Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: qoI8aCw80gsy8gBtQ47RnZq+3PZumAuNb0AqVS3k2G0=
Subject key identifier: 43:AA:2F:02:C1:AC:44:E8:2C:F6:68:D0:98:C6:70:5B:B4:F7:FB:FE
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 0196447B889A50F5FB67AC803C20628D5F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 14FA
Signing time: Thu 17 Apr 2025 16:01:08 +0000
Manifest this update: Thu 17 Apr 2025 16:01:08 +0000
Manifest next update: Fri 18 Apr 2025 16:01:08 +0000
Files and hashes: 1: 9tr6yx1y8_YEiVByZ-MjQoIJAHM.roa (hash: jRgj+xVS51Pyi7Ww5Lf3Hkb3VrgrulAoFq5wFotKWJs=)
2: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: pBXaRt7Mk2Q+cj2B7hxuemDEPfJpM7iiLviyIDZVqIg=)
3: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
4: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:88:9a:50:f5:fb:67:ac:80:3c:20:62:8d:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Apr 17 16:01:08 2025 GMT
Not After : Apr 18 16:01:08 2025 GMT
Subject: CN=43aa2f02c1ac44e82cf668d098c6705bb4f7fbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:5a:56:a8:57:d0:4a:d2:bf:70:e6:38:ca:
83:9f:a3:90:e5:52:36:a0:39:3e:00:c4:c6:44:fd:
98:5c:b7:61:de:c4:ba:6d:60:85:c6:54:2f:32:ec:
84:b4:70:f2:fd:ee:14:49:10:73:74:0b:b9:12:b1:
30:04:f2:39:22:61:b0:af:0a:71:de:0f:cc:b4:a4:
e3:1b:32:93:f7:e5:2b:d7:25:60:23:8c:1e:2c:ee:
de:9e:7b:a5:55:31:7e:e8:9e:b8:e9:52:26:17:97:
59:ba:60:26:a8:93:2b:5f:f4:19:70:4b:bf:77:1a:
a6:f6:be:56:ea:0a:bb:e1:33:df:34:ba:a1:d7:5d:
a7:54:d0:cf:e3:af:74:0a:68:7c:18:35:25:59:82:
df:a6:0c:d2:be:a0:3a:e1:f2:e9:83:31:c2:42:c7:
ef:15:29:f7:46:52:19:43:99:ee:6a:8f:83:7b:81:
47:af:7a:60:0b:e3:60:31:3f:27:33:6d:6f:c6:b4:
22:d7:b7:bf:1d:cb:ed:60:98:f4:b7:e6:f0:91:cd:
b9:96:4b:1b:27:66:69:ab:5c:96:b6:2c:cb:99:cf:
8a:00:13:ee:23:b1:d0:eb:19:51:d0:3b:f8:a4:1d:
50:f5:4f:74:29:c0:f4:98:2b:1a:a6:41:0c:26:d6:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AA:2F:02:C1:AC:44:E8:2C:F6:68:D0:98:C6:70:5B:B4:F7:FB:FE
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2d:aa:ba:e0:fc:32:82:c7:7c:e8:ea:aa:2a:ee:fd:ce:ac:
54:dd:db:b5:e4:ee:3a:f2:17:6e:c4:8e:44:5a:77:6a:43:2f:
48:ca:9a:7a:67:b7:8c:3a:37:7e:86:c5:63:d2:48:d7:ab:b0:
2c:20:95:87:78:fc:ce:82:5d:ae:7f:3c:b7:a3:32:29:22:fb:
58:fe:87:39:fa:25:5b:9f:23:bc:0c:3e:3a:35:f1:2d:86:48:
95:93:1b:5d:d2:d3:e1:1c:bd:5d:4d:bb:1e:2b:4b:0b:bc:6c:
0f:f6:1d:7e:40:47:c4:82:9f:16:07:86:63:0c:22:a8:4a:6d:
17:26:ef:80:b3:c6:ca:37:f1:35:ae:e5:fa:07:2d:a9:79:3c:
c7:63:f4:36:a2:de:de:26:f6:b6:a9:68:97:98:10:ee:60:15:
5e:12:33:4d:5c:6a:5e:67:23:56:52:3a:b7:71:97:02:bd:14:
40:e1:ef:80:d8:6a:8c:38:73:e1:3c:64:ef:40:96:14:68:88:
1c:89:01:4b:85:25:17:5e:13:5b:96:9b:b5:10:37:41:50:4c:
a1:ab:3d:bf:4e:44:70:52:d0:b6:68:7b:63:71:ad:77:21:a4:
a5:29:ca:43:0b:08:3b:0e:e0:06:d9:80:f1:45:11:71:f5:51:
c2:0a:94:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEe4iaUPX7Z6yAPCBijV9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4
MGIxZTMwHhcNMjUwNDE3MTYwMTA4WhcNMjUwNDE4MTYwMTA4WjAzMTEwLwYDVQQD
Eyg0M2FhMmYwMmMxYWM0NGU4MmNmNjY4ZDA5OGM2NzA1YmI0ZjdmYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjhaVqhX0ErSv3DmOMqDn6OQ5VI2
oDk+AMTGRP2YXLdh3sS6bWCFxlQvMuyEtHDy/e4USRBzdAu5ErEwBPI5ImGwrwpx
3g/MtKTjGzKT9+Ur1yVgI4weLO7ennulVTF+6J646VImF5dZumAmqJMrX/QZcEu/
dxqm9r5W6gq74TPfNLqh112nVNDP4690Cmh8GDUlWYLfpgzSvqA64fLpgzHCQsfv
FSn3RlIZQ5nuao+De4FHr3pgC+NgMT8nM21vxrQi17e/HcvtYJj0t+bwkc25lksb
J2Zpq1yWtizLmc+KABPuI7HQ6xlR0Dv4pB1Q9U90KcD0mCsapkEMJtb00wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOqLwLBrEToLPZo0JjGcFu09/v+MB8GA1UdIwQY
MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct
ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj
LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmS2quuD8
MoLHfOjqqiru/c6sVN3bteTuOvIXbsSORFp3akMvSMqaeme3jDo3fobFY9JI16uw
LCCVh3j8zoJdrn88t6MyKSL7WP6HOfolW58jvAw+OjXxLYZIlZMbXdLT4Ry9XU27
HitLC7xsD/YdfkBHxIKfFgeGYwwiqEptFybvgLPGyjfxNa7l+gctqXk8x2P0NqLe
3ib2tqlol5gQ7mAVXhIzTVxqXmcjVlI6t3GXAr0UQOHvgNhqjDhz4Txk70CWFGiI
HIkBS4UlF14TW5abtRA3QVBMoas9v05EcFLQtmh7Y3GtdyGkpSnKQwsIOw7gBtmA
8UURcfVRwgqU8g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:35 2025 by rpki-client