Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
File: travTd-DFvvxAck2ROZZQUZXB2I.mft (raw, json)
Hash identifier: QmkUmKhP6IYADs+eYeHIuUdcb51nRB98F2PUSEunBgE=
Subject key identifier: CD:E4:79:D9:75:74:DE:94:D3:04:15:77:5D:F6:75:59:11:2B:56:8E
Authority key identifier: B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
Certificate issuer: /CN=b6b6af4ddf8316fbf101c93644e6594146570762
Certificate serial: 01961020FA0FB12267A1742DAEEE6C8C0C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
Manifest number: 0290
Signing time: Mon 07 Apr 2025 12:01:58 +0000
Manifest this update: Mon 07 Apr 2025 12:01:58 +0000
Manifest next update: Tue 08 Apr 2025 12:01:58 +0000
Files and hashes: 1: XuO7mhRFAxWWJf3a_uruRMjL2IE.roa (hash: RQDFwJe4JCe2zZylFuaxaBjfCKElGwq/EnTU4HdBtkk=)
2: travTd-DFvvxAck2ROZZQUZXB2I.crl (hash: VqY23ADCGny48VQtNK0nYbOJMgMrQ3L9A0d1q2/QfMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:fa:0f:b1:22:67:a1:74:2d:ae:ee:6c:8c:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b6af4ddf8316fbf101c93644e6594146570762
Validity
Not Before: Apr 7 12:01:58 2025 GMT
Not After : Apr 8 12:01:58 2025 GMT
Subject: CN=cde479d97574de94d30415775df67559112b568e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:8e:b6:ed:bf:80:53:9d:c9:88:86:60:ab:
31:00:cc:0b:e3:90:08:42:b0:be:32:26:0b:8e:fe:
94:2f:cf:7e:01:a9:18:50:50:37:9a:2c:dd:53:12:
7f:fd:4f:71:f1:04:91:59:f3:07:fc:15:d5:c8:84:
5d:9a:1b:42:4e:ab:a5:88:ca:61:9a:5a:f4:c2:fa:
d5:ba:a3:62:cd:91:6a:f5:23:60:5c:29:5e:a2:b9:
2e:fb:a0:9c:d4:6b:32:fe:66:c1:a5:92:1f:da:6e:
7f:a7:fb:05:bf:aa:41:d3:16:71:37:c5:db:68:27:
be:72:a3:bf:76:99:68:c3:5c:99:97:65:54:90:3e:
a1:5f:2f:8e:1c:e0:b3:05:e6:03:19:10:48:fb:f1:
81:99:37:57:ea:dc:df:04:86:ee:5c:a5:e2:b8:61:
d8:8d:46:3e:e6:1d:91:5b:5f:2f:64:0a:17:6e:37:
78:08:9c:4d:af:1f:dc:73:29:f7:38:1d:55:4e:10:
e0:5a:87:2d:11:db:cd:89:9e:4f:80:1d:c8:ac:80:
54:95:a2:e4:0f:30:5c:3c:15:63:9f:5c:a8:6d:99:
b6:f6:2c:57:e4:45:1f:34:fd:a1:68:a1:4d:a6:3d:
5c:3a:5c:25:c2:c4:8b:c2:9a:2f:88:2f:29:4e:6f:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:79:D9:75:74:DE:94:D3:04:15:77:5D:F6:75:59:11:2B:56:8E
X509v3 Authority Key Identifier:
keyid:B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5b:2f:ad:11:2b:ad:46:bb:5f:fe:ef:34:7e:39:f9:9e:a0:
80:d6:85:4f:5c:81:17:3f:e3:d4:af:d3:e2:53:eb:6c:4d:81:
