Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
File: TBikTVSkel6pfe39Xtg3nX7qAtA.mft (raw, json)
Hash identifier: HcQbAFbBgqIyQzGUTTmy7XIGxf7Gl7ZyQmVBgm667Z4=
Subject key identifier: 6C:9A:EC:95:75:EF:09:2B:AB:C1:8B:7F:3F:71:D6:33:87:72:99:EC
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial: 0194BB6058EBDB9F6DC56D293F993CF56675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
Manifest number: 0D65
Signing time: Fri 31 Jan 2025 08:00:41 +0000
Manifest this update: Fri 31 Jan 2025 08:00:41 +0000
Manifest next update: Sat 01 Feb 2025 08:00:41 +0000
Files and hashes: 1: A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa (hash: LqION540Zg0mnXlhYgbOPsJtgA4nsXptBIy0jMQ2+yc=)
2: TBikTVSkel6pfe39Xtg3nX7qAtA.crl (hash: aelaVW21YrRu0ig7fJ507HpYVgIRPNbuzwgQSTHoBZc=)
3: n1aoovYMZxSs0WefrRJiB3jdudI.roa (hash: q2PjweCwbyJvPPBstb2/ErFFOd9PN++7msnJLhK1PxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:58:eb:db:9f:6d:c5:6d:29:3f:99:3c:f5:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Validity
Not Before: Jan 31 08:00:41 2025 GMT
Not After : Feb 1 08:00:41 2025 GMT
Subject: CN=6c9aec9575ef092babc18b7f3f71d633877299ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:c1:46:34:b5:84:7a:16:78:22:b9:7c:33:
ef:32:dd:cb:62:d5:dd:90:e1:9c:c2:12:ae:f7:04:
74:e6:64:29:c5:80:f2:9b:fc:9f:11:28:f3:db:61:
8e:1d:12:bc:08:4d:6d:2a:b8:8b:62:be:a2:21:65:
80:88:c0:ef:7d:28:d1:ab:06:17:c8:3d:42:fb:e2:
70:56:ab:aa:ae:b7:4e:49:49:38:29:c8:49:63:58:
19:a9:84:f3:72:06:fa:e2:e3:7c:63:ab:e1:1f:95:
0d:91:7d:69:f2:55:00:de:78:9d:93:be:af:47:67:
8a:12:7b:de:4f:42:68:1f:05:1b:fc:2b:9e:7c:62:
bb:6f:4d:2b:37:3b:19:9c:da:51:dd:c1:42:cd:81:
a3:76:28:da:d5:cc:f9:06:3a:5b:07:af:67:ab:e4:
f2:d6:31:23:30:0f:59:39:31:9f:3d:bc:cf:7e:b7:
3a:52:fd:0e:eb:b3:1a:f0:a4:2b:6a:f0:a5:16:b8:
f4:57:83:15:5f:b3:a0:cb:f3:82:7d:c7:41:6a:b0:
df:43:d5:5a:cf:e0:8c:70:05:bb:84:f4:73:fc:d0:
5e:64:32:6b:73:72:dd:05:e0:92:d9:9f:f6:84:a8:
5e:57:ee:2b:c8:d8:1b:f7:00:ee:bf:75:45:46:8f:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:EC:95:75:EF:09:2B:AB:C1:8B:7F:3F:71:D6:33:87:72:99:EC
X509v3 Authority Key Identifier:
keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:88:84:92:e1:c8:10:5a:83:94:61:38:c0:40:04:54:f5:8d:
ed:bc:4d:cc:d3:c0:14:7b:19:e7:d5:c1:b9:65:7d:f2:8b:95:
56:2f:f5:ed:ed:9f:6d:ad:bd:46:62:42:54:10:f8:c9:43:46:
df:03:2d:f8:60:f8:f3:1b:04:78:d9:2c:a3:d5:b9:06:0e:6d:
6e:46:c4:36:14:4f:0c:59:ea:9f:e8:a1:95:da:f0:8f:cb:4b:
5c:ce:fe:16:b1:0b:68:b5:bf:54:c4:92:6a:3b:a7:fb:13:38:
e1:fc:d9:e5:ae:b0:e9:38:12:b1:44:04:3c:89:4c:2f:a1:4d:
5a:2d:c2:4a:44:9c:03:cb:8b:ac:b3:70:5d:6c:a4:9a:69:e3:
83:27:19:57:86:94:dc:ca:3e:2e:fd:21:e3:f1:51:ad:c9:1e:
fa:ce:07:1a:9d:09:87:98:a5:87:19:3f:05:cc:a3:cc:fd:a8:
ec:63:3e:27:84:3a:2a:a2:32:47:3f:b3:0f:2c:c0:7c:cb:5e:
f1:30:48:67:35:c5:5b:68:bc:45:25:bd:f5:95:8e:e4:7b:02:
dc:71:a6:1c:5a:81:37:bb:8d:8b:d9:96:a4:f4:1b:ab:fb:d4:
9e:61:41:56:2e:00:eb:55:f8:7a:e5:86:78:a5:d1:ce:ec:f4:
01:da:5d:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YFjr259txW0pP5k89WZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMThhNDRkNTRhNDdhNWVhOTdkZWRmZDVlZDgzNzlkN2Vl
YTAyZDAwHhcNMjUwMTMxMDgwMDQxWhcNMjUwMjAxMDgwMDQxWjAzMTEwLwYDVQQD
Eyg2YzlhZWM5NTc1ZWYwOTJiYWJjMThiN2YzZjcxZDYzMzg3NzI5OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V/BRjS1hHoWeCK5fDPvMt3LYtXd
kOGcwhKu9wR05mQpxYDym/yfESjz22GOHRK8CE1tKriLYr6iIWWAiMDvfSjRqwYX
yD1C++JwVquqrrdOSUk4KchJY1gZqYTzcgb64uN8Y6vhH5UNkX1p8lUA3nidk76v
R2eKEnveT0JoHwUb/CuefGK7b00rNzsZnNpR3cFCzYGjdija1cz5BjpbB69nq+Ty
1jEjMA9ZOTGfPbzPfrc6Uv0O67Ma8KQravClFrj0V4MVX7Ogy/OCfcdBarDfQ9Va
z+CMcAW7hPRz/NBeZDJrc3LdBeCS2Z/2hKheV+4ryNgb9wDuv3VFRo9oEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGya7JV17wkrq8GLfz9x1jOHcpnsMB8GA1UdIwQY
MBaAFEwYpE1UpHpeqX3t/V7YN51+6gLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQt
ZjIxMzYzMDcxNTkxLzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQtZjIxMzYzMDcxNTkx
LzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToiEkuHI
EFqDlGE4wEAEVPWN7bxNzNPAFHsZ59XBuWV98ouVVi/17e2fba29RmJCVBD4yUNG
3wMt+GD48xsEeNkso9W5Bg5tbkbENhRPDFnqn+ihldrwj8tLXM7+FrELaLW/VMSS
ajun+xM44fzZ5a6w6TgSsUQEPIlML6FNWi3CSkScA8uLrLNwXWykmmnjgycZV4aU
3Mo+Lv0h4/FRrcke+s4HGp0Jh5ilhxk/BcyjzP2o7GM+J4Q6KqIyRz+zDyzAfMte
8TBIZzXFW2i8RSW99ZWO5HsC3HGmHFqBN7uNi9mWpPQbq/vUnmFBVi4A61X4euWG
eKXRzuz0Adpd/g==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:25 2025 by rpki-client on console-fra.rpki-client.org