Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: ygOZituJ2zFktoWv+qTzz0bK2IQBKKwh1C4NgfhAVv8=
Subject key identifier: C6:88:06:EE:0F:90:DC:7F:47:31:E4:97:08:B2:07:10:7C:18:69:93
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 0196542524EB62B17C6C437FCF9760B25B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 17:00:42 +0000
Manifest this update: Sun 20 Apr 2025 17:00:42 +0000
Manifest next update: Mon 21 Apr 2025 17:00:42 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: rQAz5AJNvLsKVO1LcIZgFqTY1JEqHs84sMZYYix54lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:24:eb:62:b1:7c:6c:43:7f:cf:97:60:b2:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Apr 20 17:00:42 2025 GMT
Not After : Apr 21 17:00:42 2025 GMT
Subject: CN=c68806ee0f90dc7f4731e49708b207107c186993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:0a:46:32:84:03:a4:cc:1f:be:d9:82:cb:
c2:23:79:6f:61:7f:6f:e9:ab:4e:29:f4:b3:2c:3c:
85:9b:a2:75:41:01:22:3c:59:94:9f:6a:1c:e2:81:
0d:94:8a:b5:cf:82:c5:43:3c:cf:0e:06:9f:77:47:
14:09:cb:ad:10:c9:74:e0:98:26:b0:ee:03:73:5e:
bf:96:6a:44:d2:a9:56:c1:5f:b3:09:a3:f7:1e:24:
01:e7:92:b1:1c:17:53:53:a8:09:ca:ea:96:70:24:
49:39:16:3b:91:48:09:76:e1:02:67:1d:9c:20:9d:
b8:e1:4d:68:16:7f:66:b1:ee:71:aa:25:56:a8:51:
45:40:32:0f:f1:18:e8:01:29:af:42:7b:62:7b:07:
2b:7a:9e:fa:a4:0b:30:99:81:db:8a:0c:77:18:37:
4c:e3:15:94:de:1f:09:96:7e:df:5c:a8:14:af:c0:
e1:1b:85:d5:67:3f:e6:3b:de:ad:4e:16:26:62:b7:
38:4f:fd:36:ea:73:fb:9d:8c:a0:13:6e:26:06:c8:
f5:d0:92:e8:31:27:87:e3:1f:18:06:12:2b:43:80:
7a:af:88:ed:c0:03:d8:bd:1e:19:3e:92:c3:19:37:
ac:9b:d7:6c:77:3e:54:cc:82:09:6b:67:16:90:5d:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:06:EE:0F:90:DC:7F:47:31:E4:97:08:B2:07:10:7C:18:69:93
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2a:06:1c:62:a7:be:91:60:f4:c5:5d:28:ae:71:c4:36:7a:
0a:65:41:de:a8:60:35:32:5e:4f:ff:77:63:11:ad:90:3d:62:
af:09:76:60:a2:ec:9d:15:cf:59:eb:e3:55:0e:52:36:ea:76:
8e:a4:04:d0:39:8b:32:35:e4:6c:d2:74:c6:4a:80:10:6a:bd:
3c:c3:30:c1:8b:1a:d4:fd:bb:af:97:4f:4d:c5:a5:26:c2:f8:
2b:de:25:eb:0f:ee:8c:11:e9:8e:59:73:07:2c:66:c4:d6:7f:
d0:41:9e:f8:c5:cc:2c:a7:0f:fe:c1:0e:1f:aa:74:5c:ba:fb:
83:16:30:a0:1b:4e:38:b2:bf:bd:fd:f7:87:d5:82:19:a8:c9:
ed:ec:19:8d:2e:a8:35:c4:f1:2d:2b:45:b0:c4:7f:e3:1e:b5:
59:22:42:78:dc:b0:ac:07:6e:e0:78:81:96:b5:a2:e3:61:6f:
88:42:87:bb:af:1c:76:53:23:72:f8:e9:9c:1c:7f:3d:7c:6e:
27:2a:9a:73:10:b9:d4:18:13:e2:66:d9:23:3b:90:71:bc:27:
4c:c9:1b:9d:e9:07:ff:55:74:e6:33:08:44:82:f2:c2:0d:e7:
98:de:34:db:1b:0c:30:15:2f:77:f7:9a:55:b1:06:0b:59:12:
68:d4:b1:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJSTrYrF8bEN/z5dgsltmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx
ZGUxMWMwHhcNMjUwNDIwMTcwMDQyWhcNMjUwNDIxMTcwMDQyWjAzMTEwLwYDVQQD
EyhjNjg4MDZlZTBmOTBkYzdmNDczMWU0OTcwOGIyMDcxMDdjMTg2OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwKRjKEA6TMH77ZgsvCI3lvYX9v
6atOKfSzLDyFm6J1QQEiPFmUn2oc4oENlIq1z4LFQzzPDgafd0cUCcutEMl04Jgm
sO4Dc16/lmpE0qlWwV+zCaP3HiQB55KxHBdTU6gJyuqWcCRJORY7kUgJduECZx2c
IJ244U1oFn9mse5xqiVWqFFFQDIP8RjoASmvQntiewcrep76pAswmYHbigx3GDdM
4xWU3h8Jln7fXKgUr8DhG4XVZz/mO96tThYmYrc4T/026nP7nYygE24mBsj10JLo
MSeH4x8YBhIrQ4B6r4jtwAPYvR4ZPpLDGTesm9dsdz5UzIIJa2cWkF026QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaIBu4PkNx/RzHklwiyBxB8GGmTMB8GA1UdIwQY
MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et
ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm
LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSoGHGKn
vpFg9MVdKK5xxDZ6CmVB3qhgNTJeT/93YxGtkD1irwl2YKLsnRXPWevjVQ5SNup2
jqQE0DmLMjXkbNJ0xkqAEGq9PMMwwYsa1P27r5dPTcWlJsL4K94l6w/ujBHpjllz
ByxmxNZ/0EGe+MXMLKcP/sEOH6p0XLr7gxYwoBtOOLK/vf33h9WCGajJ7ewZjS6o
NcTxLStFsMR/4x61WSJCeNywrAdu4HiBlrWi42FviEKHu68cdlMjcvjpnBx/PXxu
JyqacxC51BgT4mbZIzuQcbwnTMkbnekH/1V05jMIRILywg3nmN402xsMMBUvd/ea
VbEGC1kSaNSxPw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:20:05 2025 by rpki-client