f8:7d:ff:e3:ed:e1:a2:53:73:cb:7f:c2:75:34:6c:25:69:d7:
0b:fc:e5:b2:9f:88:b9:71:f7:f8:94:53:5b:d1:7a:69:dc:4f:
12:ba:c2:d6:09:11:a6:31:fa:2d:ca:e7:44:6f:69:e0:a9:95:
b3:dc:e7:c4:9e:97:68:7b:3f:7e:8e:f9:61:9a:f1:53:9a:58:
ac:12:81:6e:4d:23:85:3a:b4:54:92:fd:d2:f0:3c:4a:ec:c2:
71:e1:2f:f2:a2:d6:3e:08:2c:b6:87:de:52:b1:e3:e9:32:ff:
f7:8e:7b:6f:d5:ea:e2:c2:1b:6f:72:3c:f3:2a:1b:22:06:d3:
22:88:3e:68:9f:fe:f8:bf:63:e0:8e:4b:9f:41:94:56:a4:13:
7b:a4:ac:7e:ad:4a:af:c5:af:e3:77:6d:c9:e6:37:5f:cf:21:
d9:36:9c:49:62:00:81:ff:30:e1:fe:1f:fe:57:cb:b6:0b:89:
da:0b:05:6a:94:08:0a:94:72:34:6c:54:ae:c8:31:c1:80:59:
ac:55:47:20:d3:38:b5:4b:73:34:c6:b9:3b:07:ea:61:f4:67:
46:de:d5:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQIPoPsSJnoXQtru5sjAyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjZhZjRkZGY4MzE2ZmJmMTAxYzkzNjQ0ZTY1OTQxNDY1
NzA3NjIwHhcNMjUwNDA3MTIwMTU4WhcNMjUwNDA4MTIwMTU4WjAzMTEwLwYDVQQD
EyhjZGU0NzlkOTc1NzRkZTk0ZDMwNDE1Nzc1ZGY2NzU1OTExMmI1NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6eOtu2/gFOdyYiGYKsxAMwL45AI
QrC+MiYLjv6UL89+AakYUFA3mizdUxJ//U9x8QSRWfMH/BXVyIRdmhtCTquliMph
mlr0wvrVuqNizZFq9SNgXCleorku+6Cc1Gsy/mbBpZIf2m5/p/sFv6pB0xZxN8Xb
aCe+cqO/dplow1yZl2VUkD6hXy+OHOCzBeYDGRBI+/GBmTdX6tzfBIbuXKXiuGHY
jUY+5h2RW18vZAoXbjd4CJxNrx/ccyn3OB1VThDgWoctEdvNiZ5PgB3IrIBUlaLk
DzBcPBVjn1yobZm29ixX5EUfNP2haKFNpj1cOlwlwsSLwpoviC8pTm8g+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3kedl1dN6U0wQVd132dVkRK1aOMB8GA1UdIwQY
MBaAFLa2r03fgxb78QHJNkTmWUFGVwdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJhdlRkLURGdnZ4QWNrMlJPWlpRVVpYQjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTY1MWQtZWU3My00OGVkLWFmNjgt
MjlmNDIwNzUyZDVlLzEvdHJhdlRkLURGdnZ4QWNrMlJPWlpRVVpYQjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTY1MWQtZWU3My00OGVkLWFmNjgtMjlmNDIwNzUyZDVl
LzEvdHJhdlRkLURGdnZ4QWNrMlJPWlpRVVpYQjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClsvrREr
rUa7X/7vNH45+Z6ggNaFT1yBFz/j1K/T4lPrbE2B+H3/4+3holNzy3/CdTRsJWnX
C/zlsp+IuXH3+JRTW9F6adxPErrC1gkRpjH6LcrnRG9p4KmVs9znxJ6XaHs/fo75
YZrxU5pYrBKBbk0jhTq0VJL90vA8SuzCceEv8qLWPggstofeUrHj6TL/9457b9Xq
4sIbb3I88yobIgbTIog+aJ/++L9j4I5Ln0GUVqQTe6Ssfq1Kr8Wv43dtyeY3X88h
2TacSWIAgf8w4f4f/lfLtguJ2gsFapQICpRyNGxUrsgxwYBZrFVHINM4tUtzNMa5
OwfqYfRnRt7VXw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:43 2025 by rpki-client