Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: 4gwi5VWIQH0qPd0It4CkrJKoIir+ZRHSzC3t1JCPm/A=
Subject key identifier: 0E:6D:E4:1E:F8:03:98:05:83:9A:AB:63:A9:95:2B:9C:DC:35:C1:2F
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 01965500DAAD5EF66EE64DB0D6E5ECBC7368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 070E
Signing time: Sun 20 Apr 2025 21:00:41 +0000
Manifest this update: Sun 20 Apr 2025 21:00:41 +0000
Manifest next update: Mon 21 Apr 2025 21:00:41 +0000
Files and hashes: 1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: jKjcEWzMHCn5JwZJ+Fm3dzjADlK6PW0c3ZBTHxb+Plc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:da:ad:5e:f6:6e:e6:4d:b0:d6:e5:ec:bc:73:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Apr 20 21:00:41 2025 GMT
Not After : Apr 21 21:00:41 2025 GMT
Subject: CN=0e6de41ef8039805839aab63a9952b9cdc35c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:7b:45:59:a5:db:dd:17:20:fa:8d:68:b6:
d5:07:95:27:19:c9:97:dd:2e:7a:50:0b:d4:b1:b3:
8f:91:be:a7:75:c5:a7:16:b7:b3:6f:da:84:a4:ef:
73:c2:e1:50:cb:8d:bc:cc:10:91:96:ee:6c:ea:bd:
59:2c:3e:17:f4:ad:c8:d3:c5:34:70:fc:15:6a:a3:
f7:7c:77:18:b7:7d:ab:b4:62:81:18:db:a1:53:6f:
a1:88:16:75:85:fa:5f:93:61:c5:39:55:c7:a1:d6:
8f:54:ad:e8:33:0e:1c:9a:9e:cb:d5:16:9a:d6:b1:
1a:6f:7a:b6:83:a1:64:e5:b8:4d:28:99:61:ba:11:
cc:be:a5:8d:02:8b:31:c4:4f:fc:eb:14:a4:9b:d5:
3f:60:2d:0d:2e:dd:fc:a7:f4:e7:d1:30:d7:30:3c:
a2:63:2c:c7:30:4e:1c:52:31:2a:97:86:65:66:43:
1d:fe:55:ce:94:fb:44:4e:a6:0d:75:49:f8:ad:1f:
4c:a7:bc:9a:2f:96:41:6b:5b:ed:b7:be:f0:d7:74:
fd:d7:08:2e:80:3d:e7:a3:ef:e6:7c:d5:53:9e:f3:
b9:3b:0b:07:65:a1:82:df:24:2a:ab:d8:de:61:20:
73:3e:c5:cc:c3:59:7f:76:51:50:7f:f2:94:d4:ae:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6D:E4:1E:F8:03:98:05:83:9A:AB:63:A9:95:2B:9C:DC:35:C1:2F
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9f:69:f6:b1:9d:1f:35:05:b6:69:9d:95:7e:04:ed:b4:87:
60:ee:90:e3:83:a5:70:ec:84:43:21:a6:02:d4:e8:df:30:47:
c6:bb:62:ab:f4:13:29:4a:f2:30:85:e6:7c:d3:f1:e9:9f:5d:
6c:58:a0:60:4d:94:e7:32:0d:34:d4:ca:61:85:d0:1c:35:1f:
db:73:da:60:48:27:02:fa:22:2f:00:d2:d3:b2:c3:0a:5e:d9:
a6:13:75:fe:26:0e:dc:a4:de:e4:10:62:28:28:cb:ca:cf:65:
c1:33:f5:29:12:94:14:db:e5:e1:7f:9a:b8:fc:41:bc:42:ff:
8b:1a:15:1b:aa:37:aa:4d:4a:92:24:46:d2:23:25:63:9b:f4:
05:35:8d:15:5b:a3:79:95:f6:4b:17:7b:43:e1:49:f5:54:8b:
ff:40:8f:6c:5f:d2:ab:ed:94:25:68:9b:f7:9b:75:e9:07:bf:
84:b3:24:68:cc:10:31:5a:0f:a5:c5:44:38:27:24:45:1b:26:
e5:4e:09:bb:b8:93:8b:d3:15:53:5d:51:4f:48:da:1d:84:6f:
b3:94:0b:36:26:59:26:a7:a6:4f:9b:77:77:a2:5f:be:97:64:
91:5b:4c:f4:97:cf:da:20:69:ba:db:a6:d7:22:ec:28:7b:46:
a0:7f:ed:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVANqtXvZu5k2w1uXsvHNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWRlOTQ1OGQxOTBlNjM0MzI5ZjlkZjE1MDNiNTIyMmMx
NjI0ZWUwHhcNMjUwNDIwMjEwMDQxWhcNMjUwNDIxMjEwMDQxWjAzMTEwLwYDVQQD
EygwZTZkZTQxZWY4MDM5ODA1ODM5YWFiNjNhOTk1MmI5Y2RjMzVjMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiF7RVml290XIPqNaLbVB5UnGcmX
3S56UAvUsbOPkb6ndcWnFrezb9qEpO9zwuFQy428zBCRlu5s6r1ZLD4X9K3I08U0
cPwVaqP3fHcYt32rtGKBGNuhU2+hiBZ1hfpfk2HFOVXHodaPVK3oMw4cmp7L1Raa
1rEab3q2g6Fk5bhNKJlhuhHMvqWNAosxxE/86xSkm9U/YC0NLt38p/Tn0TDXMDyi
YyzHME4cUjEql4ZlZkMd/lXOlPtETqYNdUn4rR9Mp7yaL5ZBa1vtt77w13T91wgu
gD3no+/mfNVTnvO5OwsHZaGC3yQqq9jeYSBzPsXMw1l/dlFQf/KU1K5WswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5t5B74A5gFg5qrY6mVK5zcNcEvMB8GA1UdIwQY
MBaAFLed6UWNGQ5jQyn53xUDtSIsFiTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zYmU4OTktYTUyZi00M2FkLThlODkt
ZjFjZDlmYTI4Y2M1LzEvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zYmU4OTktYTUyZi00M2FkLThlODktZjFjZDlmYTI4Y2M1
LzEvdDUzcFJZMFpEbU5ES2ZuZkZRTzFJaXdXSk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZ9p9rGd
HzUFtmmdlX4E7bSHYO6Q44OlcOyEQyGmAtTo3zBHxrtiq/QTKUryMIXmfNPx6Z9d
bFigYE2U5zINNNTKYYXQHDUf23PaYEgnAvoiLwDS07LDCl7ZphN1/iYO3KTe5BBi
KCjLys9lwTP1KRKUFNvl4X+auPxBvEL/ixoVG6o3qk1KkiRG0iMlY5v0BTWNFVuj
eZX2Sxd7Q+FJ9VSL/0CPbF/Sq+2UJWib95t16Qe/hLMkaMwQMVoPpcVEOCckRRsm
5U4Ju7iTi9MVU11RT0jaHYRvs5QLNiZZJqemT5t3d6JfvpdkkVtM9JfP2iBputum
1yLsKHtGoH/t+A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:02 2025 by rpki-client