Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: B2BKC0mno48qPeh6AAyKGh+vrxrOjwQCrSrad9Oznk0=
Subject key identifier: BB:B7:E8:88:68:E3:EE:BE:76:18:4B:95:46:F4:4F:71:E2:98:E1:EA
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 01964E23372BA5EC5AB5F737A582CDABB739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 148C
Signing time: Sat 19 Apr 2025 13:00:52 +0000
Manifest this update: Sat 19 Apr 2025 13:00:52 +0000
Manifest next update: Sun 20 Apr 2025 13:00:52 +0000
Files and hashes: 1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: tmskwFz6XCT7Cb26F7Vjtoig32C8XDD5Ewqu4G2nZjo=)
2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:37:2b:a5:ec:5a:b5:f7:37:a5:82:cd:ab:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Apr 19 13:00:52 2025 GMT
Not After : Apr 20 13:00:52 2025 GMT
Subject: CN=bbb7e88868e3eebe76184b9546f44f71e298e1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:55:d8:fb:7e:16:a4:5d:68:93:3b:0a:28:e6:
5d:cc:e1:83:98:e3:df:e7:f8:4d:da:7c:7c:89:37:
51:aa:f9:d8:14:29:21:09:90:dc:68:b5:fb:91:e9:
e7:03:66:a4:4a:77:d2:18:ee:f4:a2:76:d3:5b:11:
e8:63:62:d1:3f:fc:27:a6:2d:f5:de:fa:a9:0b:97:
24:81:ae:93:4c:ba:36:a4:ce:74:17:bb:cb:cf:cc:
97:9a:b5:f9:d2:57:42:e4:33:30:a1:7c:3c:0c:a8:
bb:7d:19:78:fe:65:c0:05:81:b5:00:c7:25:48:9a:
67:60:58:78:07:ca:ed:8e:bb:78:dc:70:77:18:50:
ae:b9:89:70:6f:7f:5f:93:bd:43:67:61:5c:02:8d:
f2:6c:29:2c:d8:0f:1b:e6:e9:b0:16:1d:55:13:f4:
41:84:df:a8:9c:d4:9c:8a:26:38:19:8c:fd:e5:1a:
20:da:67:70:da:50:08:0f:00:92:90:f0:a6:26:db:
d6:45:29:6b:3d:3d:64:c6:67:ce:90:c7:62:b0:40:
38:3b:bf:71:f7:37:3e:b6:9e:32:ac:e6:6d:cc:5f:
b5:73:66:0b:84:af:d6:73:4a:99:86:fe:c6:82:4b:
58:ca:05:34:4d:2b:d1:fc:63:fd:72:8e:d0:97:a5:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B7:E8:88:68:E3:EE:BE:76:18:4B:95:46:F4:4F:71:E2:98:E1:EA
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:38:c8:38:4f:f0:df:18:84:b7:5a:3a:fb:5a:65:e6:4c:a8:
19:e6:a6:fc:3c:87:30:8e:0f:52:95:ae:26:86:24:54:1c:50:
f5:6b:a2:7c:bd:c5:b9:cc:6d:fa:2f:91:cf:61:1b:e2:07:5e:
cd:49:35:c4:31:89:5c:a8:89:f9:8e:cc:01:54:1c:0d:f6:a3:
87:c5:75:af:06:33:67:3b:a2:12:c3:00:da:77:3f:ac:6e:1e:
89:91:d4:1b:18:09:1b:b2:47:31:6d:b7:ac:4e:f6:86:8a:9f:
ad:2d:be:6d:31:6f:6d:5e:bc:1a:7b:92:e7:7a:d4:94:dd:14:
74:4f:6b:e0:4c:57:3e:fe:6d:b9:72:e0:9f:1d:3a:4f:d9:3f:
f9:3d:b6:6e:68:93:c8:0e:94:2d:6d:97:e7:f3:68:fb:93:41:
a9:00:11:18:97:24:74:6f:dd:75:5e:b9:c1:e6:ae:65:e9:60:
e4:5a:7c:a9:e1:ed:28:67:e0:41:18:59:90:a0:de:b7:8e:e9:
33:2a:46:82:14:54:1e:9b:fc:2f:a3:c1:fb:da:04:e7:5a:ec:
95:82:69:57:25:9b:7d:ac:61:90:a8:79:d6:d4:5a:af:d0:bb:
7b:23:98:6d:1b:84:7d:95:80:b5:cf:a9:43:b8:0a:98:ca:f3:
da:fb:da:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOIzcrpexatfc3pYLNq7c5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTUwOWIzNTAxMWVkNzE2NjM5NTJiYTBlMGMzYzM4NDU3
ZjlkMDcwHhcNMjUwNDE5MTMwMDUyWhcNMjUwNDIwMTMwMDUyWjAzMTEwLwYDVQQD
EyhiYmI3ZTg4ODY4ZTNlZWJlNzYxODRiOTU0NmY0NGY3MWUyOThlMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51XY+34WpF1okzsKKOZdzOGDmOPf
5/hN2nx8iTdRqvnYFCkhCZDcaLX7kennA2akSnfSGO70onbTWxHoY2LRP/wnpi31
3vqpC5ckga6TTLo2pM50F7vLz8yXmrX50ldC5DMwoXw8DKi7fRl4/mXABYG1AMcl
SJpnYFh4B8rtjrt43HB3GFCuuYlwb39fk71DZ2FcAo3ybCks2A8b5umwFh1VE/RB
hN+onNSciiY4GYz95Rog2mdw2lAIDwCSkPCmJtvWRSlrPT1kxmfOkMdisEA4O79x
9zc+tp4yrOZtzF+1c2YLhK/Wc0qZhv7GgktYygU0TSvR/GP9co7Ql6U4dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu36Iho4+6+dhhLlUb0T3HimOHqMB8GA1UdIwQY
MBaAFEylCbNQEe1xZjlSug4MPDhFf50HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODIt
MGIwYzEyYjIyYmY5LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODItMGIwYzEyYjIyYmY5
LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTjIOE/w
3xiEt1o6+1pl5kyoGeam/DyHMI4PUpWuJoYkVBxQ9WuifL3Fucxt+i+Rz2Eb4gde
zUk1xDGJXKiJ+Y7MAVQcDfajh8V1rwYzZzuiEsMA2nc/rG4eiZHUGxgJG7JHMW23
rE72hoqfrS2+bTFvbV68GnuS53rUlN0UdE9r4ExXPv5tuXLgnx06T9k/+T22bmiT
yA6ULW2X5/No+5NBqQARGJckdG/ddV65weauZelg5Fp8qeHtKGfgQRhZkKDet47p
MypGghRUHpv8L6PB+9oE51rslYJpVyWbfaxhkKh51tRar9C7eyOYbRuEfZWAtc+p
Q7gKmMrz2vvaLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:09 2025 by rpki-client