Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: QTBLQxzTv5n1BmwLkE0PFg2mrSm4tcwNFyobJMjIKv4=
Subject key identifier: 18:32:A8:0D:DB:2C:49:EE:71:12:83:8D:98:90:39:4E:34:19:B5:C7
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 0196515B7B41D9AFD21396CCC1424EC611FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 0E78
Signing time: Sun 20 Apr 2025 04:01:11 +0000
Manifest this update: Sun 20 Apr 2025 04:01:11 +0000
Manifest next update: Mon 21 Apr 2025 04:01:11 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: OGJ9wNwv/6/+hiafblv+2HywwEPw9ur32anwvxqJ9Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:7b:41:d9:af:d2:13:96:cc:c1:42:4e:c6:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Apr 20 04:01:11 2025 GMT
Not After : Apr 21 04:01:11 2025 GMT
Subject: CN=1832a80ddb2c49ee7112838d9890394e3419b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:d4:89:47:12:76:42:43:56:e4:19:55:14:
c4:ea:04:bd:3c:ef:74:4c:7a:19:cf:9b:8e:12:4d:
db:c7:84:04:78:30:d1:f5:36:b7:1e:19:63:d1:75:
0c:16:bd:88:08:b2:e1:ac:34:05:f1:77:1c:58:cf:
0f:05:dd:a9:84:e9:59:c3:be:ff:4c:e4:eb:b9:be:
52:5c:40:3e:34:15:63:9b:e5:14:d5:d7:a1:93:23:
cc:a6:5e:77:c9:4a:38:e0:9f:25:d0:59:ad:9f:e5:
6f:af:21:19:a4:b3:9f:ae:91:94:cc:50:27:56:9f:
84:22:2a:68:b7:43:fb:b7:11:58:b4:47:87:fe:23:
13:05:95:91:62:da:75:2e:a7:32:cf:ec:3f:7b:a5:
2c:9f:19:9f:40:4c:3a:2d:71:fa:a0:12:31:23:7e:
50:62:e9:9c:e2:87:63:a3:4d:6e:d6:dc:de:ff:13:
f4:0b:27:66:52:61:62:cf:01:06:65:80:16:63:c4:
e6:bf:da:b7:de:6f:34:32:30:1b:ec:ed:06:e6:6a:
29:17:01:71:d3:e3:1e:be:5d:59:9e:2f:2c:7d:1e:
02:6e:09:c8:6d:38:ae:3d:8a:82:9e:0b:1a:bd:55:
d4:ac:8b:1a:10:c6:76:6e:6a:d7:37:8a:59:2d:bf:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:32:A8:0D:DB:2C:49:EE:71:12:83:8D:98:90:39:4E:34:19:B5:C7
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d6:96:46:30:29:80:e7:1e:d2:5c:7a:32:ba:e1:8f:65:1b:
ca:44:21:d2:e2:88:a6:4c:d5:d6:85:9e:fa:17:b7:a4:00:98:
61:74:60:c3:a2:35:0f:bf:20:72:88:ab:a2:da:a6:07:91:c2:
f3:bb:0f:0e:18:a0:52:db:02:da:72:54:57:d0:15:96:46:32:
1a:d6:5a:89:7b:85:24:17:db:32:86:ec:cf:8c:d1:ed:e9:c9:
6d:43:b5:e1:40:c2:96:da:eb:b9:4a:ed:fa:4f:7d:cc:35:ab:
a7:f2:6d:12:1f:9e:22:b4:67:59:f1:72:f0:4e:e4:55:0e:ff:
a9:81:f0:3c:c1:98:9e:c1:93:72:e7:09:b6:d7:70:c9:bc:f6:
11:fd:52:5a:03:38:fe:df:64:43:8a:db:e5:88:ff:fa:01:b4:
0a:3d:43:5a:92:14:c8:fd:6a:3b:77:11:ff:65:7f:23:b6:97:
f4:ff:bb:bc:c9:9d:6c:d2:97:ee:d2:9d:43:de:92:5c:b5:04:
e1:31:72:12:46:73:a5:43:95:e0:73:fb:cf:50:88:b5:67:2f:
0f:b6:fb:88:8a:68:79:63:31:91:ec:81:34:6f:4b:7d:6a:04:
3a:51:f1:87:03:52:64:f7:b6:9c:6c:53:86:e0:15:e7:0c:5a:
1d:b1:f8:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRW3tB2a/SE5bMwUJOxhH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmMzZjAyMzIzMDNmNWIwMzc3NDVlYzUzYTY2YzczODI1
NmJmNDMwHhcNMjUwNDIwMDQwMTExWhcNMjUwNDIxMDQwMTExWjAzMTEwLwYDVQQD
EygxODMyYTgwZGRiMmM0OWVlNzExMjgzOGQ5ODkwMzk0ZTM0MTliNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJvUiUcSdkJDVuQZVRTE6gS9PO90
THoZz5uOEk3bx4QEeDDR9Ta3Hhlj0XUMFr2ICLLhrDQF8XccWM8PBd2phOlZw77/
TOTrub5SXEA+NBVjm+UU1dehkyPMpl53yUo44J8l0Fmtn+VvryEZpLOfrpGUzFAn
Vp+EIipot0P7txFYtEeH/iMTBZWRYtp1Lqcyz+w/e6UsnxmfQEw6LXH6oBIxI35Q
Yumc4odjo01u1tze/xP0CydmUmFizwEGZYAWY8Tmv9q33m80MjAb7O0G5mopFwFx
0+Mevl1Zni8sfR4CbgnIbTiuPYqCngsavVXUrIsaEMZ2bmrXN4pZLb8K9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgyqA3bLEnucRKDjZiQOU40GbXHMB8GA1UdIwQY
MBaAFLS8PwIyMD9bA3dF7FOmbHOCVr9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgt
OGY5ZTIzYzYwNjA2LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgtOGY5ZTIzYzYwNjA2
LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtaWRjAp
gOce0lx6Mrrhj2UbykQh0uKIpkzV1oWe+he3pACYYXRgw6I1D78gcoirotqmB5HC
87sPDhigUtsC2nJUV9AVlkYyGtZaiXuFJBfbMobsz4zR7enJbUO14UDCltrruUrt
+k99zDWrp/JtEh+eIrRnWfFy8E7kVQ7/qYHwPMGYnsGTcucJttdwybz2Ef1SWgM4
/t9kQ4rb5Yj/+gG0Cj1DWpIUyP1qO3cR/2V/I7aX9P+7vMmdbNKX7tKdQ96SXLUE
4TFyEkZzpUOV4HP7z1CItWcvD7b7iIpoeWMxkeyBNG9LfWoEOlHxhwNSZPe2nGxT
huAV5wxaHbH4GQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:16:08 2025 by rpki-client