Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json)
Hash identifier: eYU/UEwRDdKNbfeUKL72kBv6ZGj6IkFpy9EuSKQwUp4=
Subject key identifier: F9:CB:AF:E9:46:AF:D7:AC:CE:21:C0:62:EA:7F:84:A6:D5:C9:E1:8D
Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849
Certificate serial: 01974A43FD3B91DB1C7DA414A79AF0644DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 12:00:59 +0000
Manifest this update: Sat 07 Jun 2025 12:00:59 +0000
Manifest next update: Sun 08 Jun 2025 12:00:59 +0000
Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: mfm4YgKZKyFxVBZfW+M2CNyRXuf5PyceXhrwAL4m6J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:fd:3b:91:db:1c:7d:a4:14:a7:9a:f0:64:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849
Validity
Not Before: Jun 7 12:00:59 2025 GMT
Not After : Jun 8 12:00:59 2025 GMT
Subject: CN=f9cbafe946afd7acce21c062ea7f84a6d5c9e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:68:e1:cb:c7:31:da:7d:e8:a4:04:2e:15:
7b:25:31:39:f6:ef:34:c9:34:9d:aa:88:20:8a:ea:
3d:36:56:c4:b7:5a:df:f3:1a:83:c4:aa:75:0d:8b:
e9:6a:60:f5:60:e9:3a:ba:75:c5:9f:fb:29:da:4d:
aa:c8:f4:97:c9:b2:ea:1c:ba:35:45:cf:39:36:ad:
6d:60:dc:8a:fd:60:43:a7:9b:b2:75:96:19:80:b0:
68:17:7c:a5:8d:3c:59:1f:f9:c3:1e:77:b8:49:bf:
f8:fe:3f:7e:06:22:7c:2b:0a:a1:e5:92:ad:5d:85:
61:1c:72:0a:e3:f4:dc:03:f4:48:9d:fc:36:17:ca:
47:51:f4:36:68:b7:aa:52:44:fc:06:cd:30:f4:a6:
b5:ba:64:f7:34:3f:cf:09:04:4e:b4:30:55:03:e5:
21:23:04:42:bf:55:13:ea:ff:b7:de:c1:04:d1:9c:
84:e3:eb:8a:a2:c3:3c:f0:ff:8d:70:69:50:16:ae:
76:d8:51:bc:62:e0:cc:6f:e5:6b:6b:cf:9a:b7:c2:
8d:2d:99:e2:d1:72:52:1e:9d:4e:7e:b6:41:ef:4c:
61:ea:f5:6b:56:04:b3:fa:29:87:7b:f3:16:47:62:
2c:18:c9:0c:76:23:98:07:1e:f6:20:8e:43:1e:90:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:AF:E9:46:AF:D7:AC:CE:21:C0:62:EA:7F:84:A6:D5:C9:E1:8D
X509v3 Authority Key Identifier:
keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1f:62:ff:43:26:c1:f9:64:be:5a:4d:6a:fa:62:f0:07:2e:
2d:07:66:10:5b:58:2e:d8:91:8f:68:8a:f2:49:19:39:d5:96:
91:71:19:bf:35:6f:d6:0d:04:2f:86:05:0f:2b:5a:c7:4b:24:
00:4c:7d:36:5d:56:17:3a:f0:23:5a:5c:dd:19:e2:7d:20:20:
1b:94:2a:4d:ab:b1:f4:3e:6b:18:10:91:97:85:a3:32:3b:75:
05:50:ab:5b:03:ac:cb:85:ec:f8:cf:36:7c:2a:79:7a:25:b8:
95:54:0c:ba:8e:6a:27:b5:37:e5:83:0a:85:ae:53:6e:67:a4:
05:e1:6d:75:a7:28:b8:8d:c1:b7:b9:be:9c:c0:cb:e8:07:7a:
55:62:ef:9a:41:f4:1c:37:58:a7:f8:52:2e:57:d1:f2:af:72:
c6:42:68:56:13:b4:6d:f8:b2:2c:19:14:56:d2:5a:42:b6:29:
9c:5b:e1:24:1a:e3:d5:bc:c8:ae:b1:db:fe:90:95:24:70:0a:
1c:66:bb:5c:97:8d:fc:c5:99:38:d3:8f:7c:82:3c:3f:21:a4:
33:d2:f5:ef:8b:81:21:44:db:e0:d5:3a:97:12:8f:6b:a0:5a:
ed:15:95:7c:9f:4d:92:d1:59:79:8c:8d:2a:db:8c:07:9d:27:
d5:62:8e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ/07kdscfaQUp5rwZE3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzBhZGJlNTNmNWYyODViMDU3M2RmMjQ2ZTI1ZDUxNjUx
ZDc4NDkwHhcNMjUwNjA3MTIwMDU5WhcNMjUwNjA4MTIwMDU5WjAzMTEwLwYDVQQD
EyhmOWNiYWZlOTQ2YWZkN2FjY2UyMWMwNjJlYTdmODRhNmQ1YzllMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwho4cvHMdp96KQELhV7JTE59u80
yTSdqoggiuo9NlbEt1rf8xqDxKp1DYvpamD1YOk6unXFn/sp2k2qyPSXybLqHLo1
Rc85Nq1tYNyK/WBDp5uydZYZgLBoF3yljTxZH/nDHne4Sb/4/j9+BiJ8Kwqh5ZKt
XYVhHHIK4/TcA/RInfw2F8pHUfQ2aLeqUkT8Bs0w9Ka1umT3ND/PCQROtDBVA+Uh
IwRCv1UT6v+33sEE0ZyE4+uKosM88P+NcGlQFq522FG8YuDMb+Vra8+at8KNLZni
0XJSHp1OfrZB70xh6vVrVgSz+imHe/MWR2IsGMkMdiOYBx72II5DHpDEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnLr+lGr9esziHAYup/hKbVyeGNMB8GA1UdIwQY
MBaAFE5wrb5T9fKFsFc98kbiXVFlHXhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMt
YzFlNmMxYjMxOTFkLzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMtYzFlNmMxYjMxOTFk
LzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh9i/0Mm
wflkvlpNavpi8AcuLQdmEFtYLtiRj2iK8kkZOdWWkXEZvzVv1g0EL4YFDytax0sk
AEx9Nl1WFzrwI1pc3RnifSAgG5QqTaux9D5rGBCRl4WjMjt1BVCrWwOsy4Xs+M82
fCp5eiW4lVQMuo5qJ7U35YMKha5TbmekBeFtdacouI3Bt7m+nMDL6Ad6VWLvmkH0
HDdYp/hSLlfR8q9yxkJoVhO0bfiyLBkUVtJaQrYpnFvhJBrj1bzIrrHb/pCVJHAK
HGa7XJeN/MWZONOPfII8PyGkM9L174uBIUTb4NU6lxKPa6Ba7RWVfJ9NktFZeYyN
KtuMB50n1WKOZA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:38 2025 by rpki-client