Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: rTxgn3RHxzyIhEfiokK68ApKWPkDOFlFVv+Dwqi0fg8=
Subject key identifier: 2D:2B:D0:91:A8:61:5C:78:02:E1:CD:0A:1F:1A:67:65:CE:13:64:D9
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 01964933A044016381005F41CE14ACB903F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 14:00:42 +0000
Manifest this update: Fri 18 Apr 2025 14:00:42 +0000
Manifest next update: Sat 19 Apr 2025 14:00:42 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: 6xeZRh5W4N+o1GfHKrw/K3tnCJU7Nma63fpsg+ydupA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:a0:44:01:63:81:00:5f:41:ce:14:ac:b9:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Apr 18 14:00:42 2025 GMT
Not After : Apr 19 14:00:42 2025 GMT
Subject: CN=2d2bd091a8615c7802e1cd0a1f1a6765ce1364d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:fa:62:df:9c:57:93:78:85:d8:ed:af:ea:
48:89:37:2e:7e:26:dd:b0:91:dc:d0:36:29:63:c3:
df:8b:f2:28:4e:5f:a9:f8:74:dc:ef:2b:52:78:c2:
fd:6a:8e:d0:bf:f1:b6:4e:2c:0e:f7:77:21:74:59:
c9:78:4b:cb:6a:88:53:f4:57:83:75:79:48:b9:2f:
04:27:08:0b:5b:e8:55:93:ef:ff:98:f0:f8:a9:06:
34:51:48:d7:60:e6:43:49:df:c6:91:b1:f1:89:bb:
42:ce:e3:cb:ba:dc:a3:33:21:46:cb:7f:50:46:b2:
e1:3d:0b:f9:ef:c9:f6:8f:51:ec:47:be:2b:da:ef:
ff:90:fc:64:1b:da:13:81:a9:8a:53:3c:80:04:3d:
d3:81:3e:ee:13:78:1c:fc:12:af:25:02:8a:82:9b:
71:23:57:e6:1b:fe:13:fb:64:31:fa:eb:20:79:b3:
07:79:be:a6:bf:38:d5:36:29:f2:0d:7a:71:c0:eb:
8f:53:36:b3:8a:b2:29:d9:69:44:59:14:d2:92:b2:
69:89:2e:df:d1:40:f1:c2:aa:1b:07:6e:8d:5c:88:
a3:cf:7b:a9:59:e4:1a:c6:ef:74:a1:5a:71:9b:4a:
ea:94:6c:70:66:c6:15:c5:65:dd:38:aa:b8:cc:3e:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:D0:91:A8:61:5C:78:02:E1:CD:0A:1F:1A:67:65:CE:13:64:D9
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:0c:ad:d8:6c:c2:fd:a9:7d:06:a9:f0:53:26:77:bb:fb:
c3:96:92:9e:32:e5:64:7e:15:74:41:d6:7b:17:19:f4:17:78:
e2:4f:68:2f:e3:9c:cb:2a:4b:58:e8:39:1d:c7:bb:fa:ca:a0:
bb:2b:5b:1b:2c:ba:d6:1b:83:13:0d:40:36:65:83:56:a1:74:
6b:d7:e6:ca:a6:09:79:44:20:0b:54:0d:fa:3c:26:18:b9:48:
53:da:74:5a:a8:c3:4d:b3:95:1c:4b:3f:43:0f:8a:2f:3a:ab:
bd:ca:28:89:30:c7:66:e5:59:e2:55:80:ed:b2:80:95:af:cc:
1c:81:c8:db:97:b9:88:d2:21:12:81:a4:8a:b0:da:a4:3f:51:
ef:20:c7:5a:ec:d8:63:44:fb:06:6b:66:44:33:97:54:5f:77:
f4:b0:ea:c3:e9:ec:2f:f1:1b:01:9c:0c:3e:4e:f3:a1:9b:d1:
be:3c:d4:c3:fe:27:e6:1f:10:b2:03:bd:35:8b:fc:33:58:f8:
37:e9:7f:95:ea:e2:f3:bc:b4:b6:8c:ec:51:ca:66:c0:09:18:
8b:f9:71:e9:50:00:d4:81:0a:04:b4:04:b1:5a:b2:a1:80:82:
e5:fb:9c:d6:eb:4b:49:1f:8b:87:3d:8b:4c:12:15:00:f0:3c:
f6:9a:8f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJM6BEAWOBAF9BzhSsuQPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjUwNDE4MTQwMDQyWhcNMjUwNDE5MTQwMDQyWjAzMTEwLwYDVQQD
EygyZDJiZDA5MWE4NjE1Yzc4MDJlMWNkMGExZjFhNjc2NWNlMTM2NGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3j6Yt+cV5N4hdjtr+pIiTcufibd
sJHc0DYpY8Pfi/IoTl+p+HTc7ytSeML9ao7Qv/G2TiwO93chdFnJeEvLaohT9FeD
dXlIuS8EJwgLW+hVk+//mPD4qQY0UUjXYOZDSd/GkbHxibtCzuPLutyjMyFGy39Q
RrLhPQv578n2j1HsR74r2u//kPxkG9oTgamKUzyABD3TgT7uE3gc/BKvJQKKgptx
I1fmG/4T+2Qx+usgebMHeb6mvzjVNinyDXpxwOuPUzazirIp2WlEWRTSkrJpiS7f
0UDxwqobB26NXIijz3upWeQaxu90oVpxm0rqlGxwZsYVxWXdOKq4zD7OEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0r0JGoYVx4AuHNCh8aZ2XOE2TZMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKkMrdhs
wv2pfQap8FMmd7v7w5aSnjLlZH4VdEHWexcZ9Bd44k9oL+OcyypLWOg5Hce7+sqg
uytbGyy61huDEw1ANmWDVqF0a9fmyqYJeUQgC1QN+jwmGLlIU9p0WqjDTbOVHEs/
Qw+KLzqrvcooiTDHZuVZ4lWA7bKAla/MHIHI25e5iNIhEoGkirDapD9R7yDHWuzY
Y0T7BmtmRDOXVF939LDqw+nsL/EbAZwMPk7zoZvRvjzUw/4n5h8QsgO9NYv8M1j4
N+l/leri87y0tozsUcpmwAkYi/lx6VAA1IEKBLQEsVqyoYCC5fuc1utLSR+Lhz2L
TBIVAPA89pqPaw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:18 2025 by rpki-client