Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: cva7fVevX1m0Bq54/PJl17SnT2Rhn01r1iikFMU0oqk=
Subject key identifier: 09:F0:05:D8:FB:92:53:B4:46:F0:F1:FE:6A:34:A4:9B:39:1B:90:27
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019653805205519CA7903E4CAD4A19D63389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 14:00:40 +0000
Manifest this update: Sun 20 Apr 2025 14:00:40 +0000
Manifest next update: Mon 21 Apr 2025 14:00:40 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: mjRswUWCiFveAw88P7toCcLenUeXgU/xJe+UPecjO8U=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:52:05:51:9c:a7:90:3e:4c:ad:4a:19:d6:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Apr 20 14:00:40 2025 GMT
Not After : Apr 21 14:00:40 2025 GMT
Subject: CN=09f005d8fb9253b446f0f1fe6a34a49b391b9027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:29:20:b4:cf:18:90:fd:ef:ae:d2:54:03:
aa:87:d0:d4:06:b2:8e:a9:4a:ad:7d:2f:b2:5f:ad:
73:16:2c:e4:0c:79:81:ee:d6:ee:5d:bb:c3:74:2e:
6f:61:7b:40:5a:71:db:e2:47:7e:e7:8f:a6:d3:d9:
7f:72:6c:ef:f5:45:e2:b4:17:3b:a9:7c:3d:13:18:
99:a7:4f:54:e0:51:cb:b5:a9:1e:fd:4f:97:74:c1:
80:be:91:3b:22:8c:94:e2:05:e3:5c:e0:ab:57:0b:
07:af:8b:93:97:95:5c:1c:95:6a:cb:71:3d:bc:bf:
a4:6d:bf:35:29:2f:46:83:34:2d:ef:b9:bd:0f:03:
4e:6a:c7:47:e8:22:01:26:78:a1:93:c5:09:d1:c4:
8f:2d:0a:2b:97:2a:6a:0d:bd:75:10:51:f3:4b:77:
e8:1e:3b:4e:e1:ac:d4:e1:f9:9a:76:83:e3:67:8e:
c3:b8:48:ba:16:bc:e5:2b:89:e6:d9:b0:cf:53:ec:
00:d6:18:3a:fc:6c:6a:ac:a4:56:fd:d5:fa:48:48:
a4:ea:dd:e8:d4:5c:fa:1e:a7:cd:cf:50:40:5e:6a:
47:db:5d:09:d6:52:16:fa:22:bf:02:16:d8:e9:3d:
8c:5c:fd:28:57:81:fb:0d:d0:b6:18:64:3c:90:06:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:05:D8:FB:92:53:B4:46:F0:F1:FE:6A:34:A4:9B:39:1B:90:27
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3e:c7:bd:e9:72:3b:14:6d:84:82:00:a1:3f:8b:3a:9d:8c:
e7:11:86:c2:ae:f9:80:58:8e:4d:32:a6:16:56:58:9a:79:f8:
cb:e2:6c:0a:4b:c9:75:65:ad:37:03:5a:9b:88:e5:f1:91:e2:
2a:2b:77:41:36:31:69:2d:d2:70:3b:e0:b3:ad:38:08:52:c0:
25:30:84:c5:13:3b:b6:95:60:7b:b1:35:78:10:83:33:d3:0b:
7f:32:b3:d3:3f:5a:02:61:4a:c2:39:fd:55:2d:d3:54:f4:58:
fa:4a:3d:3c:35:86:73:48:e1:0b:61:a0:10:89:44:1e:0a:a3:
2c:1f:33:87:26:67:10:48:de:80:36:69:02:c6:8c:f3:93:b2:
1b:b1:a6:78:b1:d8:90:43:50:fc:65:e1:f7:91:fe:6c:bd:d7:
c9:7f:b0:fb:c3:47:e3:01:65:9b:bd:0d:38:25:96:a5:df:7d:
47:6e:53:3f:7c:23:d6:3c:ff:d7:ba:f1:8e:57:cf:ee:c2:90:
f9:67:57:2b:be:d6:91:8d:c7:4a:d4:b7:3f:66:fa:96:df:f0:
0d:9e:4d:33:36:f0:47:a3:d1:45:95:d6:c2:32:2a:2f:9c:7f:
92:7a:f2:75:07:1b:42:69:a6:a5:67:40:d3:bf:64:69:b7:59:
e9:f8:a8:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgFIFUZynkD5MrUoZ1jOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjUwNDIwMTQwMDQwWhcNMjUwNDIxMTQwMDQwWjAzMTEwLwYDVQQD
EygwOWYwMDVkOGZiOTI1M2I0NDZmMGYxZmU2YTM0YTQ5YjM5MWI5MDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyApILTPGJD9767SVAOqh9DUBrKO
qUqtfS+yX61zFizkDHmB7tbuXbvDdC5vYXtAWnHb4kd+54+m09l/cmzv9UXitBc7
qXw9ExiZp09U4FHLtake/U+XdMGAvpE7IoyU4gXjXOCrVwsHr4uTl5VcHJVqy3E9
vL+kbb81KS9GgzQt77m9DwNOasdH6CIBJnihk8UJ0cSPLQorlypqDb11EFHzS3fo
HjtO4azU4fmadoPjZ47DuEi6FrzlK4nm2bDPU+wA1hg6/GxqrKRW/dX6SEik6t3o
1Fz6HqfNz1BAXmpH210J1lIW+iK/AhbY6T2MXP0oV4H7DdC2GGQ8kAbS7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnwBdj7klO0RvDx/mo0pJs5G5AnMB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT7Hvely
OxRthIIAoT+LOp2M5xGGwq75gFiOTTKmFlZYmnn4y+JsCkvJdWWtNwNam4jl8ZHi
Kit3QTYxaS3ScDvgs604CFLAJTCExRM7tpVge7E1eBCDM9MLfzKz0z9aAmFKwjn9
VS3TVPRY+ko9PDWGc0jhC2GgEIlEHgqjLB8zhyZnEEjegDZpAsaM85OyG7GmeLHY
kENQ/GXh95H+bL3XyX+w+8NH4wFlm70NOCWWpd99R25TP3wj1jz/17rxjlfP7sKQ
+WdXK77WkY3HStS3P2b6lt/wDZ5NMzbwR6PRRZXWwjIqL5x/knrydQcbQmmmpWdA
079kabdZ6fiofQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:28:51 2025 by rpki-client