Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: DVZs7Az950LWQ+aa7ikzIdLJX2T7Vg0s4iLZFv+yxu8=
Subject key identifier: BD:DE:2C:CB:21:3B:DB:8E:55:03:4F:A3:84:66:C7:53:E0:91:28:6C
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019656815C49BCDEDBDEBFAD047C1A684FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 150D
Signing time: Mon 21 Apr 2025 04:00:40 +0000
Manifest this update: Mon 21 Apr 2025 04:00:40 +0000
Manifest next update: Tue 22 Apr 2025 04:00:40 +0000
Files and hashes: 1: FAOYdRa4uoJSdoI3e8-q11iXfiE.roa (hash: FqMdw256VpvhGAmP1nnLAhKDEQ1LXuBv38BkFocmRoU=)
2: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 6QBrhJ7prEaMS/9vaIDzLJy+Z7dRNs4kthvbQvkF024=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:5c:49:bc:de:db:de:bf:ad:04:7c:1a:68:4f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Apr 21 04:00:40 2025 GMT
Not After : Apr 22 04:00:40 2025 GMT
Subject: CN=bdde2ccb213bdb8e55034fa38466c753e091286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:c4:db:1b:c0:0a:e8:c5:42:c7:79:4a:15:
e3:f0:be:97:e9:89:1a:7c:dc:4a:b8:1c:5a:e8:3e:
3a:e4:28:5b:6b:d3:1a:d8:71:83:c3:8d:75:cb:d9:
b7:6c:94:a7:17:99:48:66:00:a5:06:ee:8c:d2:4a:
bc:a7:e7:dc:c5:54:92:9f:c8:90:e1:3c:c8:17:cf:
44:42:3d:74:ce:e3:52:c4:e2:86:b4:33:69:bd:52:
76:aa:c2:9c:ee:34:e2:d4:5c:fd:f3:0e:21:01:af:
e2:68:ce:85:18:b4:3f:67:ed:f0:7a:99:4f:02:bc:
71:6c:b9:97:b3:af:30:a4:ba:a2:6d:95:38:5a:54:
1a:2a:2a:0b:8d:3c:d5:b0:ce:b9:65:92:64:e6:3b:
58:04:9d:dc:8c:a2:9d:f2:38:29:8f:3d:c6:0f:f0:
c5:14:85:dc:43:6d:9f:90:3d:7b:a1:ed:a4:5f:1b:
ed:7c:d4:1e:6b:1b:94:38:d9:ea:06:2e:bc:b8:44:
05:be:f5:09:2c:ab:5f:f4:31:7a:67:72:ac:6b:d3:
58:fc:a6:4e:15:4e:4d:d3:1c:af:a2:bd:0b:bd:de:
ce:9a:ac:b4:12:5a:ce:50:8b:5f:85:9a:c2:05:07:
17:0b:ea:bb:cf:f3:a8:c7:83:9e:01:bd:8f:49:9a:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DE:2C:CB:21:3B:DB:8E:55:03:4F:A3:84:66:C7:53:E0:91:28:6C
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:33:24:4a:6e:36:b3:0f:3c:29:13:9c:38:da:99:77:b2:43:
ff:7b:23:33:e3:80:bb:06:79:47:56:4a:25:83:60:c2:71:22:
8a:20:11:6a:63:23:6f:b5:79:3b:4f:da:c9:b1:79:a5:6f:0d:
7e:5c:55:25:4f:31:90:e3:4f:de:bf:ec:5c:9f:6a:5b:13:50:
2b:db:1c:96:21:be:ec:0c:c1:dd:11:0d:bc:7d:75:3a:b0:f4:
fa:fa:50:02:c9:b2:c6:b9:6f:a7:ba:49:57:a6:a7:f2:9d:df:
07:af:4e:5d:4d:38:c4:a8:6a:34:0f:60:98:c4:06:00:89:39:
a8:90:ed:5e:0c:7f:52:1b:c9:25:65:62:83:f7:3d:36:8b:d5:
e8:57:e0:c4:45:40:2c:91:3f:da:4d:a7:c0:66:07:3d:ff:6b:
34:f0:22:29:a9:4e:b8:54:93:85:f2:20:36:64:97:92:9b:9d:
b9:1f:2e:b7:10:76:ac:a2:8b:f2:9d:d1:9a:ad:7b:46:c5:fe:
27:94:23:b9:21:4f:e8:00:75:7d:49:8a:60:51:80:23:bc:0f:
ab:5c:28:fc:10:09:3f:e8:fb:54:f1:c1:c5:58:ec:f1:0d:64:
f0:e9:c4:a7:93:c3:67:44:f6:d6:56:39:1b:fe:69:da:56:75:
2f:ee:d3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgVxJvN7b3r+tBHwaaE/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk
MjI5YzMwHhcNMjUwNDIxMDQwMDQwWhcNMjUwNDIyMDQwMDQwWjAzMTEwLwYDVQQD
EyhiZGRlMmNjYjIxM2JkYjhlNTUwMzRmYTM4NDY2Yzc1M2UwOTEyODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QPE2xvACujFQsd5ShXj8L6X6Yka
fNxKuBxa6D465Chba9Ma2HGDw411y9m3bJSnF5lIZgClBu6M0kq8p+fcxVSSn8iQ
4TzIF89EQj10zuNSxOKGtDNpvVJ2qsKc7jTi1Fz98w4hAa/iaM6FGLQ/Z+3weplP
ArxxbLmXs68wpLqibZU4WlQaKioLjTzVsM65ZZJk5jtYBJ3cjKKd8jgpjz3GD/DF
FIXcQ22fkD17oe2kXxvtfNQeaxuUONnqBi68uEQFvvUJLKtf9DF6Z3Ksa9NY/KZO
FU5N0xyvor0Lvd7Omqy0ElrOUItfhZrCBQcXC+q7z/Oox4OeAb2PSZr1rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3eLMshO9uOVQNPo4Rmx1PgkShsMB8GA1UdIwQY
MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt
YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw
LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTMkSm42
sw88KROcONqZd7JD/3sjM+OAuwZ5R1ZKJYNgwnEiiiARamMjb7V5O0/aybF5pW8N
flxVJU8xkONP3r/sXJ9qWxNQK9scliG+7AzB3RENvH11OrD0+vpQAsmyxrlvp7pJ
V6an8p3fB69OXU04xKhqNA9gmMQGAIk5qJDtXgx/UhvJJWVig/c9NovV6FfgxEVA
LJE/2k2nwGYHPf9rNPAiKalOuFSThfIgNmSXkpuduR8utxB2rKKL8p3Rmq17RsX+
J5QjuSFP6AB1fUmKYFGAI7wPq1wo/BAJP+j7VPHBxVjs8Q1k8OnEp5PDZ0T21lY5
G/5p2lZ1L+7TsA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:26:13 2025 by rpki-client