Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
File: TeHTcc2fJqEftklGZ0wxl198Lt8.mft (raw, json)
Hash identifier: 27GMS8A6usPxyu7uYyV/QsJE+NT2yPcXcN6I+RgnWtI=
Subject key identifier: B8:3D:99:95:54:CA:F8:02:6A:9D:D8:BB:65:BF:7D:B3:82:29:01:AD
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 0196556ECAAEA45DD22ADDB9B7B344BB0921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 23:00:46 +0000
Manifest this update: Sun 20 Apr 2025 23:00:46 +0000
Manifest next update: Mon 21 Apr 2025 23:00:46 +0000
Files and hashes: 1: N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa (hash: IAepQRK7ijnLHmjIcS6HiPXZXeTO8dWbShOBaF70B2w=)
2: TeHTcc2fJqEftklGZ0wxl198Lt8.crl (hash: ckqcf/EyDJYs+aCm8BXEI8WEDoqSwYquXU+B6g90sWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:ca:ae:a4:5d:d2:2a:dd:b9:b7:b3:44:bb:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Apr 20 23:00:46 2025 GMT
Not After : Apr 21 23:00:46 2025 GMT
Subject: CN=b83d999554caf8026a9dd8bb65bf7db3822901ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:cf:b6:d5:99:bc:9a:dd:c6:30:54:34:51:
2a:6d:d4:23:de:93:86:17:f6:ee:e7:1a:28:f4:40:
83:b4:b4:c7:d0:37:01:8e:60:f6:10:25:d9:57:a9:
86:d4:78:60:75:fd:c6:79:2d:df:9d:29:f0:93:fb:
e1:cd:2a:98:f4:3e:5d:54:78:bd:d4:ca:c2:fc:66:
6b:be:1b:1a:00:c3:af:fc:12:d0:5f:9f:b1:92:8c:
be:88:b9:3f:a6:ef:be:95:fc:ed:57:d3:37:b2:3c:
a0:10:2f:d5:31:7e:f4:c4:95:29:e9:b0:09:09:9f:
1f:d8:0b:67:44:6e:d4:9b:19:8d:7c:73:0d:47:8d:
28:0d:90:5e:69:52:ab:29:7e:f6:44:29:25:14:b0:
99:cc:f3:af:56:fc:eb:bb:a4:03:c9:eb:f3:9a:f3:
b3:4e:88:a5:35:d2:96:54:1f:b5:b5:36:89:14:73:
13:d5:c1:2a:6e:36:80:84:68:ba:57:30:21:f2:e9:
ec:7d:53:32:6a:16:44:f3:43:4f:59:7e:a0:0d:7d:
0f:3d:60:e3:03:94:0e:83:14:be:a6:ce:75:e6:54:
b8:f9:56:23:98:38:08:69:ad:43:5f:be:d0:b9:5a:
f5:76:d4:87:53:56:bb:94:6b:06:ed:f9:83:3a:4c:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3D:99:95:54:CA:F8:02:6A:9D:D8:BB:65:BF:7D:B3:82:29:01:AD
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:17:b1:88:b1:f1:f1:94:19:83:9d:f1:94:00:f4:59:c7:8d:
4c:85:68:86:53:6c:59:8f:cd:27:a8:71:ea:9c:16:85:20:09:
ad:b0:f7:2e:9e:18:8a:88:9a:8d:d2:26:7e:b8:ae:98:e2:2a:
b0:e4:d5:1a:15:59:e2:80:df:12:48:28:07:76:1e:dc:76:41:
be:c8:bb:f6:1f:e6:ca:11:91:94:a5:ca:c2:81:e4:14:35:e3:
7e:34:b8:66:47:33:46:8a:f9:f3:be:29:12:19:3f:b3:70:4b:
b6:2d:22:2e:70:be:f7:31:2d:e8:c9:19:03:8b:f5:a5:28:55:
f1:76:d7:1b:ea:96:01:60:e6:f9:0c:2e:ac:b5:b5:48:b3:48:
a0:e8:03:32:1c:0b:ab:b1:f8:0e:6f:78:36:3b:64:5b:55:9c:
bd:7c:3b:d9:4f:9e:03:72:69:6d:4c:0c:32:36:ec:97:3d:42:
a5:ba:0d:5c:d4:84:36:37:2c:ca:94:a9:05:45:b7:90:53:67:
e8:ae:39:c5:cf:6d:14:40:cc:1c:85:4f:17:df:eb:31:23:b0:
2f:2f:0c:60:4e:80:a2:1a:3e:cf:b7:9c:cb:ca:03:a2:4a:29:
b8:cb:58:07:88:45:42:b1:5c:18:37:4e:b6:a6:2a:fb:ee:95:
72:51:a1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbsqupF3SKt25t7NEuwkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTFkMzcxY2Q5ZjI2YTExZmI2NDk0NjY3NGMzMTk3NWY3
YzJlZGYwHhcNMjUwNDIwMjMwMDQ2WhcNMjUwNDIxMjMwMDQ2WjAzMTEwLwYDVQQD
EyhiODNkOTk5NTU0Y2FmODAyNmE5ZGQ4YmI2NWJmN2RiMzgyMjkwMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ7PttWZvJrdxjBUNFEqbdQj3pOG
F/bu5xoo9ECDtLTH0DcBjmD2ECXZV6mG1Hhgdf3GeS3fnSnwk/vhzSqY9D5dVHi9
1MrC/GZrvhsaAMOv/BLQX5+xkoy+iLk/pu++lfztV9M3sjygEC/VMX70xJUp6bAJ
CZ8f2AtnRG7UmxmNfHMNR40oDZBeaVKrKX72RCklFLCZzPOvVvzru6QDyevzmvOz
ToilNdKWVB+1tTaJFHMT1cEqbjaAhGi6VzAh8unsfVMyahZE80NPWX6gDX0PPWDj
A5QOgxS+ps515lS4+VYjmDgIaa1DX77QuVr1dtSHU1a7lGsG7fmDOkx6HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg9mZVUyvgCap3Yu2W/fbOCKQGtMB8GA1UdIwQY
MBaAFE3h03HNnyahH7ZJRmdMMZdffC7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wNjFmMjMtNGZiOC00NjM2LWI4NzQt
NWU0MmEzZjY2ZjMyLzEvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8wNjFmMjMtNGZiOC00NjM2LWI4NzQtNWU0MmEzZjY2ZjMy
LzEvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBexiLHx
8ZQZg53xlAD0WceNTIVohlNsWY/NJ6hx6pwWhSAJrbD3Lp4YioiajdImfriumOIq
sOTVGhVZ4oDfEkgoB3Ye3HZBvsi79h/myhGRlKXKwoHkFDXjfjS4ZkczRor5874p
Ehk/s3BLti0iLnC+9zEt6MkZA4v1pShV8XbXG+qWAWDm+QwurLW1SLNIoOgDMhwL
q7H4Dm94NjtkW1WcvXw72U+eA3JpbUwMMjbslz1CpboNXNSENjcsypSpBUW3kFNn
6K45xc9tFEDMHIVPF9/rMSOwLy8MYE6Aoho+z7ecy8oDokopuMtYB4hFQrFcGDdO
tqYq++6VclGhdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:43 2025 by rpki-client