Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier: mURvFk5736ezhFbFfTDZXQ8fL5T+bpPgDjYTYfTq2LI=
Subject key identifier: 68:F2:4A:83:49:AB:3B:92:AA:50:50:88:87:65:96:72:AC:73:15:22
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial: 0194C38770B1EE9B336E1158EB9D22D35059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number: 0510
Signing time: Sat 01 Feb 2025 22:00:20 +0000
Manifest this update: Sat 01 Feb 2025 22:00:20 +0000
Manifest next update: Sun 02 Feb 2025 22:00:20 +0000
Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: ipILsuniJV8pStMX19LVoaHVetAaah4HOjX+gwhZGgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:70:b1:ee:9b:33:6e:11:58:eb:9d:22:d3:50:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Validity
Not Before: Feb 1 22:00:20 2025 GMT
Not After : Feb 2 22:00:20 2025 GMT
Subject: CN=68f24a8349ab3b92aa50508887659672ac731522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:10:b0:6b:5c:d7:a4:00:17:e4:85:7c:03:
d8:21:1f:5c:85:97:e7:26:68:f7:30:cb:9c:70:d9:
25:a9:70:fb:23:6e:76:1f:5a:67:7b:43:84:9e:58:
58:33:68:9f:fc:7f:d3:bd:1f:65:2e:8d:d5:79:06:
13:38:0d:5a:ba:05:db:9d:62:cb:fe:66:4b:6f:09:
8c:79:c3:e3:11:3e:53:01:fe:50:74:7a:6e:1c:43:
d9:26:7c:1d:df:5c:e7:85:61:81:d1:9c:21:80:f3:
0b:eb:20:e8:15:89:c4:3b:88:bf:55:78:87:29:76:
ef:a7:78:e8:4b:4e:44:19:20:82:2c:e6:9e:2a:8a:
3b:0a:69:a1:37:9c:3b:f0:e5:48:00:7e:64:e5:b5:
8e:59:2a:89:48:db:05:73:00:c9:1a:e1:ff:52:b9:
0b:66:7d:4a:96:60:55:ea:59:99:bb:7a:3d:49:35:
98:94:f8:e9:27:cb:93:9b:45:5b:4c:88:1c:a5:d4:
f8:6b:d8:87:85:67:f7:b2:53:ee:4b:82:96:86:63:
b6:08:1a:c3:6e:a3:a5:25:27:ee:c3:74:9e:3f:71:
a9:8b:62:b8:a9:ae:45:12:1f:ea:3b:46:3b:cb:08:
dd:d0:fa:3d:b4:67:c9:e3:eb:a5:a2:fc:68:fe:25:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:4A:83:49:AB:3B:92:AA:50:50:88:87:65:96:72:AC:73:15:22
X509v3 Authority Key Identifier:
keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c4:d8:34:fe:e1:98:2f:85:af:1c:46:09:ab:61:b1:70:0f:
a5:27:5c:22:12:1a:f8:81:f6:c1:12:9f:a5:e7:e9:58:b6:49:
b1:8f:70:81:a7:26:bb:26:a8:be:c6:5d:24:fd:99:46:02:52:
8f:24:d8:dd:10:0c:d5:10:76:3d:a2:8a:5c:79:16:91:d7:f2:
57:db:91:36:af:59:ee:65:32:c5:7b:cc:7a:9d:44:22:31:6f:
81:a1:64:b2:17:9a:63:5c:e4:be:76:46:96:21:e9:5d:7f:94:
5d:0b:8a:5a:de:e6:78:ac:8b:80:22:b5:60:eb:6c:bf:e7:2c:
11:8f:fe:0e:12:b0:2a:77:de:3a:f6:78:88:47:2c:84:36:36:
a1:22:94:37:4a:c2:f4:9b:2a:d1:38:9c:d7:45:d0:92:ea:4c:
89:1f:b0:4c:8e:81:ef:39:9d:49:59:6a:ba:0b:f7:4a:4c:73:
e9:c1:ed:28:71:b1:ba:6b:ef:a7:0d:a9:17:ae:12:7a:84:a6:
be:7a:0f:0f:34:58:96:ea:5e:be:73:6e:d7:f2:9d:02:b2:0f:
b1:b7:db:bd:db:cb:87:82:d8:c0:07:67:16:95:82:50:f7:f5:
8b:44:64:15:42:4c:25:cb:ac:e3:83:05:bb:d3:31:86:a8:e6:
af:63:f0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh3Cx7pszbhFY650i01BZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTQ4YmZmYjMyMTQ5OTFhOWNhN2M5ZjBmNWI0ODU0NTg4
Yjk3NWUwHhcNMjUwMjAxMjIwMDIwWhcNMjUwMjAyMjIwMDIwWjAzMTEwLwYDVQQD
Eyg2OGYyNGE4MzQ5YWIzYjkyYWE1MDUwODg4NzY1OTY3MmFjNzMxNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm8QsGtc16QAF+SFfAPYIR9chZfn
Jmj3MMuccNklqXD7I252H1pne0OEnlhYM2if/H/TvR9lLo3VeQYTOA1augXbnWLL
/mZLbwmMecPjET5TAf5QdHpuHEPZJnwd31znhWGB0ZwhgPML6yDoFYnEO4i/VXiH
KXbvp3joS05EGSCCLOaeKoo7CmmhN5w78OVIAH5k5bWOWSqJSNsFcwDJGuH/UrkL
Zn1KlmBV6lmZu3o9STWYlPjpJ8uTm0VbTIgcpdT4a9iHhWf3slPuS4KWhmO2CBrD
bqOlJSfuw3SeP3Gpi2K4qa5FEh/qO0Y7ywjd0Po9tGfJ4+ulovxo/iWn9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjySoNJqzuSqlBQiIdllnKscxUiMB8GA1UdIwQY
MBaAFE1Ui/+zIUmRqcp8nw9bSFRYi5deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83ZjQ5ZGYtMjcyMi00NWQxLTlkOWIt
OTc1OWY5YTc5YWNlLzEvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83ZjQ5ZGYtMjcyMi00NWQxLTlkOWItOTc1OWY5YTc5YWNl
LzEvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMTYNP7h
mC+FrxxGCathsXAPpSdcIhIa+IH2wRKfpefpWLZJsY9wgacmuyaovsZdJP2ZRgJS
jyTY3RAM1RB2PaKKXHkWkdfyV9uRNq9Z7mUyxXvMep1EIjFvgaFksheaY1zkvnZG
liHpXX+UXQuKWt7meKyLgCK1YOtsv+csEY/+DhKwKnfeOvZ4iEcshDY2oSKUN0rC
9Jsq0Tic10XQkupMiR+wTI6B7zmdSVlqugv3Skxz6cHtKHGxumvvpw2pF64SeoSm
vnoPDzRYlupevnNu1/KdArIPsbfbvdvLh4LYwAdnFpWCUPf1i0RkFUJMJcus44MF
u9Mxhqjmr2PwWw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:16 2025 by rpki-client