Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: EjSCRY6GGUVlq28o+BC3C0smfPn9xhI8NM7WJ+Z6G34=
Subject key identifier: 43:9A:15:67:9F:38:25:8E:BB:70:94:93:B7:23:C8:59:82:4D:80:BA
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 01965FF1EECFD7B2C9C529193568F9ABDEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 1504
Signing time: Wed 23 Apr 2025 00:00:12 +0000
Manifest this update: Wed 23 Apr 2025 00:00:12 +0000
Manifest next update: Thu 24 Apr 2025 00:00:12 +0000
Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=)
2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: xMyUcWePkWC+UOxqWcpbL8Zcq5qa4pGicWyDAdJKpDY=)
4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f1:ee:cf:d7:b2:c9:c5:29:19:35:68:f9:ab:de:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Apr 23 00:00:12 2025 GMT
Not After : Apr 24 00:00:12 2025 GMT
Subject: CN=439a15679f38258ebb709493b723c859824d80ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:bc:a7:a9:43:02:c3:bc:46:53:79:b5:4b:
cb:39:20:73:33:33:16:f0:c4:19:53:74:8a:06:8d:
9a:9f:6a:34:d4:d2:bd:33:7c:69:5b:82:7f:01:30:
22:20:1f:d8:7d:43:36:d9:56:1f:cb:35:2c:19:e7:
b3:cf:f2:b9:be:cf:bf:a0:3a:87:bd:fb:5f:f3:6b:
d9:16:51:98:46:6c:69:27:33:a9:c9:0d:35:ad:c5:
5c:60:ab:34:49:bc:ae:85:ff:07:e1:40:ef:28:50:
86:2a:62:bf:91:62:0e:50:06:50:2a:19:2f:5d:3b:
26:eb:23:e8:a0:a0:73:bb:09:ac:8c:9e:c1:16:6f:
de:e5:94:3c:41:39:73:b0:6f:64:c5:40:87:b1:13:
51:38:99:bd:37:77:91:b2:e2:e1:08:17:bd:72:cb:
63:d4:b3:68:13:7d:cc:25:05:8e:43:78:62:55:b8:
5b:31:f9:e0:9c:cf:00:e0:1f:db:d1:74:3c:f5:56:
3f:53:02:8c:8b:b5:23:03:40:d6:d8:cf:d7:db:1a:
f1:49:8d:24:ef:d8:9b:14:73:fa:b0:72:51:a0:dc:
fb:2e:4b:70:4b:0c:95:5b:22:52:c6:96:29:73:79:
99:b9:e2:da:4b:96:a6:c0:84:23:bf:81:49:c8:81:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:15:67:9F:38:25:8E:BB:70:94:93:B7:23:C8:59:82:4D:80:BA
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:28:39:06:5a:ae:b1:7f:ce:48:49:6a:25:ba:05:93:81:74:
dd:30:0c:6b:07:98:81:af:8e:73:1d:fa:5a:5b:e6:88:7e:9c:
7b:c1:22:36:e2:60:60:4d:5c:0f:3d:36:cc:ca:1b:f8:5e:2a:
ac:68:8f:a6:ad:bb:3a:aa:45:71:d2:a8:1f:83:44:e9:db:c6:
2c:74:b8:14:e2:c5:93:f5:80:a1:40:7e:be:07:7e:f6:2e:be:
c8:1e:a0:ea:69:80:4e:dd:0b:fe:11:25:cf:cf:30:ed:ea:18:
0b:1a:fb:57:27:59:16:42:20:c0:cb:89:e0:fb:41:94:dd:40:
b9:b7:b6:b2:27:10:d8:15:d5:32:85:b7:75:81:73:a7:52:a5:
f7:19:92:87:39:8a:4c:48:ca:8b:1e:36:6a:4b:2c:52:44:c1:
c2:a7:bf:48:e4:38:fd:46:5c:14:5a:ab:be:c5:d3:3c:a7:65:
49:f2:c0:0b:ff:2f:b3:fd:48:54:e0:0a:57:d1:0c:29:b8:9e:
87:22:ed:d7:ea:45:f1:96:db:a0:6a:ed:d3:d9:df:af:ac:4c:
56:b2:06:9a:74:5c:bf:0a:86:62:60:75:9d:20:88:28:93:ce:
9a:64:6f:44:3d:29:1f:b8:2b:2e:14:fb:ba:72:c2:46:c4:69:
a6:3a:7d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZf8e7P17LJxSkZNWj5q970MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh
MWVmMWIwHhcNMjUwNDIzMDAwMDEyWhcNMjUwNDI0MDAwMDEyWjAzMTEwLwYDVQQD
Eyg0MzlhMTU2NzlmMzgyNThlYmI3MDk0OTNiNzIzYzg1OTgyNGQ4MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3C8p6lDAsO8RlN5tUvLOSBzMzMW
8MQZU3SKBo2an2o01NK9M3xpW4J/ATAiIB/YfUM22VYfyzUsGeezz/K5vs+/oDqH
vftf82vZFlGYRmxpJzOpyQ01rcVcYKs0Sbyuhf8H4UDvKFCGKmK/kWIOUAZQKhkv
XTsm6yPooKBzuwmsjJ7BFm/e5ZQ8QTlzsG9kxUCHsRNROJm9N3eRsuLhCBe9cstj
1LNoE33MJQWOQ3hiVbhbMfngnM8A4B/b0XQ89VY/UwKMi7UjA0DW2M/X2xrxSY0k
79ibFHP6sHJRoNz7LktwSwyVWyJSxpYpc3mZueLaS5amwIQjv4FJyIGWaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOaFWefOCWOu3CUk7cjyFmCTYC6MB8GA1UdIwQY
MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt
NjIxOWIzMjEyMmQwLzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw
LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Sg5Blqu
sX/OSElqJboFk4F03TAMaweYga+Ocx36WlvmiH6ce8EiNuJgYE1cDz02zMob+F4q
rGiPpq27OqpFcdKoH4NE6dvGLHS4FOLFk/WAoUB+vgd+9i6+yB6g6mmATt0L/hEl
z88w7eoYCxr7VydZFkIgwMuJ4PtBlN1Aube2sicQ2BXVMoW3dYFzp1Kl9xmShzmK
TEjKix42akssUkTBwqe/SOQ4/UZcFFqrvsXTPKdlSfLAC/8vs/1IVOAKV9EMKbie
hyLt1+pF8ZbboGrt09nfr6xMVrIGmnRcvwqGYmB1nSCIKJPOmmRvRD0pH7grLhT7
unLCRsRppjp92A==
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:20:45 2025 by rpki-client