Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: GuQVG9mdoEPn9kcSFSyvtld4C3Yu9EGp1vxdXB5JwJI=
Subject key identifier: 08:25:FD:95:D4:B9:08:D6:98:AE:BF:82:2F:A6:61:F6:08:D2:F2:3F
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 0196138FFD8B1B2BC079C92462571CA96668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 10BB
Signing time: Tue 08 Apr 2025 04:02:05 +0000
Manifest this update: Tue 08 Apr 2025 04:02:05 +0000
Manifest next update: Wed 09 Apr 2025 04:02:05 +0000
Files and hashes: 1: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (hash: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: IrAQZK72Er7fg5Lx9D0fTS5LrlXdhIo3PJYspgviqCo=)
3: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (hash: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:fd:8b:1b:2b:c0:79:c9:24:62:57:1c:a9:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Apr 8 04:02:05 2025 GMT
Not After : Apr 9 04:02:05 2025 GMT
Subject: CN=0825fd95d4b908d698aebf822fa661f608d2f23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:24:00:ff:72:d3:ad:ac:c4:73:c0:f5:09:
fa:95:03:5a:1c:88:20:7e:40:ba:97:59:e9:e3:c3:
c4:2a:35:d6:1c:e4:92:05:ce:e4:87:3d:50:63:97:
ac:ad:e9:be:c8:73:d8:26:66:d0:0f:c3:49:84:57:
ba:78:86:04:81:48:07:72:09:3c:05:6b:bd:f0:3e:
ed:aa:84:f8:f2:19:9d:bc:da:52:bb:61:6c:38:ef:
d8:be:db:31:d5:4d:18:51:dc:f2:eb:84:a1:04:ba:
ad:15:af:37:02:1d:43:c3:df:cb:11:3e:78:4a:00:
9d:44:25:f0:a5:3d:9c:c7:4e:1a:5e:ec:e9:2e:c6:
56:b9:be:f5:a3:bf:9e:e8:09:42:fd:51:13:08:7c:
de:92:af:4a:a1:63:bf:d4:69:25:0e:95:17:22:b8:
be:51:43:a2:35:e4:99:30:f8:e2:56:66:2d:2b:4f:
53:79:a0:ae:96:60:54:48:39:1e:dc:5d:b4:ea:66:
05:ff:35:9f:96:85:67:1a:76:85:93:86:ab:2c:7f:
e1:ff:ab:e7:4a:24:8a:58:d9:9d:3d:d5:9f:4e:57:
f6:b9:13:77:6d:48:cd:d7:e5:4a:f6:78:47:1a:4c:
19:58:46:a1:23:5e:8e:6e:2b:41:87:22:36:08:da:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:25:FD:95:D4:B9:08:D6:98:AE:BF:82:2F:A6:61:F6:08:D2:F2:3F
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8d:4e:76:fd:b9:2d:89:22:42:94:af:6d:0e:5c:80:65:8a:
a1:0c:e5:56:f6:5b:58:39:bb:93:cd:72:08:05:db:f1:1b:32:
0b:81:37:d2:4d:ea:1c:64:00:a4:d2:9a:bd:81:25:6b:78:f9:
07:3c:75:2c:c2:f9:7e:89:45:b1:db:ce:94:50:7e:34:59:14:
be:5f:17:b0:d2:2a:e7:9b:2d:a8:ac:02:26:9c:e2:e2:8a:f7:
df:4e:db:eb:31:f6:94:f5:c0:67:74:59:61:9c:9c:cd:eb:e9:
b0:71:91:90:1a:53:f0:be:09:39:c7:ec:10:f1:80:64:7e:83:
3b:5a:39:6e:2d:96:d4:79:2d:7c:4e:d9:6d:d2:27:74:30:a3:
49:60:ed:af:b4:2d:31:1f:08:b6:a6:c0:bf:1e:6b:d8:1b:b1:
e6:cc:4b:d3:79:90:07:a3:59:ac:5a:45:76:af:90:9e:79:15:
e0:a3:b9:82:68:b0:af:eb:00:19:be:78:fd:95:e1:62:1d:42:
27:79:39:1a:8e:25:cc:74:74:6d:25:f8:54:2f:6b:5f:44:07:
c0:f9:85:6e:20:0a:f8:b6:5a:e4:d7:1c:11:b2:77:60:45:d9:
bb:17:f6:2d:e5:08:40:36:35:c3:54:d1:20:78:fc:7d:c5:58:
53:af:d2:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTj/2LGyvAeckkYlccqWZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjliNDAyYjY3ZDc1OTM2ZjQ1ZGM4YmM1NGI4NjgxNGUw
NjM2YmEwHhcNMjUwNDA4MDQwMjA1WhcNMjUwNDA5MDQwMjA1WjAzMTEwLwYDVQQD
EygwODI1ZmQ5NWQ0YjkwOGQ2OThhZWJmODIyZmE2NjFmNjA4ZDJmMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QYkAP9y062sxHPA9Qn6lQNaHIgg
fkC6l1np48PEKjXWHOSSBc7khz1QY5esrem+yHPYJmbQD8NJhFe6eIYEgUgHcgk8
BWu98D7tqoT48hmdvNpSu2FsOO/Yvtsx1U0YUdzy64ShBLqtFa83Ah1Dw9/LET54
SgCdRCXwpT2cx04aXuzpLsZWub71o7+e6AlC/VETCHzekq9KoWO/1GklDpUXIri+
UUOiNeSZMPjiVmYtK09TeaCulmBUSDke3F206mYF/zWfloVnGnaFk4arLH/h/6vn
SiSKWNmdPdWfTlf2uRN3bUjN1+VK9nhHGkwZWEahI16ObitBhyI2CNpIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgl/ZXUuQjWmK6/gi+mYfYI0vI/MB8GA1UdIwQY
MBaAFE5ptAK2fXWTb0Xci8VLhoFOBja6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQt
MTZiNDE5NmZhMjk0LzEvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQtMTZiNDE5NmZhMjk0
LzEvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK41Odv25
LYkiQpSvbQ5cgGWKoQzlVvZbWDm7k81yCAXb8RsyC4E30k3qHGQApNKavYEla3j5
Bzx1LML5folFsdvOlFB+NFkUvl8XsNIq55stqKwCJpzi4or3307b6zH2lPXAZ3RZ
YZyczevpsHGRkBpT8L4JOcfsEPGAZH6DO1o5bi2W1HktfE7ZbdIndDCjSWDtr7Qt
MR8ItqbAvx5r2Bux5sxL03mQB6NZrFpFdq+QnnkV4KO5gmiwr+sAGb54/ZXhYh1C
J3k5Go4lzHR0bSX4VC9rX0QHwPmFbiAK+LZa5NccEbJ3YEXZuxf2LeUIQDY1w1TR
IHj8fcVYU6/SFA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:11:03 2025 by rpki-client