Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: oTZ3QQWTI0NXgOzpYFeqnwxVEFAYeui2BCoE7oO5hAU=
Subject key identifier: 47:EE:4F:82:4B:E0:0A:17:FF:7D:C4:C2:1D:07:4F:2A:36:75:93:CD
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 01964F6CEE4782BEAFBFD224D37FF8B0E8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 148E
Signing time: Sat 19 Apr 2025 19:01:01 +0000
Manifest this update: Sat 19 Apr 2025 19:01:01 +0000
Manifest next update: Sun 20 Apr 2025 19:01:01 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: EAhiH0WMKTKeZUyHHRVQaYGujA9TNt6JcRYgqlc3+gc=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:ee:47:82:be:af:bf:d2:24:d3:7f:f8:b0:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Apr 19 19:01:01 2025 GMT
Not After : Apr 20 19:01:01 2025 GMT
Subject: CN=47ee4f824be00a17ff7dc4c21d074f2a367593cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:7d:2f:99:11:9c:4c:c9:9d:63:b7:8f:cc:
d6:75:31:e2:12:e1:b6:65:27:64:ff:ee:3e:0c:d2:
a5:aa:bf:3d:c8:09:ed:81:09:c7:41:1b:6b:7a:ff:
54:29:c1:db:41:97:65:d3:57:69:1e:44:41:e2:79:
2c:f4:03:b3:2f:34:6d:ab:f9:57:ff:01:bc:38:8b:
4a:0b:53:ed:7e:4f:62:8c:0f:3c:89:6d:61:80:1e:
87:d7:d3:f6:c6:06:68:22:b5:26:ee:8c:9d:fe:98:
9d:7d:5a:d4:c4:f1:b6:d9:58:33:5a:2e:1a:ff:52:
ee:fe:2b:ff:b1:65:e5:ce:76:39:17:db:0b:2c:ee:
80:8d:c1:ee:2d:86:33:bb:dd:2b:f4:9d:df:63:a0:
f5:57:1b:4a:e9:0f:ca:ae:ef:54:b2:45:f9:a0:4e:
e5:b8:96:3c:b3:af:61:d7:5e:db:f3:e0:78:0d:4e:
de:30:ea:de:38:7b:f3:70:60:b5:c4:06:1a:cd:ff:
da:6a:ab:ce:fe:7f:19:d3:0b:95:1a:62:d5:cf:bd:
2c:de:4a:ca:4a:bc:68:03:03:72:a8:5f:b2:fb:d5:
62:6d:22:09:05:9a:44:22:1b:db:2a:ff:25:0b:d8:
e2:af:95:36:92:fe:21:93:e5:28:f6:e0:e5:17:89:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:4F:82:4B:E0:0A:17:FF:7D:C4:C2:1D:07:4F:2A:36:75:93:CD
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:71:d4:98:56:88:16:c7:db:cd:8c:70:79:45:8d:43:ce:54:
0c:aa:6c:06:08:06:94:98:33:7b:ca:01:e7:75:0e:a4:74:e7:
fc:fb:3b:48:c9:7d:22:a7:61:2b:5e:68:1d:38:b2:ba:95:98:
35:69:d7:c2:a5:2b:d4:6e:81:0c:bb:5b:aa:1d:b5:f0:f4:53:
40:b8:10:3b:f5:61:f2:d2:7c:3b:6e:bb:de:a7:0c:8c:93:97:
f8:5e:c3:09:22:da:76:8b:0b:05:b0:b9:56:ca:e1:4b:86:ae:
53:42:9d:81:0b:c1:82:96:14:b7:ed:51:ed:2b:76:6e:45:a8:
f1:42:b8:46:5b:8b:df:5f:29:16:2d:8d:91:0c:e5:98:16:87:
07:c5:38:fd:ef:05:fe:11:76:95:7a:4f:58:23:03:05:1c:57:
c6:52:6c:ca:98:56:25:6b:df:d0:5b:01:aa:fa:a9:11:ff:c7:
9a:c8:a5:37:5f:b1:b8:b1:07:9d:61:0f:0c:15:36:02:4c:38:
b8:d9:5a:99:ec:9e:20:7d:be:d8:c9:32:6c:8f:92:16:d1:bc:
b2:20:4f:e2:9e:fe:3e:6b:64:11:9f:de:79:20:b4:c4:29:0b:
63:52:b7:47:d0:fb:6a:d8:3b:80:65:b4:38:c6:04:e2:d8:a7:
a3:d3:a5:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbO5Hgr6vv9Ik03/4sOjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh
ZDQ4MzgwHhcNMjUwNDE5MTkwMTAxWhcNMjUwNDIwMTkwMTAxWjAzMTEwLwYDVQQD
Eyg0N2VlNGY4MjRiZTAwYTE3ZmY3ZGM0YzIxZDA3NGYyYTM2NzU5M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitN9L5kRnEzJnWO3j8zWdTHiEuG2
ZSdk/+4+DNKlqr89yAntgQnHQRtrev9UKcHbQZdl01dpHkRB4nks9AOzLzRtq/lX
/wG8OItKC1Ptfk9ijA88iW1hgB6H19P2xgZoIrUm7oyd/pidfVrUxPG22VgzWi4a
/1Lu/iv/sWXlznY5F9sLLO6AjcHuLYYzu90r9J3fY6D1VxtK6Q/Kru9UskX5oE7l
uJY8s69h117b8+B4DU7eMOreOHvzcGC1xAYazf/aaqvO/n8Z0wuVGmLVz70s3krK
SrxoAwNyqF+y+9VibSIJBZpEIhvbKv8lC9jir5U2kv4hk+Uo9uDlF4kXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfuT4JL4AoX/33Ewh0HTyo2dZPNMB8GA1UdIwQY
MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt
YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk
LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXHUmFaI
FsfbzYxweUWNQ85UDKpsBggGlJgze8oB53UOpHTn/Ps7SMl9IqdhK15oHTiyupWY
NWnXwqUr1G6BDLtbqh218PRTQLgQO/Vh8tJ8O2673qcMjJOX+F7DCSLadosLBbC5
VsrhS4auU0KdgQvBgpYUt+1R7St2bkWo8UK4RluL318pFi2NkQzlmBaHB8U4/e8F
/hF2lXpPWCMDBRxXxlJsyphWJWvf0FsBqvqpEf/HmsilN1+xuLEHnWEPDBU2Akw4
uNlameyeIH2+2MkybI+SFtG8siBP4p7+PmtkEZ/eeSC0xCkLY1K3R9D7atg7gGW0
OMYE4tino9OlwA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:55 2025 by rpki-client