Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: OsJX6tnnywKjUwghkb8bzWTjUyfH/uaR7ysZOhbCrY0=
Subject key identifier: 34:7F:8E:4F:1A:53:AB:E7:A6:96:D1:FC:01:66:00:E7:E8:C5:76:6B
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 0196556EBB1968456C10E4FC27AEE5A2265F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 0D
Signing time: Sun 20 Apr 2025 23:00:42 +0000
Manifest this update: Sun 20 Apr 2025 23:00:42 +0000
Manifest next update: Mon 21 Apr 2025 23:00:42 +0000
Files and hashes: 1: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: lFbT2yc58uXnW72pRtu4KfqxDq/DEuZfOiK/l/P0A5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:bb:19:68:45:6c:10:e4:fc:27:ae:e5:a2:26:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Apr 20 23:00:42 2025 GMT
Not After : Apr 21 23:00:42 2025 GMT
Subject: CN=347f8e4f1a53abe7a696d1fc016600e7e8c5766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:11:39:70:cb:d2:80:79:5c:d3:fa:eb:02:
4b:2e:c7:0a:34:f7:b2:3e:f0:5d:e2:3a:1a:69:19:
99:52:d5:b2:3b:97:e7:53:df:84:26:07:a3:bd:e0:
0c:af:dc:e0:61:94:35:e1:7d:ee:aa:fa:a2:40:aa:
7e:23:43:78:df:b1:13:0e:e1:ca:9e:bc:fd:9f:f9:
01:4c:25:d0:a8:11:7c:53:07:53:f8:8a:e3:36:bf:
23:c3:e4:2c:3e:8b:fc:20:c3:ec:7b:be:10:d9:7f:
d0:d0:0d:73:ea:a4:73:81:ee:ee:e8:ea:89:5d:56:
a0:9c:a4:7b:e8:37:07:a5:4a:2f:32:b3:7c:ec:90:
3e:b3:36:70:62:9b:11:1f:fc:84:63:6f:66:d3:d1:
a9:bd:bb:f3:f0:b1:fe:3c:43:38:c8:76:c7:a6:09:
39:fd:bd:b4:29:11:38:7b:e1:93:11:b3:d2:0f:94:
eb:21:e6:23:fa:f0:3e:bf:e2:aa:95:fb:84:d9:16:
4a:8f:d7:b6:cd:96:f7:64:d9:27:ad:b7:30:49:fa:
29:f9:c5:ff:87:49:38:1a:45:da:69:db:ed:09:12:
8e:4d:95:5b:43:7a:39:eb:79:b4:03:8e:a9:13:d8:
4f:5e:40:3e:88:fe:81:48:26:af:68:bd:5b:d8:d6:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:8E:4F:1A:53:AB:E7:A6:96:D1:FC:01:66:00:E7:E8:C5:76:6B
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:fa:4a:42:24:2d:40:a1:61:7c:dd:77:e3:10:bd:6d:64:
03:7b:79:f3:9c:6e:12:b1:ae:3f:bf:55:63:56:8e:db:a7:b7:
cb:c7:5e:f8:a1:15:12:74:1e:31:9e:83:f5:3e:2a:ee:1d:ac:
f6:58:b3:e7:73:3e:6d:da:f0:f2:ea:b9:54:b6:55:1a:72:cc:
02:0c:25:82:ae:9b:47:cd:66:9f:ad:31:65:e5:88:de:74:51:
0d:d3:f4:d4:18:cc:0e:72:3c:66:c1:00:45:13:06:15:5f:db:
41:2f:bc:ff:97:af:ff:66:1c:cc:19:fc:d0:6f:d9:a1:fe:6b:
5f:60:ea:38:cd:71:67:92:7a:24:49:63:78:e8:46:29:5d:00:
d6:1a:4a:14:9f:64:8c:5f:a2:d1:28:be:99:77:1e:25:d8:f3:
37:63:c0:60:39:32:53:20:9b:16:7e:07:56:bb:b4:fa:51:7b:
35:56:ed:40:5d:a3:18:17:32:10:f6:35:1c:08:9b:4a:d1:dc:
cd:36:3b:c2:8d:b2:22:23:59:50:27:29:2a:39:99:b4:2f:07:
d6:cf:25:55:93:7f:38:2e:a3:55:d4:d2:77:95:7b:4f:95:b6:
47:d5:fb:ff:d8:36:0f:65:19:7b:c1:52:fb:5d:9c:ab:be:5d:
71:a2:e8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbrsZaEVsEOT8J67loiZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz
NDRhY2UwHhcNMjUwNDIwMjMwMDQyWhcNMjUwNDIxMjMwMDQyWjAzMTEwLwYDVQQD
EygzNDdmOGU0ZjFhNTNhYmU3YTY5NmQxZmMwMTY2MDBlN2U4YzU3NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMoROXDL0oB5XNP66wJLLscKNPey
PvBd4joaaRmZUtWyO5fnU9+EJgejveAMr9zgYZQ14X3uqvqiQKp+I0N437ETDuHK
nrz9n/kBTCXQqBF8UwdT+IrjNr8jw+QsPov8IMPse74Q2X/Q0A1z6qRzge7u6OqJ
XVagnKR76DcHpUovMrN87JA+szZwYpsRH/yEY29m09Gpvbvz8LH+PEM4yHbHpgk5
/b20KRE4e+GTEbPSD5TrIeYj+vA+v+KqlfuE2RZKj9e2zZb3ZNknrbcwSfop+cX/
h0k4GkXaadvtCRKOTZVbQ3o563m0A46pE9hPXkA+iP6BSCavaL1b2Nb78wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR/jk8aU6vnppbR/AFmAOfoxXZrMB8GA1UdIwQY
MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt
NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3
LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI76SkIk
LUChYXzdd+MQvW1kA3t585xuErGuP79VY1aO26e3y8de+KEVEnQeMZ6D9T4q7h2s
9liz53M+bdrw8uq5VLZVGnLMAgwlgq6bR81mn60xZeWI3nRRDdP01BjMDnI8ZsEA
RRMGFV/bQS+8/5ev/2YczBn80G/Zof5rX2DqOM1xZ5J6JEljeOhGKV0A1hpKFJ9k
jF+i0Si+mXceJdjzN2PAYDkyUyCbFn4HVru0+lF7NVbtQF2jGBcyEPY1HAibStHc
zTY7wo2yIiNZUCcpKjmZtC8H1s8lVZN/OC6jVdTSd5V7T5W2R9X7/9g2D2UZe8FS
+12cq75dcaLoTw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:30 2025 by rpki-client