Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: pPsmVnJ4DpOaN32524nM3fFEGi8IiIX6NAksR60dr/w=
Subject key identifier: 7E:81:E6:91:DE:85:5A:1E:17:83:AD:D0:33:4B:3B:91:EA:E8:45:D3
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 01964BFD84E02718A77D77A9BFBCE32F148A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0924
Signing time: Sat 19 Apr 2025 03:00:27 +0000
Manifest this update: Sat 19 Apr 2025 03:00:27 +0000
Manifest next update: Sun 20 Apr 2025 03:00:27 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: EZN2s76cthtqcpudAp+GBF8h7HOQA2qlGsDLypWxK+g=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:84:e0:27:18:a7:7d:77:a9:bf:bc:e3:2f:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Apr 19 03:00:27 2025 GMT
Not After : Apr 20 03:00:27 2025 GMT
Subject: CN=7e81e691de855a1e1783add0334b3b91eae845d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:45:e6:7e:51:a5:2f:9b:d2:5d:6b:28:ba:
29:a3:0d:28:44:89:53:41:71:69:db:1d:85:ce:44:
8a:15:5d:72:5a:4f:93:1d:3e:b2:98:3c:13:65:59:
9b:3f:12:f0:04:4c:14:fe:82:ff:09:3f:95:00:06:
3c:d6:26:04:8f:be:8d:18:d8:75:0e:9b:9d:2f:d9:
6f:83:a8:b5:64:10:7f:81:ca:0d:73:34:49:f4:db:
f4:3e:3d:19:0e:79:c6:cf:ba:f1:c9:ea:ff:73:1f:
92:91:93:ac:9a:b5:56:19:ed:ff:59:df:ce:e1:ca:
58:bf:16:32:dd:71:e1:28:a2:9c:64:e0:51:bf:6f:
c8:ca:4d:dc:35:fc:e3:7d:36:55:8a:b9:e7:31:90:
7c:af:7a:f6:0f:d2:2f:a4:ec:f5:fb:bd:0b:3b:50:
de:b3:bc:bf:57:6b:e9:84:27:7c:de:35:48:41:d7:
22:63:97:f6:34:11:e0:d9:b2:58:1e:48:f3:b1:50:
20:d4:21:c3:a4:b8:49:6b:2f:7b:2c:04:1c:19:03:
e3:8c:59:4a:ff:bf:7d:cf:03:14:89:c5:ad:cf:75:
2b:a7:89:af:17:4f:c0:2f:71:45:cc:c7:66:55:e0:
4a:f5:b0:5b:24:49:34:c7:47:58:ac:02:d5:ad:03:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:81:E6:91:DE:85:5A:1E:17:83:AD:D0:33:4B:3B:91:EA:E8:45:D3
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:31:cf:f7:f0:37:a7:32:55:29:fa:1d:72:ea:cb:88:9c:cf:
21:af:3a:d2:73:0f:e1:53:1d:d9:33:2a:d8:70:c2:dc:d7:87:
e3:e2:8d:b5:f3:e7:d6:ea:c4:e2:b9:5c:5f:7a:39:f8:f3:f5:
51:fc:f7:54:cc:50:c3:c1:4e:82:2c:b2:62:d4:aa:33:1b:5d:
d1:ea:5b:26:81:f8:a6:5f:70:5b:bd:3f:6c:76:3f:ac:f5:b2:
34:c0:5a:f5:43:31:7c:94:4f:5d:4c:22:48:6e:f6:61:e3:90:
4b:27:a6:5a:fa:05:96:89:53:05:ea:e1:64:49:6c:de:8d:ab:
65:45:82:7c:87:3f:46:7c:9e:1a:f3:a7:5c:62:b6:54:c4:7d:
4f:0c:6a:c2:6b:49:c1:6e:3f:8d:9c:80:bf:0b:d6:14:7c:38:
2b:5d:b7:a0:c4:29:b9:30:33:77:a9:7b:12:97:62:0e:e1:69:
9b:04:15:19:57:d5:32:67:9f:94:6a:d9:80:f4:a4:a0:50:5f:
91:9b:4a:f6:06:0d:88:d9:a8:64:de:e4:c4:1d:5e:aa:9b:ac:
f9:3c:8c:85:30:15:3e:47:e9:01:38:0a:44:ac:ff:83:37:95:
a4:f4:ce:d1:f7:f4:5d:73:36:97:c8:9d:07:5e:61:e9:80:70:
e4:d5:0a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/YTgJxinfXepv7zjLxSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw
MDRmODUwHhcNMjUwNDE5MDMwMDI3WhcNMjUwNDIwMDMwMDI3WjAzMTEwLwYDVQQD
Eyg3ZTgxZTY5MWRlODU1YTFlMTc4M2FkZDAzMzRiM2I5MWVhZTg0NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5lF5n5RpS+b0l1rKLopow0oRIlT
QXFp2x2FzkSKFV1yWk+THT6ymDwTZVmbPxLwBEwU/oL/CT+VAAY81iYEj76NGNh1
DpudL9lvg6i1ZBB/gcoNczRJ9Nv0Pj0ZDnnGz7rxyer/cx+SkZOsmrVWGe3/Wd/O
4cpYvxYy3XHhKKKcZOBRv2/Iyk3cNfzjfTZVirnnMZB8r3r2D9IvpOz1+70LO1De
s7y/V2vphCd83jVIQdciY5f2NBHg2bJYHkjzsVAg1CHDpLhJay97LAQcGQPjjFlK
/799zwMUicWtz3Urp4mvF0/AL3FFzMdmVeBK9bBbJEk0x0dYrALVrQMGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6B5pHehVoeF4Ot0DNLO5Hq6EXTMB8GA1UdIwQY
MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt
YmRmOTRhM2ZiMzJkLzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk
LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDHP9/A3
pzJVKfodcurLiJzPIa860nMP4VMd2TMq2HDC3NeH4+KNtfPn1urE4rlcX3o5+PP1
Ufz3VMxQw8FOgiyyYtSqMxtd0epbJoH4pl9wW70/bHY/rPWyNMBa9UMxfJRPXUwi
SG72YeOQSyemWvoFlolTBerhZEls3o2rZUWCfIc/RnyeGvOnXGK2VMR9TwxqwmtJ
wW4/jZyAvwvWFHw4K123oMQpuTAzd6l7EpdiDuFpmwQVGVfVMmeflGrZgPSkoFBf
kZtK9gYNiNmoZN7kxB1eqpus+TyMhTAVPkfpATgKRKz/gzeVpPTO0ff0XXM2l8id
B15h6YBw5NUK4A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:00:29 2025 by rpki-client