Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: IopFMsq5p+PgnpPyv/scizKN8WChbqDx0MEAfV9yW6Y=
Subject key identifier: 5D:E8:D9:A4:A5:A1:11:84:20:10:9F:36:97:44:86:39:CC:C9:D8:43
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019653B7AB0EBF8AC8AE503511AE857EB863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 01A8
Signing time: Sun 20 Apr 2025 15:01:07 +0000
Manifest this update: Sun 20 Apr 2025 15:01:07 +0000
Manifest next update: Mon 21 Apr 2025 15:01:07 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: h/iXSnjhLmiADI9HcLnG30QSmtBTRGLxUaVAQPtoYWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:ab:0e:bf:8a:c8:ae:50:35:11:ae:85:7e:b8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Apr 20 15:01:07 2025 GMT
Not After : Apr 21 15:01:07 2025 GMT
Subject: CN=5de8d9a4a5a1118420109f3697448639ccc9d843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:71:10:58:40:61:ec:2d:b1:be:ce:46:90:
0f:74:b9:ec:26:97:d4:40:8e:bd:36:08:3a:f9:84:
1b:6a:a9:28:3d:c4:c2:29:48:61:db:58:85:34:be:
b7:06:97:15:e5:5f:80:20:0a:1d:1c:8f:a5:fa:15:
16:3b:ea:dc:44:18:b2:98:13:83:54:66:35:ba:65:
47:84:8a:31:68:64:8d:a8:df:65:07:b5:84:de:5f:
86:09:a5:97:71:fa:1b:e3:b5:69:b5:b8:41:0f:f7:
20:ff:2f:af:f6:ad:57:a4:37:d1:1b:3c:35:2a:aa:
ee:1b:36:b5:34:45:49:96:8d:f8:00:51:0f:c8:e3:
24:84:ca:95:ac:f1:3c:87:5f:52:2e:63:17:01:b3:
33:b6:d8:da:dc:9f:5b:ca:b7:d1:17:a5:a3:c4:c3:
d1:c0:33:67:ee:c8:e7:9c:50:19:18:e2:46:e6:4a:
bf:51:84:3a:43:48:86:ef:45:ca:97:d5:b0:55:11:
49:63:ff:c1:5a:0c:a6:16:d9:d0:6f:84:99:61:82:
4d:98:f2:70:39:cb:7e:47:b1:55:aa:06:44:fb:96:
bd:f7:11:82:79:41:e9:d4:4e:20:dd:34:23:a7:ca:
d8:6e:d3:bb:a7:2d:9d:f9:a2:35:5a:9f:e0:e8:c1:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:D9:A4:A5:A1:11:84:20:10:9F:36:97:44:86:39:CC:C9:D8:43
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:c9:21:e5:8f:ce:3b:b4:67:9a:3f:d9:38:b3:09:99:05:
c5:ac:b1:1b:88:81:c8:8a:f9:b4:36:f2:da:b4:2d:25:b1:fa:
2f:da:8d:59:c0:b8:cb:e6:90:a7:ff:bb:9c:6a:15:bb:ed:c7:
28:41:75:2d:0d:a9:87:0f:4b:7a:41:d3:eb:ea:bf:d9:bc:5f:
9e:41:ea:26:b9:5b:de:15:54:d9:25:3e:3b:8e:d7:04:4d:19:
f4:11:96:c5:e1:32:f3:c4:e4:c9:35:39:f9:4a:ea:be:d8:e7:
45:3d:b2:37:ec:1f:4e:6b:50:f0:c5:ce:13:0e:44:e5:f2:54:
06:dd:d8:ec:3a:85:7f:47:c7:a8:7e:ea:4f:34:c2:3d:50:0b:
66:2b:64:99:e2:ec:b1:4d:60:14:c5:0d:56:c1:03:13:9f:18:
db:e3:ad:1f:9f:b8:02:d8:48:55:3a:39:fb:48:9d:4e:ff:1f:
f6:7d:77:46:38:54:8d:f7:d3:81:35:0d:6a:76:d4:dc:05:10:
db:9b:26:f6:7d:c5:12:03:95:b3:14:5d:94:c9:6a:bd:f3:79:
39:b8:33:1e:43:33:56:8b:85:c7:26:1b:2d:d3:ea:e8:c7:f3:
e1:ea:31:ed:ce:26:e2:cb:c1:78:c9:d6:ab:37:e3:00:6d:1c:
09:e4:d3:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt6sOv4rIrlA1Ea6FfrhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDIwN2ZjNWFkMDc3M2MzZDhlOTNlNGIzMDYxOWMxM2Jh
ODFjYjQwHhcNMjUwNDIwMTUwMTA3WhcNMjUwNDIxMTUwMTA3WjAzMTEwLwYDVQQD
Eyg1ZGU4ZDlhNGE1YTExMTg0MjAxMDlmMzY5NzQ0ODYzOWNjYzlkODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY1xEFhAYewtsb7ORpAPdLnsJpfU
QI69Ngg6+YQbaqkoPcTCKUhh21iFNL63BpcV5V+AIAodHI+l+hUWO+rcRBiymBOD
VGY1umVHhIoxaGSNqN9lB7WE3l+GCaWXcfob47VptbhBD/cg/y+v9q1XpDfRGzw1
KqruGza1NEVJlo34AFEPyOMkhMqVrPE8h19SLmMXAbMzttja3J9byrfRF6WjxMPR
wDNn7sjnnFAZGOJG5kq/UYQ6Q0iG70XKl9WwVRFJY//BWgymFtnQb4SZYYJNmPJw
Oct+R7FVqgZE+5a99xGCeUHp1E4g3TQjp8rYbtO7py2d+aI1Wp/g6MEU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3o2aSloRGEIBCfNpdEhjnMydhDMB8GA1UdIwQY
MBaAFE/SB/xa0Hc8PY6T5LMGGcE7qBy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUt
NDdkZmRmMmIwZmQ2LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUtNDdkZmRmMmIwZmQ2
LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWHJIeWP
zju0Z5o/2TizCZkFxayxG4iByIr5tDby2rQtJbH6L9qNWcC4y+aQp/+7nGoVu+3H
KEF1LQ2phw9LekHT6+q/2bxfnkHqJrlb3hVU2SU+O47XBE0Z9BGWxeEy88TkyTU5
+UrqvtjnRT2yN+wfTmtQ8MXOEw5E5fJUBt3Y7DqFf0fHqH7qTzTCPVALZitkmeLs
sU1gFMUNVsEDE58Y2+OtH5+4AthIVTo5+0idTv8f9n13RjhUjffTgTUNanbU3AUQ
25sm9n3FEgOVsxRdlMlqvfN5ObgzHkMzVouFxyYbLdPq6Mfz4eox7c4m4svBeMnW
qzfjAG0cCeTT5w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:24 2025 by rpki-client