Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: mcVWL0BOYgTCeDvLyvphvJ6oSjIg0SIY/mSP7ohIaQs=
Subject key identifier: DB:17:A7:C0:04:41:E9:3B:67:5B:7B:04:7E:2F:9A:4B:5E:88:20:5A
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 019656EF098F46E0EB9255A94257BCD9265F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0AC4
Signing time: Mon 21 Apr 2025 06:00:28 +0000
Manifest this update: Mon 21 Apr 2025 06:00:28 +0000
Manifest next update: Tue 22 Apr 2025 06:00:28 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: K2ceLIGmx0qF+IqdGVcj9pVrALm/tGFWWZqx0/fsu1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:09:8f:46:e0:eb:92:55:a9:42:57:bc:d9:26:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Apr 21 06:00:28 2025 GMT
Not After : Apr 22 06:00:28 2025 GMT
Subject: CN=db17a7c00441e93b675b7b047e2f9a4b5e88205a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:47:51:5b:f1:1e:ec:46:aa:bb:4c:da:64:
2e:6b:33:6a:fb:0f:ff:01:34:95:74:f1:98:d3:74:
38:74:09:f1:65:86:5f:7f:4b:6e:76:2c:a6:01:91:
93:6c:10:cc:13:4e:14:eb:64:ce:78:87:d8:07:13:
70:69:4f:ee:3e:64:ad:d8:8e:26:5d:c3:e5:6f:14:
70:c5:70:d3:e8:2f:a1:7a:6f:be:4f:cb:4c:9e:85:
da:e3:a3:81:14:f1:bc:23:fe:4b:fa:f9:88:d0:8b:
4a:eb:d4:ff:2e:ff:8e:3a:98:61:16:fe:8f:b6:cd:
95:d2:8c:0f:05:84:b0:14:46:6d:c6:29:fc:b4:8c:
80:0b:49:57:dc:88:7d:3e:0a:3f:be:eb:f0:34:5f:
12:24:b2:dc:ec:4d:96:e5:64:02:70:b4:12:7a:5d:
aa:f3:9e:42:94:00:bb:84:76:f1:69:38:c5:6c:8e:
34:74:eb:7d:9a:95:59:73:ba:00:99:51:d7:58:f7:
85:86:8d:40:36:d5:be:38:cc:e1:af:7a:d4:ad:e7:
da:7a:41:91:37:59:db:06:4e:fd:c6:fa:57:af:ac:
82:0a:7b:d7:97:5b:d0:1c:0e:c5:32:31:bc:31:0b:
ff:5c:31:a4:e7:13:04:29:3c:b4:33:04:6c:f2:db:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:A7:C0:04:41:E9:3B:67:5B:7B:04:7E:2F:9A:4B:5E:88:20:5A
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:e2:85:ca:7c:e1:a9:4a:c7:4e:5e:38:87:13:b6:8e:6f:
bd:ed:cd:e4:15:81:23:45:60:0a:47:50:7e:b7:6c:da:4e:e3:
3e:3d:ca:d0:0f:6d:52:14:29:05:e7:8d:81:6b:d4:90:88:ef:
2a:11:62:14:35:87:03:08:ed:e8:57:94:79:84:3f:44:5b:3e:
0d:f3:a5:0e:e5:fe:35:c3:b1:d8:05:7f:39:11:24:33:ed:d1:
c1:ba:89:47:04:04:d6:a9:be:fc:c9:4b:26:26:1e:c0:76:b7:
3b:9e:1f:9e:7a:25:6e:72:db:00:14:22:2c:43:8f:73:9f:86:
d8:b3:0c:31:cb:d0:1f:cd:13:e3:55:ae:31:5e:07:5d:90:b7:
67:b4:77:52:73:7b:91:57:f7:ff:1f:4e:1e:57:cb:1f:8a:db:
d1:76:35:88:78:c9:1e:1d:c2:2b:9a:53:6c:9a:0f:b2:fc:3b:
78:e9:b5:0d:b6:cd:b9:1f:0c:15:e5:89:93:3a:60:de:ed:86:
97:23:e5:c7:5e:e9:0a:39:d6:6c:42:d2:c3:01:78:37:80:c5:
7d:64:69:f7:9f:a9:1a:a9:d3:a4:08:f9:8e:73:18:e7:9f:62:
05:a4:96:8a:55:e3:76:e9:7d:e2:2a:55:9b:2f:f8:66:c0:32:
94:c6:4a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZW7wmPRuDrklWpQle82SZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjE3YTg0ZjcxNWVhNDhlNWNjMzc4M2IxMzhjZThjN2U3
MDM5OGMwHhcNMjUwNDIxMDYwMDI4WhcNMjUwNDIyMDYwMDI4WjAzMTEwLwYDVQQD
EyhkYjE3YTdjMDA0NDFlOTNiNjc1YjdiMDQ3ZTJmOWE0YjVlODgyMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWRHUVvxHuxGqrtM2mQuazNq+w//
ATSVdPGY03Q4dAnxZYZff0tudiymAZGTbBDME04U62TOeIfYBxNwaU/uPmSt2I4m
XcPlbxRwxXDT6C+hem++T8tMnoXa46OBFPG8I/5L+vmI0ItK69T/Lv+OOphhFv6P
ts2V0owPBYSwFEZtxin8tIyAC0lX3Ih9Pgo/vuvwNF8SJLLc7E2W5WQCcLQSel2q
855ClAC7hHbxaTjFbI40dOt9mpVZc7oAmVHXWPeFho1ANtW+OMzhr3rUrefaekGR
N1nbBk79xvpXr6yCCnvXl1vQHA7FMjG8MQv/XDGk5xMEKTy0MwRs8tvq1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsXp8AEQek7Z1t7BH4vmkteiCBaMB8GA1UdIwQY
MBaAFLUheoT3FepI5cw3g7E4zox+cDmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEt
ODcwODI4ODA4Zjg4LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEtODcwODI4ODA4Zjg4
LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhLihcp8
4alKx05eOIcTto5vve3N5BWBI0VgCkdQfrds2k7jPj3K0A9tUhQpBeeNgWvUkIjv
KhFiFDWHAwjt6FeUeYQ/RFs+DfOlDuX+NcOx2AV/OREkM+3RwbqJRwQE1qm+/MlL
JiYewHa3O54fnnolbnLbABQiLEOPc5+G2LMMMcvQH80T41WuMV4HXZC3Z7R3UnN7
kVf3/x9OHlfLH4rb0XY1iHjJHh3CK5pTbJoPsvw7eOm1DbbNuR8MFeWJkzpg3u2G
lyPlx17pCjnWbELSwwF4N4DFfWRp95+pGqnTpAj5jnMY559iBaSWilXjdul94ipV
my/4ZsAylMZKbQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:11:05 2025 by rpki-client