Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: w9EBgPO4yXXOVQqMmRyUT7yqQDBiOnh90WTmYibvVLY=
Subject key identifier: B9:00:D5:BC:7F:6B:E3:39:55:6C:91:5B:EC:15:31:A0:84:F2:B0:13
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 01965914D6A9D6999D96D2B808EF953F236E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0B8D
Signing time: Mon 21 Apr 2025 16:00:59 +0000
Manifest this update: Mon 21 Apr 2025 16:00:59 +0000
Manifest next update: Tue 22 Apr 2025 16:00:59 +0000
Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=)
2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: uYdLQKOYBAcQZU16sYvychaWLafzJPwMXB8e3HqXfGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:d6:a9:d6:99:9d:96:d2:b8:08:ef:95:3f:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Apr 21 16:00:59 2025 GMT
Not After : Apr 22 16:00:59 2025 GMT
Subject: CN=b900d5bc7f6be339556c915bec1531a084f2b013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:5b:63:6c:24:93:ca:61:13:c2:72:18:60:
e8:cc:75:34:9c:03:60:e0:cf:9b:79:c2:32:dd:7e:
89:8f:a8:f9:d8:3a:60:86:c8:d4:5f:d4:c0:b3:99:
e8:33:c4:56:90:f8:57:c7:e1:a5:5e:7c:28:7b:b3:
bf:fa:84:dc:ca:9a:da:61:61:c6:9d:eb:52:49:2b:
09:34:5b:54:04:2b:df:3c:c7:71:2c:3a:38:de:22:
30:11:8b:6a:c6:aa:3c:56:49:b5:a3:3c:5f:23:3e:
b3:6f:76:e8:c3:29:c5:b9:12:81:c2:3e:09:07:3f:
5d:7b:3b:45:fd:84:1a:28:88:05:20:88:75:fc:58:
cb:af:93:1c:c3:72:09:b2:7f:5d:a5:a6:3b:44:92:
9f:5d:fd:9b:a2:80:18:22:31:24:10:be:80:9e:f6:
a1:2c:49:b2:29:12:7e:2f:2f:33:d9:41:18:53:e1:
59:dd:2f:6e:1f:6c:9a:e2:4a:89:7a:58:4b:94:5f:
20:62:39:b5:db:74:f9:98:7f:52:f5:8f:aa:58:ee:
4e:af:2a:05:0c:87:c1:e5:dc:bc:e5:74:54:e7:7b:
2b:f2:9e:87:7d:4b:31:8d:1c:42:d1:e3:3d:68:df:
59:16:c1:43:a9:1d:a3:4b:41:10:54:53:28:dc:92:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:D5:BC:7F:6B:E3:39:55:6C:91:5B:EC:15:31:A0:84:F2:B0:13
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:60:59:dd:28:56:8f:bf:44:c0:15:86:91:df:68:5b:a4:
49:94:10:66:3c:1d:7d:9c:ca:eb:7c:08:df:42:c9:cb:31:8d:
61:b4:17:d1:e4:24:62:1b:6e:96:cf:ee:68:84:02:1e:80:a4:
df:10:55:9c:0e:fe:6f:a3:d7:1f:8e:5b:9a:66:8f:d2:5d:05:
2f:10:c0:96:9e:74:f5:c3:54:3e:f6:68:10:a8:0c:4a:a5:5b:
c1:4d:1d:b2:47:f8:a8:fd:f6:41:03:4b:c9:74:70:16:cc:b8:
9f:57:57:f4:e5:06:6b:58:cb:32:84:26:fc:2e:f3:c3:0a:55:
cd:29:27:11:13:e8:f6:e6:3c:c5:b1:a7:6e:c3:c6:d4:53:ee:
bd:79:33:b8:e9:27:0d:aa:30:f4:c4:36:15:fc:ba:73:9e:a4:
44:1b:bb:95:20:7c:c9:ad:2a:d0:b9:77:4e:97:25:2f:87:9a:
4e:65:95:31:6f:70:8b:2f:1b:d4:af:e8:cb:1e:5f:de:b4:2e:
6b:38:ab:21:fc:0a:74:26:78:f2:d7:b7:c8:55:81:a4:3e:27:
a4:b3:cd:b6:69:6d:00:f5:2c:1f:7f:fa:2a:5d:ff:7f:f9:db:
12:e0:b6:84:0b:af:61:fb:13:0c:73:ef:d2:71:d9:1e:d9:ed:
9b:f0:a5:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFNap1pmdltK4CO+VPyNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGExOWQ0OGMzNTQ3YzJhZGI5ZjhlZmZkZWFjNmFkOWU0
ZjlkMTkwHhcNMjUwNDIxMTYwMDU5WhcNMjUwNDIyMTYwMDU5WjAzMTEwLwYDVQQD
EyhiOTAwZDViYzdmNmJlMzM5NTU2YzkxNWJlYzE1MzFhMDg0ZjJiMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRBbY2wkk8phE8JyGGDozHU0nANg
4M+becIy3X6Jj6j52DpghsjUX9TAs5noM8RWkPhXx+GlXnwoe7O/+oTcypraYWHG
netSSSsJNFtUBCvfPMdxLDo43iIwEYtqxqo8Vkm1ozxfIz6zb3bowynFuRKBwj4J
Bz9deztF/YQaKIgFIIh1/FjLr5Mcw3IJsn9dpaY7RJKfXf2booAYIjEkEL6Anvah
LEmyKRJ+Ly8z2UEYU+FZ3S9uH2ya4kqJelhLlF8gYjm123T5mH9S9Y+qWO5OryoF
DIfB5dy85XRU53sr8p6HfUsxjRxC0eM9aN9ZFsFDqR2jS0EQVFMo3JJhKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkA1bx/a+M5VWyRW+wVMaCE8rATMB8GA1UdIwQY
MBaAFE4KGdSMNUfCrbn47/3qxq2eT50ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQt
MTdjMTIyNzNjNTRhLzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQtMTdjMTIyNzNjNTRh
LzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC9gWd0o
Vo+/RMAVhpHfaFukSZQQZjwdfZzK63wI30LJyzGNYbQX0eQkYhtuls/uaIQCHoCk
3xBVnA7+b6PXH45bmmaP0l0FLxDAlp509cNUPvZoEKgMSqVbwU0dskf4qP32QQNL
yXRwFsy4n1dX9OUGa1jLMoQm/C7zwwpVzSknERPo9uY8xbGnbsPG1FPuvXkzuOkn
Daow9MQ2Ffy6c56kRBu7lSB8ya0q0Ll3TpclL4eaTmWVMW9wiy8b1K/oyx5f3rQu
azirIfwKdCZ48te3yFWBpD4npLPNtmltAPUsH3/6Kl3/f/nbEuC2hAuvYfsTDHPv
0nHZHtntm/Clew==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:59 2025 by rpki-client