Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
File: TUQhxgZa4gAa_NgtotDbIRISRag.mft (raw, json)
Hash identifier: 7FNW69X45YSVmjcyhGzIjk6s7IDBZjkysfHO+UmLNPk=
Subject key identifier: 09:0C:61:41:82:1F:3F:69:F4:43:9A:D6:70:06:8C:AD:AA:2E:06:EB
Authority key identifier: 4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
Certificate issuer: /CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Certificate serial: 01974A7B8AA4695585199E83DC18C7029B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
Manifest number: 0328
Signing time: Sat 07 Jun 2025 13:01:39 +0000
Manifest this update: Sat 07 Jun 2025 13:01:39 +0000
Manifest next update: Sun 08 Jun 2025 13:01:39 +0000
Files and hashes: 1: TUQhxgZa4gAa_NgtotDbIRISRag.crl (hash: ezDcXGzBWz3viDFtBvaOc4WWGlrWevROwbhHE2i3ijM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:8a:a4:69:55:85:19:9e:83:dc:18:c7:02:9b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Validity
Not Before: Jun 7 13:01:39 2025 GMT
Not After : Jun 8 13:01:39 2025 GMT
Subject: CN=090c6141821f3f69f4439ad670068cadaa2e06eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:77:1a:38:2e:cd:c6:ab:ae:8d:dd:49:e8:
27:87:87:a1:84:0b:31:7f:aa:a7:97:2d:bc:93:24:
29:db:f3:c4:c0:e2:cc:2a:c0:11:8e:23:97:4d:4c:
ee:3f:48:23:6c:ee:fb:c0:72:c3:14:e7:ca:9e:ed:
05:b6:0b:b8:20:86:44:d0:88:cf:09:8b:5a:04:36:
e5:44:95:7c:7a:4e:bc:0a:37:d0:b6:3f:b6:aa:73:
d0:08:3e:15:b9:17:cc:9a:cb:b6:15:5c:6b:65:99:
7d:0a:8a:46:90:b8:f4:53:fc:fb:a6:8b:d6:2a:8b:
93:ee:24:f3:63:77:33:8e:71:da:96:8c:dd:be:8c:
fc:fe:81:50:b1:a4:aa:45:b7:43:e8:81:a3:96:3e:
c7:43:8e:bf:90:9e:6c:f0:07:ae:71:ad:35:87:9a:
e7:07:08:27:14:98:09:30:1a:6e:7f:41:4f:34:97:
a2:43:66:67:c3:ad:48:f8:07:aa:6f:42:21:af:c2:
83:dd:93:1e:91:bf:ef:2e:75:cf:05:79:29:45:ee:
a4:ca:c7:0b:b1:a7:2b:db:4e:1c:98:b7:1a:24:c2:
97:27:d1:66:0a:4e:57:85:f9:f9:b9:af:30:3c:f3:
a2:98:83:2d:18:7b:23:c8:83:24:95:ce:96:4a:b9:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:61:41:82:1F:3F:69:F4:43:9A:D6:70:06:8C:AD:AA:2E:06:EB
X509v3 Authority Key Identifier:
keyid:4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:67:b0:1e:fd:0b:35:72:21:c3:67:1b:77:17:4c:76:47:9b:
de:0f:ed:f8:9d:17:da:0b:5f:b9:6f:a5:22:69:eb:28:ce:02:
0c:75:27:3f:de:55:79:59:35:66:59:ee:57:eb:71:80:d7:19:
30:41:f1:e3:10:3d:b7:60:ef:e8:c9:35:7a:7f:3a:91:ac:6d:
20:de:84:31:a0:19:17:8e:a3:c3:17:f9:ea:36:af:95:c8:70:
78:27:d2:5d:b8:50:2c:57:4b:81:c4:f7:72:84:3c:73:6f:79:
11:f8:0e:84:ca:01:8e:05:82:6d:26:b6:a2:7c:8a:da:7e:b7:
21:d8:a8:91:62:78:46:4e:fa:dd:1d:67:de:72:67:63:dc:76:
29:df:76:9f:3a:a8:ef:29:61:12:35:ac:98:60:6a:e4:fc:8e:
20:75:01:7d:f7:68:5b:bf:d5:b0:bb:59:57:95:36:4d:f1:c1:
22:f7:5d:cd:a2:f8:32:d6:ea:26:11:29:61:1c:05:58:69:d0:
47:91:8e:6f:2f:ce:a2:00:93:a5:7f:98:fd:52:3c:f7:1f:df:
8a:25:10:66:73:c5:af:93:01:c7:9a:71:ea:ef:00:b8:ce:41:
03:65:cf:a5:4f:9a:c0:3b:e8:4a:de:52:8a:bb:cd:94:6e:bb:
60:39:a4:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe4qkaVWFGZ6D3BjHApueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNDQyMWM2MDY1YWUyMDAxYWZjZDgyZGEyZDBkYjIxMTIx
MjQ1YTgwHhcNMjUwNjA3MTMwMTM5WhcNMjUwNjA4MTMwMTM5WjAzMTEwLwYDVQQD
EygwOTBjNjE0MTgyMWYzZjY5ZjQ0MzlhZDY3MDA2OGNhZGFhMmUwNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YZ3Gjguzcarro3dSegnh4ehhAsx
f6qnly28kyQp2/PEwOLMKsARjiOXTUzuP0gjbO77wHLDFOfKnu0Ftgu4IIZE0IjP
CYtaBDblRJV8ek68CjfQtj+2qnPQCD4VuRfMmsu2FVxrZZl9CopGkLj0U/z7povW
KouT7iTzY3czjnHalozdvoz8/oFQsaSqRbdD6IGjlj7HQ46/kJ5s8Aeuca01h5rn
BwgnFJgJMBpuf0FPNJeiQ2Znw61I+Aeqb0Ihr8KD3ZMekb/vLnXPBXkpRe6kyscL
sacr204cmLcaJMKXJ9FmCk5Xhfn5ua8wPPOimIMtGHsjyIMklc6WSrnMDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkMYUGCHz9p9EOa1nAGjK2qLgbrMB8GA1UdIwQY
MBaAFE1EIcYGWuIAGvzYLaLQ2yESEkWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFVRaHhnWmE0Z0FhX05ndG90RGJJUklTUmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84MGE1M2UtNTU1Yy00ZTVhLWI1Mjct
M2ZjNTZjODZmNDc2LzEvVFVRaHhnWmE0Z0FhX05ndG90RGJJUklTUmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84MGE1M2UtNTU1Yy00ZTVhLWI1MjctM2ZjNTZjODZmNDc2
LzEvVFVRaHhnWmE0Z0FhX05ndG90RGJJUklTUmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmewHv0L
NXIhw2cbdxdMdkeb3g/t+J0X2gtfuW+lImnrKM4CDHUnP95VeVk1ZlnuV+txgNcZ
MEHx4xA9t2Dv6Mk1en86kaxtIN6EMaAZF46jwxf56javlchweCfSXbhQLFdLgcT3
coQ8c295EfgOhMoBjgWCbSa2onyK2n63IdiokWJ4Rk763R1n3nJnY9x2Kd92nzqo
7ylhEjWsmGBq5PyOIHUBffdoW7/VsLtZV5U2TfHBIvddzaL4MtbqJhEpYRwFWGnQ
R5GOby/OogCTpX+Y/VI89x/fiiUQZnPFr5MBx5px6u8AuM5BA2XPpU+awDvoSt5S
irvNlG67YDmkSg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:31:40 2025 by rpki-client