Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: LblOMmT40UnQBcDnjS/peBV2lVSdyrBUollyGQhgsD4=
Subject key identifier: 7E:06:67:F9:8E:2C:4F:6A:25:7E:11:6A:24:69:06:29:80:D9:03:36
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 0196504889164B4D1100EBD2E901468C46AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 23:00:52 +0000
Manifest this update: Sat 19 Apr 2025 23:00:52 +0000
Manifest next update: Sun 20 Apr 2025 23:00:52 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: KSlCPPNQ9QsenfoPaNSWuw6G42WgHcZIGvwgXujDoR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:89:16:4b:4d:11:00:eb:d2:e9:01:46:8c:46:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Apr 19 23:00:52 2025 GMT
Not After : Apr 20 23:00:52 2025 GMT
Subject: CN=7e0667f98e2c4f6a257e116a2469062980d90336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:a9:18:54:ba:98:d9:aa:d8:68:b9:46:69:
7f:19:60:a4:04:4b:1a:12:0a:5e:03:f5:0a:a9:1f:
a2:76:1a:6a:48:ed:d2:8a:b6:e2:15:8b:f5:7e:35:
e3:94:a1:79:67:bc:0e:37:37:e4:be:33:f8:55:42:
a5:c9:5a:ad:1b:99:ab:e4:aa:35:56:53:2e:ca:13:
dc:80:fb:0a:0c:66:82:e0:6f:f1:37:15:1e:e1:42:
1b:3a:e1:16:af:ed:c7:87:87:e8:2b:79:08:9e:d6:
b0:fa:5f:75:5f:2b:00:a8:51:91:ae:d5:0a:4f:6d:
8c:26:7e:cf:52:d7:22:81:1c:cc:80:ce:ee:fa:5d:
39:b6:bf:3f:c6:c5:80:37:b3:d9:86:9d:4e:87:20:
78:91:4d:db:d7:d9:3d:a6:14:b2:07:75:22:d7:34:
df:2d:8a:cd:26:34:a7:34:90:7c:5a:26:93:71:a9:
87:5a:65:96:e3:f3:61:6e:d1:84:9a:c5:eb:b2:d0:
82:f9:46:b7:f3:28:04:04:02:4f:5c:f9:3a:5f:54:
9e:af:d4:8f:6c:29:45:55:e8:a7:1f:00:56:60:99:
7a:e0:ab:35:8a:c6:89:41:71:ec:2b:e4:05:94:cc:
e2:fe:e0:01:d5:42:dd:bb:6f:0e:2d:8a:e8:e3:1a:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:67:F9:8E:2C:4F:6A:25:7E:11:6A:24:69:06:29:80:D9:03:36
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c2:61:f8:31:1a:77:f1:94:94:1f:0d:5d:46:80:a8:ac:82:
3e:45:f8:66:4a:ce:e3:58:c7:a2:62:68:60:db:e4:dc:f4:f8:
c4:72:3a:d8:c7:c8:ee:33:0b:60:b5:2b:88:d7:16:ca:a6:27:
b9:42:df:f4:61:86:8b:9a:52:fb:ec:82:39:77:44:16:c2:5e:
80:cf:a4:2e:8e:16:25:3d:f5:c5:99:b5:4a:c8:90:1a:aa:f0:
f0:98:8c:0c:43:cb:2a:2f:83:70:fd:47:c0:e1:5d:7c:ad:d2:
c3:f8:5a:e2:96:a4:8c:ab:29:c2:f9:36:0b:80:f7:16:53:70:
c2:b8:53:99:3b:74:fa:ff:3c:7d:b5:ba:bf:09:a5:6d:27:05:
ce:02:58:5b:f8:34:1b:e9:c1:6b:d4:e4:70:98:4f:cc:b5:7e:
7c:05:b2:00:ef:c0:16:1a:5b:a2:a6:3c:01:96:3b:1f:34:84:
2f:41:d7:f0:8c:07:e3:ae:02:01:43:93:1d:eb:86:39:9b:75:
b7:5d:3a:d8:19:c7:10:dd:43:89:d1:3a:05:59:b6:b4:b4:77:
b8:02:9e:b1:3e:ba:04:f2:2d:3d:3b:08:d8:31:c0:73:8f:e9:
a5:c1:be:07:6b:63:07:22:2c:f6:6d:d1:0c:35:1d:c9:8a:4e:
80:e6:0a:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSIkWS00RAOvS6QFGjEauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Njk1Yjk4ZTA4YTM3OGJmMGRjOTQ0ZDJmMWE2MGExZjY5
NTQ5ODEwHhcNMjUwNDE5MjMwMDUyWhcNMjUwNDIwMjMwMDUyWjAzMTEwLwYDVQQD
Eyg3ZTA2NjdmOThlMmM0ZjZhMjU3ZTExNmEyNDY5MDYyOTgwZDkwMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6KpGFS6mNmq2Gi5Rml/GWCkBEsa
EgpeA/UKqR+idhpqSO3SirbiFYv1fjXjlKF5Z7wONzfkvjP4VUKlyVqtG5mr5Ko1
VlMuyhPcgPsKDGaC4G/xNxUe4UIbOuEWr+3Hh4foK3kIntaw+l91XysAqFGRrtUK
T22MJn7PUtcigRzMgM7u+l05tr8/xsWAN7PZhp1OhyB4kU3b19k9phSyB3Ui1zTf
LYrNJjSnNJB8WiaTcamHWmWW4/NhbtGEmsXrstCC+Ua38ygEBAJPXPk6X1Ser9SP
bClFVeinHwBWYJl64Ks1isaJQXHsK+QFlMzi/uAB1ULdu28OLYro4xpQCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4GZ/mOLE9qJX4RaiRpBimA2QM2MB8GA1UdIwQY
MBaAFLdpW5jgijeL8NyUTS8aYKH2lUmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmIt
Njg4NWFhODdjNGZkLzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmItNjg4NWFhODdjNGZk
LzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsJh+DEa
d/GUlB8NXUaAqKyCPkX4ZkrO41jHomJoYNvk3PT4xHI62MfI7jMLYLUriNcWyqYn
uULf9GGGi5pS++yCOXdEFsJegM+kLo4WJT31xZm1SsiQGqrw8JiMDEPLKi+DcP1H
wOFdfK3Sw/ha4pakjKspwvk2C4D3FlNwwrhTmTt0+v88fbW6vwmlbScFzgJYW/g0
G+nBa9TkcJhPzLV+fAWyAO/AFhpboqY8AZY7HzSEL0HX8IwH464CAUOTHeuGOZt1
t1062BnHEN1DidE6BVm2tLR3uAKesT66BPItPTsI2DHAc4/ppcG+B2tjByIs9m3R
DDUdyYpOgOYKvA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:26 2025 by rpki-client