Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: NYCGO2Hv/rSWQPDjrWjKwXKJ8knjHehJFUZ869rrSSc=
Subject key identifier: C9:3B:4F:29:31:6D:16:2B:31:85:52:FE:13:71:27:80:C8:6F:F0:6B
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 019659B9847D113E9CAFE4B9CB1E3D6D690F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 0F27
Signing time: Mon 21 Apr 2025 19:00:52 +0000
Manifest this update: Mon 21 Apr 2025 19:00:52 +0000
Manifest next update: Tue 22 Apr 2025 19:00:52 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: aU+IJjtOSYODBCdLHLx6LdVPLRC8KRverEF76Vu7LXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:84:7d:11:3e:9c:af:e4:b9:cb:1e:3d:6d:69:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Apr 21 19:00:52 2025 GMT
Not After : Apr 22 19:00:52 2025 GMT
Subject: CN=c93b4f29316d162b318552fe13712780c86ff06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:8b:de:ec:76:13:87:40:6f:e2:10:a8:5c:
14:fa:d5:3b:59:84:af:46:a6:64:76:32:b6:80:40:
5a:d1:a8:cf:56:a3:33:97:2d:e5:85:6c:51:c6:12:
11:a7:af:b9:fa:ea:a3:b0:46:42:a1:c8:87:a4:2b:
ce:5d:6c:cd:da:6d:5f:4e:8d:e6:78:7d:fc:a6:2d:
60:e9:6e:66:73:d0:c8:a7:2f:51:81:a8:a2:00:3f:
32:b2:fa:05:6a:37:8e:e2:7a:4c:44:9d:d2:4e:8e:
d5:06:a8:e5:30:e6:c9:cb:63:69:57:5b:5b:e7:e9:
9c:d4:ee:d5:76:40:5e:54:8a:1f:c2:86:3d:ba:db:
4e:a7:d6:32:33:65:e8:97:31:25:38:20:2c:24:e1:
52:45:b9:45:9e:71:bf:a1:64:05:56:8c:0a:51:f5:
0d:81:36:23:c3:9b:21:9b:83:04:b6:e9:ed:84:c2:
5d:82:70:40:61:19:b6:a6:cb:3b:49:55:eb:cf:70:
a8:c9:57:21:1a:6b:06:78:3b:bc:64:cf:37:c3:76:
f6:4f:d3:8c:38:0a:f9:a9:8e:43:0d:a2:4e:e0:f4:
84:7d:98:a8:97:df:39:70:cd:96:80:62:c4:73:1e:
e7:0d:cb:e9:44:88:7e:66:bb:b2:2d:dd:e7:59:51:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:4F:29:31:6D:16:2B:31:85:52:FE:13:71:27:80:C8:6F:F0:6B
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:d9:2e:f4:fb:ba:40:ee:6e:a5:18:b3:7c:3d:14:9e:c8:
38:77:6c:ec:46:05:90:de:7d:2c:8a:d6:48:bc:c8:7d:f8:93:
24:68:b9:ef:2b:fc:12:9e:7d:e4:f4:b3:f9:f2:b0:de:56:61:
31:9e:83:d7:df:2b:31:fd:e4:a1:2f:f5:e2:c3:85:86:eb:0f:
d0:01:20:b8:51:7d:9c:22:d7:68:53:07:d4:15:39:65:28:76:
51:22:36:52:75:2a:fb:ac:70:63:6a:4f:17:51:46:a1:37:c2:
56:54:13:15:de:31:7b:9d:42:3a:7f:1d:bb:2b:05:4f:96:eb:
cb:3d:c9:5b:65:3e:f7:2a:92:a6:9e:41:54:2c:52:fb:98:5d:
ce:c0:a3:5e:77:65:6b:94:c1:b6:79:40:de:0f:95:ba:93:8e:
df:3b:d7:14:f6:42:1b:d1:c2:24:9f:2a:11:80:33:5c:9a:6c:
97:b7:4c:8e:e5:40:4f:15:71:07:26:c9:fd:e2:31:d0:a9:99:
aa:9b:eb:da:82:8c:e0:91:57:52:83:4d:ae:9e:71:c9:50:aa:
92:68:bb:c6:4b:b9:43:b8:ca:8e:29:53:70:8d:c0:45:37:03:
77:3c:13:ca:04:e4:31:b5:da:b7:8d:fc:d2:3c:74:32:53:42:
5d:3b:c7:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuYR9ET6cr+S5yx49bWkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4
NGQ2NjAwHhcNMjUwNDIxMTkwMDUyWhcNMjUwNDIyMTkwMDUyWjAzMTEwLwYDVQQD
EyhjOTNiNGYyOTMxNmQxNjJiMzE4NTUyZmUxMzcxMjc4MGM4NmZmMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv02L3ux2E4dAb+IQqFwU+tU7WYSv
RqZkdjK2gEBa0ajPVqMzly3lhWxRxhIRp6+5+uqjsEZCociHpCvOXWzN2m1fTo3m
eH38pi1g6W5mc9DIpy9RgaiiAD8ysvoFajeO4npMRJ3STo7VBqjlMObJy2NpV1tb
5+mc1O7VdkBeVIofwoY9uttOp9YyM2XolzElOCAsJOFSRblFnnG/oWQFVowKUfUN
gTYjw5shm4MEtunthMJdgnBAYRm2pss7SVXrz3CoyVchGmsGeDu8ZM83w3b2T9OM
OAr5qY5DDaJO4PSEfZiol985cM2WgGLEcx7nDcvpRIh+ZruyLd3nWVHQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk7TykxbRYrMYVS/hNxJ4DIb/BrMB8GA1UdIwQY
MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct
YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0
LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpzZLvT7
ukDubqUYs3w9FJ7IOHds7EYFkN59LIrWSLzIffiTJGi57yv8Ep595PSz+fKw3lZh
MZ6D198rMf3koS/14sOFhusP0AEguFF9nCLXaFMH1BU5ZSh2USI2UnUq+6xwY2pP
F1FGoTfCVlQTFd4xe51COn8duysFT5bryz3JW2U+9yqSpp5BVCxS+5hdzsCjXndl
a5TBtnlA3g+VupOO3zvXFPZCG9HCJJ8qEYAzXJpsl7dMjuVATxVxBybJ/eIx0KmZ
qpvr2oKM4JFXUoNNrp5xyVCqkmi7xku5Q7jKjilTcI3ARTcDdzwTygTkMbXat438
0jx0MlNCXTvHVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:43 2025 by rpki-client