Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File: TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier: dPDJXkrA0Rh0F8ciqHmvL6CvX5+1IH1CogrhfRBuj74=
Subject key identifier: 60:88:63:97:7A:80:02:BE:2F:51:8D:B3:61:56:7C:1A:AD:A5:54:B0
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer: /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial: 0194BB974262AF81D6BE2C9322403D88A4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 09:00:39 +0000
Manifest this update: Fri 31 Jan 2025 09:00:39 +0000
Manifest next update: Sat 01 Feb 2025 09:00:39 +0000
Files and hashes: 1: GE0QPlemROw8Sbhr36vqfxvh7PA.roa (hash: +MZLj56FBFDLK0DCRu2QzT8kaBrzw0Ux8MFgsr68gZ8=)
2: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: QCz9fWvagVrYvo5SOExaYtR/ToamYVE94hZHM4Qywtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:42:62:af:81:d6:be:2c:93:22:40:3d:88:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Validity
Not Before: Jan 31 09:00:39 2025 GMT
Not After : Feb 1 09:00:39 2025 GMT
Subject: CN=608863977a8002be2f518db361567c1aada554b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:63:5d:eb:a9:3b:e1:be:b7:cb:7b:c4:6e:
42:7f:c0:8f:3c:fe:2e:2f:12:6f:33:12:16:12:f4:
17:f8:4c:61:d9:8b:e6:2d:13:08:1d:45:28:70:d4:
be:e9:e5:45:37:5c:58:d6:45:05:87:a2:7c:d7:66:
98:42:15:d8:d0:ea:98:db:c3:a1:10:8e:ab:7d:a9:
05:fb:a2:0d:f5:e9:89:bc:8d:17:cb:c4:01:41:2d:
e9:c2:f4:bc:b2:af:4e:df:5b:d7:4c:af:21:39:8c:
c2:eb:c4:ef:a1:16:3e:d2:69:8c:c8:46:45:fc:91:
ae:bf:b3:e3:02:a3:2c:e0:25:6e:ce:b0:db:49:21:
a3:eb:e4:69:74:3a:81:f5:34:c9:c3:57:8b:ec:13:
36:fa:9d:36:e7:cc:ad:62:e1:72:18:a0:d2:3c:fc:
f0:a7:a8:8d:27:0e:8c:0c:94:7d:b7:0a:98:ba:59:
96:2a:df:ee:ba:3a:13:ce:46:d4:30:8d:a3:36:c4:
87:3c:41:b9:d4:c0:ea:aa:0f:8b:a9:40:3d:9d:9e:
cf:65:88:b6:3f:83:a8:76:22:42:0c:88:2e:24:e2:
69:e8:77:e8:1e:a2:2a:eb:80:b2:94:74:5c:38:c9:
5b:0c:84:17:c9:e0:eb:73:77:0e:4b:2b:b2:fb:4f:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:88:63:97:7A:80:02:BE:2F:51:8D:B3:61:56:7C:1A:AD:A5:54:B0
X509v3 Authority Key Identifier:
keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5e:09:96:64:43:e4:6f:99:a6:9a:c5:a2:b8:62:e9:d1:66:
65:02:a5:c0:cd:89:b2:7e:d0:85:71:77:86:c3:8c:96:e4:d9:
7e:3d:cd:5c:a5:8d:88:31:9c:2c:b2:6f:cb:09:41:8d:70:7b:
15:9f:c2:26:dc:72:4d:10:85:41:01:54:24:1d:e7:1a:a9:00:
df:56:cb:04:50:a3:38:1a:69:3c:5c:c1:2c:84:50:4b:ae:b2:
54:a8:75:75:d1:a5:30:f3:e2:8c:ae:ec:7a:15:c5:34:b0:0e:
14:3a:9c:d5:1e:92:04:75:85:53:c4:06:8d:89:ec:1b:13:4a:
29:63:12:54:4c:34:df:0b:6e:ae:63:9b:a7:4e:e2:23:0a:34:
25:13:ab:6e:84:12:51:2e:41:c4:b6:d7:1c:0b:61:ef:0b:ab:
b5:91:2d:56:7f:f5:a9:78:82:ec:ea:84:12:63:8c:97:19:bc:
ff:f4:b2:c7:f3:25:c2:2e:69:21:4a:f8:0a:1b:c3:35:fb:8b:
72:5a:d5:76:25:4d:10:b9:87:a3:07:b3:47:7e:08:01:15:21:
57:87:61:7f:77:99:3d:2d:37:7e:10:90:b9:21:a7:b7:b5:c9:
fa:cc:31:69:3c:f3:b7:6d:94:3f:37:10:e8:16:a2:b8:7c:a4:
8a:cf:7c:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7l0Jir4HWviyTIkA9iKTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWFhMzhlZWEzMjRlMmJkN2FiNjQyN2U3NTk2YTlmYTQx
ZGIwZTMwHhcNMjUwMTMxMDkwMDM5WhcNMjUwMjAxMDkwMDM5WjAzMTEwLwYDVQQD
Eyg2MDg4NjM5NzdhODAwMmJlMmY1MThkYjM2MTU2N2MxYWFkYTU1NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG5jXeupO+G+t8t7xG5Cf8CPPP4u
LxJvMxIWEvQX+Exh2YvmLRMIHUUocNS+6eVFN1xY1kUFh6J812aYQhXY0OqY28Oh
EI6rfakF+6IN9emJvI0Xy8QBQS3pwvS8sq9O31vXTK8hOYzC68TvoRY+0mmMyEZF
/JGuv7PjAqMs4CVuzrDbSSGj6+RpdDqB9TTJw1eL7BM2+p0258ytYuFyGKDSPPzw
p6iNJw6MDJR9twqYulmWKt/uujoTzkbUMI2jNsSHPEG51MDqqg+LqUA9nZ7PZYi2
P4OodiJCDIguJOJp6HfoHqIq64CylHRcOMlbDIQXyeDrc3cOSyuy+0+qtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCIY5d6gAK+L1GNs2FWfBqtpVSwMB8GA1UdIwQY
MBaAFE5ao47qMk4r16tkJ+dZap+kHbDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEt
NGVlZWQ4YTQzMDhiLzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEtNGVlZWQ4YTQzMDhi
LzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV4JlmRD
5G+ZpprForhi6dFmZQKlwM2Jsn7QhXF3hsOMluTZfj3NXKWNiDGcLLJvywlBjXB7
FZ/CJtxyTRCFQQFUJB3nGqkA31bLBFCjOBppPFzBLIRQS66yVKh1ddGlMPPijK7s
ehXFNLAOFDqc1R6SBHWFU8QGjYnsGxNKKWMSVEw03wturmObp07iIwo0JROrboQS
US5BxLbXHAth7wurtZEtVn/1qXiC7OqEEmOMlxm8//Syx/Mlwi5pIUr4ChvDNfuL
clrVdiVNELmHowezR34IARUhV4dhf3eZPS03fhCQuSGnt7XJ+swxaTzzt22UPzcQ
6BaiuHykis98kA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:40 2025 by rpki-client on console-fra.rpki-client.org