Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: jR97mw5oZ1lhGSxI2pFUWHuXXtuI2GBnImMZP/EtHHs=
Subject key identifier: 3E:01:96:8B:3C:86:26:04:1E:E0:58:62:D5:C5:1E:90:41:33:85:BB
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 0196591561A54A6241CA2C49AD63F1ABFE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 0EBD
Signing time: Mon 21 Apr 2025 16:01:35 +0000
Manifest this update: Mon 21 Apr 2025 16:01:35 +0000
Manifest next update: Tue 22 Apr 2025 16:01:35 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: J6027DG+Twgm7vf2i/krO/0VjKed77InvxFd40WEAEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:61:a5:4a:62:41:ca:2c:49:ad:63:f1:ab:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Apr 21 16:01:35 2025 GMT
Not After : Apr 22 16:01:35 2025 GMT
Subject: CN=3e01968b3c8626041ee05862d5c51e90413385bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:75:b5:bf:18:5e:f1:1c:30:5c:2e:36:48:
30:01:89:50:8f:b4:b2:99:58:c0:6a:85:3a:b7:73:
80:57:df:03:92:13:78:aa:b9:5d:e2:eb:75:a1:99:
86:32:28:41:bd:c7:61:06:52:ff:ee:7a:94:f5:e8:
8a:5a:ac:3e:94:55:b3:ef:b6:06:e9:e2:46:c1:31:
a7:dd:b8:dc:18:43:27:8b:32:42:f6:8d:4a:c3:79:
88:01:a7:ad:85:4a:c1:26:89:94:47:54:87:5e:7c:
06:b4:21:b6:76:9d:24:00:b9:b4:43:e3:4a:bf:a5:
bb:49:e8:f2:1e:9e:e9:94:98:a6:e2:83:40:c9:4c:
37:15:9a:f3:18:82:2f:44:8c:ba:7e:52:66:f3:91:
10:86:76:a3:ad:40:d1:5b:c4:13:e5:71:a5:10:11:
9b:86:b3:59:b8:d0:39:39:57:23:14:ee:ca:03:49:
cb:a6:21:57:81:01:df:aa:a3:00:5d:f9:b5:8c:8e:
b3:66:ae:26:f1:6d:c5:b8:40:8d:07:ae:44:15:f9:
62:10:99:27:ff:f4:1e:fa:72:dc:ea:14:88:73:f4:
d3:b2:90:63:ae:88:4c:2f:43:09:f8:f4:2d:a7:90:
f3:95:7f:fa:02:2b:38:bf:04:d0:da:09:aa:9a:37:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:01:96:8B:3C:86:26:04:1E:E0:58:62:D5:C5:1E:90:41:33:85:BB
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5e:66:41:08:1e:ca:f1:be:7d:d5:be:59:cd:33:9b:9e:75:
4f:09:77:98:04:c0:db:ef:f0:a7:6f:5e:99:6f:79:04:83:47:
c5:3a:57:38:a5:58:ec:67:69:e1:90:c3:1a:f7:d4:c3:68:87:
3c:73:b2:ac:ed:de:71:ab:aa:80:7c:c4:d1:0d:09:21:2d:c5:
ff:86:c6:9e:11:7b:87:11:f4:e8:c1:3f:c9:90:6c:b0:59:ce:
42:81:06:47:37:1d:17:04:c9:ed:f5:62:9a:7a:6e:a4:bb:5a:
36:ad:10:64:5c:8e:81:68:12:52:3d:9c:8f:c5:7c:80:35:1d:
ef:04:16:dc:e5:c8:81:c1:30:e3:46:52:e9:6d:e0:d7:a5:71:
88:57:cc:ae:42:fa:08:27:98:20:5d:be:fc:86:0b:8c:e2:79:
c6:39:c3:20:28:99:f1:eb:9d:99:69:82:62:ee:5b:86:43:0b:
16:55:06:84:ec:69:85:0e:fd:44:f9:51:dd:e7:e1:88:f7:24:
95:9f:9c:74:08:96:cd:10:8f:f1:99:ff:d0:22:3d:bc:d7:4d:
14:86:29:c8:63:2d:95:9b:ba:d9:d8:05:34:e8:25:85:50:04:
16:01:54:bf:36:97:d2:47:1b:42:e1:a7:c6:84:b8:4d:2a:d5:
e9:1a:27:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFWGlSmJByixJrWPxq/5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNWZkMmMzZGUxMDU5MzRjZjBmZjQ5ZDI2ZDlkYzg4NThj
ZTVkZDEwHhcNMjUwNDIxMTYwMTM1WhcNMjUwNDIyMTYwMTM1WjAzMTEwLwYDVQQD
EygzZTAxOTY4YjNjODYyNjA0MWVlMDU4NjJkNWM1MWU5MDQxMzM4NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz11tb8YXvEcMFwuNkgwAYlQj7Sy
mVjAaoU6t3OAV98DkhN4qrld4ut1oZmGMihBvcdhBlL/7nqU9eiKWqw+lFWz77YG
6eJGwTGn3bjcGEMnizJC9o1Kw3mIAaethUrBJomUR1SHXnwGtCG2dp0kALm0Q+NK
v6W7SejyHp7plJim4oNAyUw3FZrzGIIvRIy6flJm85EQhnajrUDRW8QT5XGlEBGb
hrNZuNA5OVcjFO7KA0nLpiFXgQHfqqMAXfm1jI6zZq4m8W3FuECNB65EFfliEJkn
//Qe+nLc6hSIc/TTspBjrohML0MJ+PQtp5DzlX/6Ais4vwTQ2gmqmjdZBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4Blos8hiYEHuBYYtXFHpBBM4W7MB8GA1UdIwQY
MBaAFExf0sPeEFk0zw/0nSbZ3IhYzl3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEt
MjA4NTY1YmIyZDYzLzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEtMjA4NTY1YmIyZDYz
LzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl5mQQge
yvG+fdW+Wc0zm551Twl3mATA2+/wp29emW95BINHxTpXOKVY7Gdp4ZDDGvfUw2iH
PHOyrO3ecauqgHzE0Q0JIS3F/4bGnhF7hxH06ME/yZBssFnOQoEGRzcdFwTJ7fVi
mnpupLtaNq0QZFyOgWgSUj2cj8V8gDUd7wQW3OXIgcEw40ZS6W3g16VxiFfMrkL6
CCeYIF2+/IYLjOJ5xjnDICiZ8eudmWmCYu5bhkMLFlUGhOxphQ79RPlR3efhiPck
lZ+cdAiWzRCP8Zn/0CI9vNdNFIYpyGMtlZu62dgFNOglhVAEFgFUvzaX0kcbQuGn
xoS4TSrV6RondQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:40 2025 by rpki-client