Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: MJc5wIu92QAq7czeF2yiE6fJMcTOFlzY7CGpgIbqlNU=
Subject key identifier: 69:56:37:E3:F5:21:E7:EC:FE:D6:18:0B:6F:E0:53:2B:9B:94:87:82
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019510FDD2FC93F728C037216B2194148BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 23:00:24 +0000
Manifest this update: Sun 16 Feb 2025 23:00:24 +0000
Manifest next update: Mon 17 Feb 2025 23:00:24 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: Xjfge2PqfAQqXOIq2nUhsjq+41PDGY7Kl24SMlUTTnU=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d2:fc:93:f7:28:c0:37:21:6b:21:94:14:8b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Feb 16 23:00:24 2025 GMT
Not After : Feb 17 23:00:24 2025 GMT
Subject: CN=695637e3f521e7ecfed6180b6fe0532b9b948782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7e:14:27:52:ae:7d:38:d1:e3:92:0b:6c:c3:
f9:64:75:a7:61:6b:61:de:df:d4:a5:95:45:20:a8:
76:4e:5e:f6:a4:e8:b0:5a:e2:e5:8e:a0:58:5f:b6:
ff:57:0a:a9:a7:fe:4a:45:4c:52:ff:cb:36:12:58:
f0:08:82:88:f8:9d:e2:15:45:73:f3:d8:b5:e9:5b:
0a:43:49:4c:6a:3e:40:ed:ec:c7:95:f0:36:cd:ef:
52:b5:2a:55:ce:60:16:74:1a:12:ac:ca:52:49:a2:
a7:35:75:7c:65:e4:cd:39:3e:2f:74:56:04:31:94:
78:e5:0c:4d:12:cb:06:90:60:af:96:cd:5f:40:99:
fd:c7:80:fa:6d:b2:4b:76:7e:15:c2:95:c7:c1:ca:
94:64:aa:f8:bf:aa:50:16:fd:dd:a9:58:db:53:35:
37:64:79:f4:91:60:de:59:cb:a0:af:f5:92:e8:b1:
47:ff:08:a3:76:19:0c:62:aa:30:c8:33:62:92:96:
a9:7f:98:68:9a:23:0d:56:da:02:17:67:66:35:61:
b2:c0:9b:73:2e:c1:84:4e:78:19:f5:92:0d:7f:52:
71:b3:0f:a9:a7:56:cc:c7:af:05:34:86:18:b8:8d:
ff:57:1f:7f:3f:75:1d:c5:a4:43:41:7e:63:42:60:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:56:37:E3:F5:21:E7:EC:FE:D6:18:0B:6F:E0:53:2B:9B:94:87:82
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:80:82:3c:c4:2d:55:af:f1:1c:51:11:ee:79:ac:af:ae:
a2:0b:c7:a4:ee:d1:16:e7:56:0e:87:99:37:f2:42:72:be:3c:
58:8d:d4:f9:2c:72:10:92:2c:75:2a:52:f3:43:8f:5a:b0:ed:
6c:c4:26:37:c3:36:4c:dd:a6:73:2a:05:45:02:15:32:f9:25:
78:b3:a8:42:f2:9c:26:7b:10:65:be:15:1b:0c:5d:63:a2:38:
0f:e2:a0:45:e1:bf:10:4c:bc:fc:88:e0:e8:de:79:07:99:82:
cf:13:c8:f3:ce:e6:27:ff:3d:27:4d:01:8b:e5:cb:2b:db:db:
0f:4b:22:b9:ee:fd:64:70:fb:8e:40:3a:54:aa:34:09:ec:ed:
06:a0:24:a0:5e:1e:28:40:51:f9:b5:b3:e0:23:07:df:5c:70:
2b:22:3d:13:d7:c0:2b:83:71:7a:cc:ef:48:01:d3:b1:bb:f0:
79:e0:26:4d:53:ad:62:64:a1:7f:9c:2c:08:36:f6:ef:8f:bb:
a3:b3:aa:4e:b5:31:42:29:a5:fe:fc:a7:12:11:3b:19:09:d2:
7a:09:af:b9:4f:55:68:40:c3:6f:9a:b7:b2:65:ba:50:7c:10:
6e:d8:37:9c:8a:92:01:19:41:64:e8:d0:da:b8:d6:c3:bc:9b:
db:92:58:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/dL8k/cowDchayGUFIuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2
YjIzNzgwHhcNMjUwMjE2MjMwMDI0WhcNMjUwMjE3MjMwMDI0WjAzMTEwLwYDVQQD
Eyg2OTU2MzdlM2Y1MjFlN2VjZmVkNjE4MGI2ZmUwNTMyYjliOTQ4NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n4UJ1KufTjR45ILbMP5ZHWnYWth
3t/UpZVFIKh2Tl72pOiwWuLljqBYX7b/Vwqpp/5KRUxS/8s2EljwCIKI+J3iFUVz
89i16VsKQ0lMaj5A7ezHlfA2ze9StSpVzmAWdBoSrMpSSaKnNXV8ZeTNOT4vdFYE
MZR45QxNEssGkGCvls1fQJn9x4D6bbJLdn4VwpXHwcqUZKr4v6pQFv3dqVjbUzU3
ZHn0kWDeWcugr/WS6LFH/wijdhkMYqowyDNikpapf5homiMNVtoCF2dmNWGywJtz
LsGETngZ9ZINf1Jxsw+pp1bMx68FNIYYuI3/Vx9/P3UdxaRDQX5jQmCmiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlWN+P1Iefs/tYYC2/gUyublIeCMB8GA1UdIwQY
MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt
NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz
LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuSAgjzE
LVWv8RxREe55rK+uogvHpO7RFudWDoeZN/JCcr48WI3U+SxyEJIsdSpS80OPWrDt
bMQmN8M2TN2mcyoFRQIVMvkleLOoQvKcJnsQZb4VGwxdY6I4D+KgReG/EEy8/Ijg
6N55B5mCzxPI887mJ/89J00Bi+XLK9vbD0siue79ZHD7jkA6VKo0CeztBqAkoF4e
KEBR+bWz4CMH31xwKyI9E9fAK4NxeszvSAHTsbvweeAmTVOtYmShf5wsCDb274+7
o7OqTrUxQiml/vynEhE7GQnSegmvuU9VaEDDb5q3smW6UHwQbtg3nIqSARlBZOjQ
2rjWw7yb25JYuw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:28 2025 by rpki-client