Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: YVgAq86nEnf3s5gyXMuXShKI8TwBHkTydX/AV8GitaU=
Subject key identifier: 8B:8E:99:D8:49:82:ED:CC:71:6F:F8:E0:53:58:BA:19:66:D7:D1:BB
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 019656138976258D23567EB4A3828B975345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 0844
Signing time: Mon 21 Apr 2025 02:00:43 +0000
Manifest this update: Mon 21 Apr 2025 02:00:43 +0000
Manifest next update: Tue 22 Apr 2025 02:00:43 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: jCdy1uEd2KSsZHWjnyiuy0BtiUawOJB1RhqQ88GMSvc=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:89:76:25:8d:23:56:7e:b4:a3:82:8b:97:53:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Apr 21 02:00:43 2025 GMT
Not After : Apr 22 02:00:43 2025 GMT
Subject: CN=8b8e99d84982edcc716ff8e05358ba1966d7d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:fe:cf:5d:0f:a4:dd:21:45:fd:36:94:25:
a8:52:3c:e4:c7:10:e9:b7:6d:a5:b1:66:ab:77:29:
34:6c:c8:62:b4:ef:90:0f:fd:89:6a:63:b6:c3:84:
7a:e4:21:c5:bf:a5:b1:ab:df:5c:5d:aa:fb:bf:97:
cd:28:ce:e0:0b:b8:1d:c1:1e:21:74:ef:65:cd:07:
f7:37:01:76:6c:01:50:9d:92:12:31:90:35:3d:20:
4f:c3:1d:fa:a9:a8:e2:d5:65:d8:23:4a:9b:5a:a8:
3b:66:c3:07:97:fb:40:80:56:77:47:77:0b:89:c0:
59:59:42:6d:a8:cf:67:9e:e1:81:2e:8f:86:e5:2f:
41:84:c8:2c:4f:f8:86:d9:6e:7d:95:eb:e3:82:fa:
78:97:82:53:d7:39:61:f8:03:24:a5:00:21:32:c8:
d1:71:78:b9:08:d4:85:30:5e:12:ff:ec:d7:a5:55:
6b:3a:56:78:64:ae:20:8f:8b:f3:14:17:53:b0:7a:
a0:a9:4e:f9:ea:34:d0:7f:f8:cc:18:09:54:7b:9c:
0f:57:54:1d:8c:ce:af:38:2e:94:7d:95:3d:d3:54:
f5:a8:ad:cd:2e:2d:eb:ca:48:07:ce:c1:8f:26:1f:
03:48:44:e6:e9:8d:69:6e:8d:65:a8:ec:1e:3d:2e:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:99:D8:49:82:ED:CC:71:6F:F8:E0:53:58:BA:19:66:D7:D1:BB
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:04:80:cb:1e:67:28:15:74:1e:79:a7:f8:25:5c:2b:7c:b5:
81:93:3e:3b:16:03:3f:d5:a7:6b:42:d7:ab:e3:ae:7f:56:c3:
a3:2c:be:f1:cb:4f:0c:d1:1f:e1:c6:74:04:e6:a9:88:56:68:
04:86:86:d0:e8:22:31:a1:97:a1:59:5b:c4:36:96:72:f2:e5:
fe:d2:28:1f:9d:a1:3e:16:e6:a7:cd:7d:cd:05:e7:1e:17:5c:
7b:4f:ee:f9:24:02:ee:f0:4d:1f:c6:e8:d7:a2:e3:ac:2b:ec:
bb:0e:4e:eb:5d:1a:06:3a:3b:34:cd:e4:c9:0b:80:6a:08:7a:
53:35:67:bb:c1:28:67:e1:1c:04:e0:c3:25:ea:e3:22:76:a8:
13:b0:95:1d:ea:03:86:3e:25:7c:0a:b6:56:48:01:aa:43:50:
4b:c4:d5:23:9c:6a:d7:a3:e4:b5:67:0c:87:be:39:3e:15:93:
fe:cb:5f:40:10:bb:31:1c:d1:bc:be:7e:24:f6:05:bf:17:51:
0c:d2:0b:d5:73:4b:ab:39:15:f5:8d:60:9c:79:a7:c9:c0:af:
e9:ac:af:c7:66:b2:2f:9a:c3:7e:bb:98:57:a3:5f:56:af:43:
0f:18:de:6d:fd:80:e0:e8:70:9c:45:a8:17:fd:9c:ab:99:80:
47:7a:9b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE4l2JY0jVn60o4KLl1NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw
YTM4MWYwHhcNMjUwNDIxMDIwMDQzWhcNMjUwNDIyMDIwMDQzWjAzMTEwLwYDVQQD
Eyg4YjhlOTlkODQ5ODJlZGNjNzE2ZmY4ZTA1MzU4YmExOTY2ZDdkMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx17+z10PpN0hRf02lCWoUjzkxxDp
t22lsWardyk0bMhitO+QD/2JamO2w4R65CHFv6Wxq99cXar7v5fNKM7gC7gdwR4h
dO9lzQf3NwF2bAFQnZISMZA1PSBPwx36qaji1WXYI0qbWqg7ZsMHl/tAgFZ3R3cL
icBZWUJtqM9nnuGBLo+G5S9BhMgsT/iG2W59levjgvp4l4JT1zlh+AMkpQAhMsjR
cXi5CNSFMF4S/+zXpVVrOlZ4ZK4gj4vzFBdTsHqgqU756jTQf/jMGAlUe5wPV1Qd
jM6vOC6UfZU901T1qK3NLi3rykgHzsGPJh8DSETm6Y1pbo1lqOwePS71OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuOmdhJgu3McW/44FNYuhlm19G7MB8GA1UdIwQY
MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt
YTdjY2QwMDk4NDc3LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3
LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsASAyx5n
KBV0Hnmn+CVcK3y1gZM+OxYDP9Wna0LXq+Ouf1bDoyy+8ctPDNEf4cZ0BOapiFZo
BIaG0OgiMaGXoVlbxDaWcvLl/tIoH52hPhbmp819zQXnHhdce0/u+SQC7vBNH8bo
16LjrCvsuw5O610aBjo7NM3kyQuAagh6UzVnu8EoZ+EcBODDJerjInaoE7CVHeoD
hj4lfAq2VkgBqkNQS8TVI5xq16PktWcMh745PhWT/stfQBC7MRzRvL5+JPYFvxdR
DNIL1XNLqzkV9Y1gnHmnycCv6ayvx2ayL5rDfruYV6NfVq9DDxjebf2A4OhwnEWo
F/2cq5mAR3qb4A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:26:33 2025 by rpki-client