:05:f9:93:5e:4d:
7e:dd:47:8b:2f:e7:b1:c2:dd:74:b7:70:fd:9a:9e:8b:63:8c:
35:d9:dd:34:8f:91:ca:1f:26:7b:39:e1:15:6e:ef:87:ec:b5:
90:5a:4f:ed:f2:ad:09:d4:de:3c:f7:60:ce:9b:0b:f2:61:64:
22:2d:32:b9:96:17:96:b6:f0:86:89:cb:87:60:d9:32:21:3c:
47:64:ca:d3:3c:9b:1f:e7:76:94:25:56:40:0d:e1:29:67:02:
0f:01:68:2e:23:0f:fd:a1:ff:7b:b2:af:9e:e9:43:74:50:97:
1c:a9:d6:23:9b:18:48:48:8f:1b:f4:86:31:33:1c:b7:c8:4e:
65:8d:33:d9:94:c5:23:19:30:91:aa:ad:14:e9:a2:4c:30:7e:
2c:87:af:c4:77:ee:51:28:6b:25:a1:72:6e:2a:e0:2a:83:4e:
28:8e:d7:4f:4b:47:50:1d:fc:7c:91:01:e3:26:18:3b:30:79:
a3:ae:55:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcFTgMKG7GP4xcWacon6gyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzhkZjNkYTMzOTM4YmYxYjI0NWYxYzQ0NzlmZDI0ZGQ5
Zjk0ZjAwHhcNMjUwNDIyMDYwMDE2WhcNMjUwNDIzMDYwMDE2WjAzMTEwLwYDVQQD
EygxMzI2YjE4Nzk5MGEwZjFkYTcwODBmNmM3YzY1NTdmYzg0ZjEzZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucUap2WLtONmi5zNXsnWDg2QFD8a
HzTkldMK5gkPuYDkkPaYh1pXK4ubzDGmoCrekL2jh/Ggt0CTeSdwNJgc9rRmKrHz
ke/Bnd4RrrC4SNyz2FRpKYbLb4xzDWWaN8h5gQ2IfRts344y4roRE+sdiVA0g+gM
Ow4sWBIHCSM4fcCioHgwkwMIJrDZkEfuIgdjfpuVal4aDKs9h3v5Tec/nj7nwrdg
jC1yCHPbWErbvFkTVsW0x8PwEJw58CHKHhlsZAigx/47SXwUM+fR5iQEiiOdWNUh
rv0LiTsGqml0GJwJbeySDdV/Wu9ZVg/7ETrczgwFusZesv/Sg074QejOtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMmsYeZCg8dpwgPbHxlV/yE8T2AMB8GA1UdIwQY
MBaAFLfI3z2jOTi/GyRfHER5/STdn5TwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ZGQxOTgtOTNjYi00NTljLWJlZTIt
MmQxZGFhMjk5ZTgzLzEvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ZGQxOTgtOTNjYi00NTljLWJlZTItMmQxZGFhMjk5ZTgz
LzEvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDGAS3rN
/Jcp4UnfJlsfL+nnQLpjNeXf4CfQZmcrsp92bkrEvEifgGvTvn1KDkyNQu+PuTBb
HoN/oBPhY6vmylwudAX5k15Nft1Hiy/nscLddLdw/Zqei2OMNdndNI+Ryh8meznh
FW7vh+y1kFpP7fKtCdTePPdgzpsL8mFkIi0yuZYXlrbwhonLh2DZMiE8R2TK0zyb
H+d2lCVWQA3hKWcCDwFoLiMP/aH/e7KvnulDdFCXHKnWI5sYSEiPG/SGMTMct8hO
ZY0z2ZTFIxkwkaqtFOmiTDB+LIevxHfuUShrJaFybirgKoNOKI7XT0tHUB38fJEB
4yYYOzB5o65Vdg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:40 2025 by rpki-client