Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: LZkdR332XBgSr4nee/ct+cC0LK7ixK3VLPWI256qSrw=
Subject key identifier: 00:8B:02:C2:51:5E:E0:9E:63:63:0E:F5:29:82:94:95:53:AF:F6:51
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 01965A26F6403C5E5EA1B88C9CE4D1DC82CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 21:00:24 +0000
Manifest this update: Mon 21 Apr 2025 21:00:24 +0000
Manifest next update: Tue 22 Apr 2025 21:00:24 +0000
Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: bNNI/lAKs725u1xf4zNHAJ3VouVOdJQxH8xeMJE7vA0=)
4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:f6:40:3c:5e:5e:a1:b8:8c:9c:e4:d1:dc:82:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Apr 21 21:00:24 2025 GMT
Not After : Apr 22 21:00:24 2025 GMT
Subject: CN=008b02c2515ee09e63630ef52982949553aff651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:83:c3:3a:fb:ec:7e:30:da:1b:96:fa:ab:
37:b0:03:c2:83:b0:4c:ff:2b:eb:d8:86:bd:ed:6c:
c8:37:c1:cc:29:f0:48:ce:36:83:86:30:83:d5:9b:
67:22:7d:96:a2:a2:14:24:ad:7a:a3:5f:78:c5:8e:
fe:bb:00:bf:c9:71:68:5d:21:88:d8:cb:2f:e2:00:
a5:74:09:b9:fa:3d:80:44:df:10:80:d5:d3:d6:f7:
a1:f2:20:bf:40:bf:34:71:0a:0f:f2:ae:a6:b5:be:
d1:ca:a3:54:e2:ff:b9:58:77:7f:e0:5f:c2:bd:73:
97:db:e5:a9:c7:8b:fb:e2:22:d1:1d:b5:a5:09:5f:
9a:cf:40:e7:33:03:a5:19:e7:d5:a6:12:f8:00:7d:
0a:88:70:12:fb:b2:9d:2d:f1:17:e1:86:b6:ea:96:
6d:f1:45:f4:1d:0d:f0:8f:5d:b3:67:ee:1f:37:ec:
b3:27:73:1b:82:48:e8:67:b8:d0:42:97:d2:0d:a1:
83:ce:c6:4e:6d:1c:23:68:17:ef:af:25:d0:44:ee:
ef:d6:bd:17:dd:c0:49:cf:ef:77:b3:f2:6c:83:9d:
4b:39:06:a0:06:77:a3:91:69:8d:a7:3d:1f:dc:e1:
d9:f4:16:78:cf:06:a5:cd:c0:71:f4:8a:be:db:a4:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:02:C2:51:5E:E0:9E:63:63:0E:F5:29:82:94:95:53:AF:F6:51
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:45:ad:27:35:0d:ad:b9:ae:1c:e2:2d:23:36:c5:33:aa:fb:
77:d0:1b:65:a2:49:fe:50:6f:25:64:41:7a:86:15:59:6b:9e:
77:1c:9a:b1:01:58:db:87:2a:3f:88:63:16:6c:09:31:f5:7b:
27:27:57:d2:08:5a:40:21:0f:fb:d4:4b:0a:e6:05:5e:e9:c3:
c5:e3:5f:95:da:6b:0b:29:08:49:31:aa:42:7e:65:b7:b8:0d:
3f:25:85:4c:de:e8:09:98:4d:18:b8:20:61:57:5a:73:73:91:
64:aa:34:57:a0:27:a5:22:b3:ee:60:b9:52:35:36:b2:07:18:
4f:ca:a6:b2:9d:0b:e3:4d:cb:ea:38:68:33:22:8e:a3:35:30:
77:72:97:a0:4a:cb:1a:7b:33:23:fd:f2:c7:8e:5e:94:ad:10:
ac:f9:7d:65:cf:7d:a0:81:48:70:53:74:78:9a:51:48:14:f2:
1a:bf:35:4c:b8:83:9f:46:19:85:75:97:6a:eb:77:72:9f:fc:
f2:e1:69:5f:d8:17:eb:75:6f:9d:a8:75:15:70:a3:23:e1:57:
be:c6:62:a2:47:a9:82:eb:f5:66:8d:76:a9:e4:4d:fd:c0:db:
35:fd:f3:20:fd:a9:47:a9:a1:e5:74:d3:b6:f2:3c:04:5e:2e:
7e:1d:83:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaJvZAPF5eobiMnOTR3ILKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjUwNDIxMjEwMDI0WhcNMjUwNDIyMjEwMDI0WjAzMTEwLwYDVQQD
EygwMDhiMDJjMjUxNWVlMDllNjM2MzBlZjUyOTgyOTQ5NTUzYWZmNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVGDwzr77H4w2huW+qs3sAPCg7BM
/yvr2Ia97WzIN8HMKfBIzjaDhjCD1ZtnIn2WoqIUJK16o194xY7+uwC/yXFoXSGI
2Msv4gCldAm5+j2ARN8QgNXT1veh8iC/QL80cQoP8q6mtb7RyqNU4v+5WHd/4F/C
vXOX2+Wpx4v74iLRHbWlCV+az0DnMwOlGefVphL4AH0KiHAS+7KdLfEX4Ya26pZt
8UX0HQ3wj12zZ+4fN+yzJ3MbgkjoZ7jQQpfSDaGDzsZObRwjaBfvryXQRO7v1r0X
3cBJz+93s/Jsg51LOQagBnejkWmNpz0f3OHZ9BZ4zwalzcBx9Iq+26TFswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACLAsJRXuCeY2MO9SmClJVTr/ZRMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUWtJzUN
rbmuHOItIzbFM6r7d9AbZaJJ/lBvJWRBeoYVWWuedxyasQFY24cqP4hjFmwJMfV7
JydX0ghaQCEP+9RLCuYFXunDxeNfldprCykISTGqQn5lt7gNPyWFTN7oCZhNGLgg
YVdac3ORZKo0V6AnpSKz7mC5UjU2sgcYT8qmsp0L403L6jhoMyKOozUwd3KXoErL
GnszI/3yx45elK0QrPl9Zc99oIFIcFN0eJpRSBTyGr81TLiDn0YZhXWXaut3cp/8
8uFpX9gX63Vvnah1FXCjI+FXvsZiokepguv1Zo12qeRN/cDbNf3zIP2pR6mh5XTT
tvI8BF4ufh2D2A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:48:23 2025 by rpki-client