Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: nGnqBDkZtsq9VmxtSXT/5cy4m0MynWu5KRla7XT12QA=
Subject key identifier: CD:1F:66:CB:B9:CD:A9:7F:66:56:72:33:73:60:CC:53:D1:84:D3:64
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 019655DCC8BB5F949F4F5726D1600BA450BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0BFA
Signing time: Mon 21 Apr 2025 01:00:54 +0000
Manifest this update: Mon 21 Apr 2025 01:00:54 +0000
Manifest next update: Tue 22 Apr 2025 01:00:54 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: QOIV58RTw4v9yL4CJW9u9XshdJ4//psx9fKmhbwYM60=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c8:bb:5f:94:9f:4f:57:26:d1:60:0b:a4:50:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Apr 21 01:00:54 2025 GMT
Not After : Apr 22 01:00:54 2025 GMT
Subject: CN=cd1f66cbb9cda97f665672337360cc53d184d364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:6e:15:f7:37:90:33:49:e4:4b:57:2a:9c:
19:11:21:8e:d8:db:86:05:dd:3f:cb:25:11:31:f7:
0e:a1:6d:39:9b:4b:40:30:f3:49:c1:10:f8:d9:d4:
68:c5:a5:32:eb:ce:a5:d2:ce:c0:32:e8:a5:50:3a:
f4:9c:0a:c5:18:22:50:41:8a:ed:4a:c5:fe:6b:b4:
18:5f:6a:c0:66:76:4d:20:86:e9:dd:ce:7c:48:8a:
2c:7b:34:59:f0:2e:73:8c:f5:ee:9c:1c:96:4b:6c:
0a:43:80:45:6c:fa:e1:8f:d6:cb:a6:b5:fd:c3:0c:
3f:a7:b2:9a:b2:a6:eb:15:2c:d0:c8:68:52:bc:c6:
57:a1:2c:39:37:68:34:79:b5:7c:18:34:c4:9a:88:
a3:05:db:8f:d8:12:42:38:f7:ac:f1:0e:c3:12:b7:
a6:06:bf:4f:41:f4:35:19:af:30:d6:60:3f:21:ed:
51:5f:fa:3e:40:3f:6b:aa:65:45:88:3e:28:20:56:
fc:55:f5:ed:c5:a5:50:96:a0:0a:15:8c:22:d0:d8:
73:80:62:f6:8f:d5:04:e9:ef:bc:1f:6b:89:92:79:
e1:e7:2a:47:75:ed:61:37:8c:05:c0:04:8b:f3:85:
dc:63:d9:36:8e:19:bf:4f:b0:8e:b1:15:92:39:d8:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:66:CB:B9:CD:A9:7F:66:56:72:33:73:60:CC:53:D1:84:D3:64
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:39:2e:12:2e:a4:87:9f:41:3b:17:b5:37:1b:ca:e1:9d:99:
d1:66:74:9a:3f:b1:00:d9:34:aa:da:03:d7:10:b7:7a:5b:8c:
16:77:f9:41:87:e3:8f:c6:f1:2e:3e:56:ba:82:15:92:c1:f0:
a1:ff:59:b0:ea:f4:b5:f6:c9:1b:e7:cb:55:46:8e:05:10:a2:
70:21:6f:47:7e:44:e2:09:fb:93:8b:49:af:a6:57:2f:bf:82:
ec:62:eb:7a:13:a5:80:ac:cc:08:a3:a1:1d:a5:6d:d9:32:b4:
e5:29:8e:bc:a3:d4:b1:42:75:f7:dd:d2:de:d9:82:58:20:57:
27:50:ff:4b:57:5b:7d:5a:6d:5a:e6:80:c0:4e:83:70:b5:a9:
a3:22:1c:61:cc:f5:66:69:b2:ea:31:b1:07:a3:d3:ac:96:50:
e0:6c:ee:39:8f:f4:37:4b:b8:ae:be:78:34:5a:1b:ff:f4:d8:
b1:2a:3f:87:26:e6:44:f3:a6:0c:d5:8d:07:76:ac:9f:77:52:
fd:7a:e6:5c:1d:eb:c0:38:d4:83:09:cc:c6:73:f7:8a:f8:cd:
21:ce:05:bf:0e:db:38:e6:28:b3:28:84:66:80:f3:cd:14:6d:
c4:ce:5b:7e:47:4d:c8:50:06:42:c1:d2:67:c5:2b:90:50:3f:
4e:20:9c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3Mi7X5SfT1cm0WALpFC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3
YjhiNGYwHhcNMjUwNDIxMDEwMDU0WhcNMjUwNDIyMDEwMDU0WjAzMTEwLwYDVQQD
EyhjZDFmNjZjYmI5Y2RhOTdmNjY1NjcyMzM3MzYwY2M1M2QxODRkMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNNuFfc3kDNJ5EtXKpwZESGO2NuG
Bd0/yyURMfcOoW05m0tAMPNJwRD42dRoxaUy686l0s7AMuilUDr0nArFGCJQQYrt
SsX+a7QYX2rAZnZNIIbp3c58SIosezRZ8C5zjPXunByWS2wKQ4BFbPrhj9bLprX9
www/p7KasqbrFSzQyGhSvMZXoSw5N2g0ebV8GDTEmoijBduP2BJCOPes8Q7DErem
Br9PQfQ1Ga8w1mA/Ie1RX/o+QD9rqmVFiD4oIFb8VfXtxaVQlqAKFYwi0NhzgGL2
j9UE6e+8H2uJknnh5ypHde1hN4wFwASL84XcY9k2jhm/T7COsRWSOdhInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0fZsu5zal/ZlZyM3NgzFPRhNNkMB8GA1UdIwQY
MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt
MGUyZWE2YTAyMTgyLzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy
LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDkuEi6k
h59BOxe1NxvK4Z2Z0WZ0mj+xANk0qtoD1xC3eluMFnf5QYfjj8bxLj5WuoIVksHw
of9ZsOr0tfbJG+fLVUaOBRCicCFvR35E4gn7k4tJr6ZXL7+C7GLrehOlgKzMCKOh
HaVt2TK05SmOvKPUsUJ1993S3tmCWCBXJ1D/S1dbfVptWuaAwE6DcLWpoyIcYcz1
Zmmy6jGxB6PTrJZQ4GzuOY/0N0u4rr54NFob//TYsSo/hybmRPOmDNWNB3asn3dS
/XrmXB3rwDjUgwnMxnP3ivjNIc4Fvw7bOOYosyiEZoDzzRRtxM5bfkdNyFAGQsHS
Z8UrkFA/TiCcPw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:17:25 2025 by rpki-client