Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: Xr1FG2MVd0uZiSJzVhMyXGpe6GJGuYkIXHDKP7H4Lnw=
Subject key identifier: 37:7E:09:61:A6:E0:D9:3E:57:A9:42:43:73:3B:AC:49:83:7D:7A:A1
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 01965838B1988660D51028BA4E9FB88FA604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 12:00:32 +0000
Manifest this update: Mon 21 Apr 2025 12:00:32 +0000
Manifest next update: Tue 22 Apr 2025 12:00:32 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: xGmDSr5KiGQn2tNEy4CAw3Isjum6FbiB8E/HU8ommxE=)
2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:b1:98:86:60:d5:10:28:ba:4e:9f:b8:8f:a6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Apr 21 12:00:32 2025 GMT
Not After : Apr 22 12:00:32 2025 GMT
Subject: CN=377e0961a6e0d93e57a94243733bac49837d7aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:8c:ae:05:95:47:bf:71:f7:78:ac:3b:6e:
1f:12:95:b6:14:c3:45:5c:aa:91:b3:f8:86:76:22:
6f:c0:35:6f:b1:24:37:38:02:32:bb:fa:44:6e:45:
7f:be:5e:85:c3:d6:99:f1:8a:ac:8d:a4:fc:9d:d3:
68:86:05:ce:ed:d6:d3:7f:b6:eb:4a:1a:0a:32:a8:
60:2f:71:bc:86:b8:d2:69:92:7b:65:f0:ba:68:68:
40:12:8c:57:75:a7:88:0c:74:9c:de:89:c2:77:43:
73:5d:56:f0:cb:0e:c4:c0:64:79:7c:91:8f:25:46:
83:0f:b2:0f:c4:01:93:7a:9f:a6:0e:51:d2:ad:65:
f1:94:ec:6d:65:de:69:96:9e:41:03:fb:20:6e:50:
61:ee:f3:5b:21:f1:ab:0b:1e:e8:83:ad:d9:bb:cf:
2c:e8:26:98:b0:db:38:ce:25:3d:35:08:61:9c:63:
ea:31:ad:95:79:91:8e:b5:8d:f7:5c:53:66:70:d0:
22:87:6c:a2:34:a3:69:2c:2c:28:66:99:c3:1b:a8:
64:6b:ee:8d:30:3c:3b:16:6f:61:18:17:d1:90:25:
8a:38:b4:39:e0:d5:e0:16:15:bf:7b:39:87:bf:ca:
ad:c9:38:ae:79:1a:21:62:05:5d:62:a2:26:0c:89:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:09:61:A6:E0:D9:3E:57:A9:42:43:73:3B:AC:49:83:7D:7A:A1
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b1:b5:7a:53:b1:8a:da:7f:e9:75:42:cf:bb:96:3d:72:06:
10:4b:0c:0d:ef:4e:d6:4d:7c:6c:93:28:ec:86:b6:ef:db:b2:
93:ef:ae:b6:bd:a4:19:97:de:f2:7e:6e:56:6e:6d:ce:1a:4e:
48:1b:27:af:11:eb:60:3a:1b:00:c7:c9:00:e4:36:7f:88:66:
1b:e3:1a:b6:bd:95:e7:41:f9:14:7b:4d:0c:2f:bf:68:53:04:
0f:6b:d9:4d:43:83:31:ca:22:91:c6:93:9d:5d:d1:fb:3a:71:
44:92:e6:bc:65:f6:c7:4a:da:22:fa:f4:1c:86:63:7a:4e:3d:
98:c6:e0:89:e3:70:03:09:28:94:a2:b3:57:5d:b8:0f:a0:ee:
fa:45:03:52:cc:1a:62:a6:37:6f:c6:de:6e:4f:5a:1a:65:27:
17:b7:67:6b:6f:95:27:c5:ad:5a:34:17:f1:b6:42:9e:48:59:
63:77:5f:f4:46:0e:0c:38:55:e6:7c:c4:f1:95:e8:a0:49:6f:
de:de:9e:7f:61:11:3f:43:cd:db:c0:96:f2:1f:8c:47:ff:db:
15:10:ef:a8:21:88:93:6f:8a:0d:9f:23:8d:70:a8:3b:d6:ae:
93:14:9a:18:be:7a:65:93:aa:09:ba:c1:0a:f0:f4:26:d5:4d:
6e:7a:9d:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOLGYhmDVECi6Tp+4j6YEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQzOTdlMzAyMWJlZmYzYjVmZDMwZGFhYWI2MjUxNGNm
YTE2NmIwHhcNMjUwNDIxMTIwMDMyWhcNMjUwNDIyMTIwMDMyWjAzMTEwLwYDVQQD
EygzNzdlMDk2MWE2ZTBkOTNlNTdhOTQyNDM3MzNiYWM0OTgzN2Q3YWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs6MrgWVR79x93isO24fEpW2FMNF
XKqRs/iGdiJvwDVvsSQ3OAIyu/pEbkV/vl6Fw9aZ8YqsjaT8ndNohgXO7dbTf7br
ShoKMqhgL3G8hrjSaZJ7ZfC6aGhAEoxXdaeIDHSc3onCd0NzXVbwyw7EwGR5fJGP
JUaDD7IPxAGTep+mDlHSrWXxlOxtZd5plp5BA/sgblBh7vNbIfGrCx7og63Zu88s
6CaYsNs4ziU9NQhhnGPqMa2VeZGOtY33XFNmcNAih2yiNKNpLCwoZpnDG6hka+6N
MDw7Fm9hGBfRkCWKOLQ54NXgFhW/ezmHv8qtyTiueRohYgVdYqImDIl9zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDd+CWGm4Nk+V6lCQ3M7rEmDfXqhMB8GA1UdIwQY
MBaAFE8UOX4wIb7/O1/TDaqrYlFM+hZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAt
YTJmNzI4YmRjMjc1LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAtYTJmNzI4YmRjMjc1
LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLG1elOx
itp/6XVCz7uWPXIGEEsMDe9O1k18bJMo7Ia279uyk++utr2kGZfe8n5uVm5tzhpO
SBsnrxHrYDobAMfJAOQ2f4hmG+Matr2V50H5FHtNDC+/aFMED2vZTUODMcoikcaT
nV3R+zpxRJLmvGX2x0raIvr0HIZjek49mMbgieNwAwkolKKzV124D6Du+kUDUswa
YqY3b8bebk9aGmUnF7dna2+VJ8WtWjQX8bZCnkhZY3df9EYODDhV5nzE8ZXooElv
3t6ef2ERP0PN28CW8h+MR//bFRDvqCGIk2+KDZ8jjXCoO9aukxSaGL56ZZOqCbrB
CvD0JtVNbnqdUA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:54 2025 by rpki-client