Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: lOF2J16CPJZ9DhsvNaBqlM1PA0/tQN7bqPGy7HTk/vA=
Subject key identifier: B7:B6:05:DD:7B:DC:79:C5:8E:FE:D0:96:A8:8A:75:79:AE:02:70:66
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 01958CCE08DBB996F3655FBBBD850B623A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 0353
Signing time: Thu 13 Mar 2025 00:01:07 +0000
Manifest this update: Thu 13 Mar 2025 00:01:07 +0000
Manifest next update: Fri 14 Mar 2025 00:01:07 +0000
Files and hashes: 1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: CmLrY1NxQupzPE0mZ3NYVoHeMWoesoB7f/vCw021YmE=)
3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:08:db:b9:96:f3:65:5f:bb:bd:85:0b:62:3a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Mar 13 00:01:07 2025 GMT
Not After : Mar 14 00:01:07 2025 GMT
Subject: CN=b7b605dd7bdc79c58efed096a88a7579ae027066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:d6:19:40:ec:57:a0:09:5c:bd:58:6f:d1:
46:5c:01:b3:2c:68:1f:1d:3a:80:24:88:1e:20:b8:
8e:a6:04:67:a9:25:e0:21:49:58:8e:e8:c3:75:b4:
1e:51:67:b8:a8:33:04:f1:5e:36:e0:e0:e9:01:74:
70:99:3e:1b:83:2c:db:8c:fb:61:59:45:79:0a:82:
90:6e:e4:c3:85:e7:cd:b6:e7:15:4c:54:ca:59:bc:
85:ff:54:3e:c7:46:24:f0:21:29:53:0e:84:37:29:
c5:87:8c:6b:95:1f:b1:76:ca:36:5c:0f:7a:bb:a9:
d9:88:7f:c8:01:28:41:a6:c0:16:9b:d4:d7:44:78:
d0:3e:be:fa:2f:27:f8:e6:f4:2b:bc:a7:04:1f:75:
2d:21:35:54:1e:02:7b:15:65:7a:6f:f4:2a:08:c3:
5c:cf:67:f8:ed:90:c6:b8:3b:a9:ab:43:88:ee:9e:
05:48:36:54:fb:62:a9:72:4b:5e:cc:3b:ae:b5:23:
ed:e3:ee:c8:44:ea:de:a8:2f:ca:10:ab:3e:6a:d2:
45:91:39:9f:9e:af:c2:6a:b6:c3:67:7c:d7:3e:4c:
5e:f7:2a:9f:2e:43:38:35:8c:da:51:6e:02:1b:38:
56:37:49:5a:af:75:76:79:88:38:ae:db:87:e2:cf:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:05:DD:7B:DC:79:C5:8E:FE:D0:96:A8:8A:75:79:AE:02:70:66
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:e9:1c:df:36:fe:de:ba:fd:b7:84:25:48:c4:25:f3:e7:
2f:f4:09:5d:39:71:38:d2:9a:83:55:18:9d:e4:a0:b3:97:e1:
e1:d6:89:5c:92:8d:9c:97:49:c1:8b:86:a5:00:1f:eb:81:19:
b5:a8:09:a3:2a:ac:3c:71:94:65:b6:28:85:28:13:66:ea:96:
f8:af:92:7b:7c:a1:b1:ac:73:83:e6:02:85:2b:73:1c:0b:fa:
d5:ab:96:6a:65:2b:b5:08:fc:ae:c0:0a:fa:2f:bb:dc:78:5e:
47:08:d3:93:2c:88:47:48:8c:7b:6a:74:0c:0d:b3:44:72:83:
7e:87:bd:9b:32:66:70:e1:aa:b7:ae:d8:9b:64:4d:38:6f:da:
ce:07:41:88:c8:63:7b:e4:c3:a5:a6:29:8d:c9:72:4c:f0:7e:
f1:63:a8:39:a4:4b:71:3c:6f:02:de:ff:d8:e5:9b:98:72:b2:
e3:31:84:c2:15:1a:fc:1d:18:c7:0c:ec:7a:36:c9:91:71:97:
b6:da:cc:ba:36:5b:e7:a0:46:c2:b4:46:21:57:63:50:b5:76:
a6:1c:3f:8d:c5:13:95:a4:7e:8e:e1:fd:d3:49:90:8a:92:ac:
e1:b7:40:f9:b0:2d:08:68:c5:ba:0d:b4:7c:e8:85:76:12:68:
69:51:b7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzgjbuZbzZV+7vYULYjpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5
MDViMTYwHhcNMjUwMzEzMDAwMTA3WhcNMjUwMzE0MDAwMTA3WjAzMTEwLwYDVQQD
EyhiN2I2MDVkZDdiZGM3OWM1OGVmZWQwOTZhODhhNzU3OWFlMDI3MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1vWGUDsV6AJXL1Yb9FGXAGzLGgf
HTqAJIgeILiOpgRnqSXgIUlYjujDdbQeUWe4qDME8V424ODpAXRwmT4bgyzbjPth
WUV5CoKQbuTDhefNtucVTFTKWbyF/1Q+x0Yk8CEpUw6ENynFh4xrlR+xdso2XA96
u6nZiH/IAShBpsAWm9TXRHjQPr76Lyf45vQrvKcEH3UtITVUHgJ7FWV6b/QqCMNc
z2f47ZDGuDupq0OI7p4FSDZU+2KpcktezDuutSPt4+7IROreqC/KEKs+atJFkTmf
nq/CarbDZ3zXPkxe9yqfLkM4NYzaUW4CGzhWN0lar3V2eYg4rtuH4s8bDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe2Bd173HnFjv7QlqiKdXmuAnBmMB8GA1UdIwQY
MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt
OTFmNDlkOGQxMTVkLzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk
LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4fpHN82
/t66/beEJUjEJfPnL/QJXTlxONKag1UYneSgs5fh4daJXJKNnJdJwYuGpQAf64EZ
tagJoyqsPHGUZbYohSgTZuqW+K+Se3yhsaxzg+YChStzHAv61auWamUrtQj8rsAK
+i+73HheRwjTkyyIR0iMe2p0DA2zRHKDfoe9mzJmcOGqt67Ym2RNOG/azgdBiMhj
e+TDpaYpjclyTPB+8WOoOaRLcTxvAt7/2OWbmHKy4zGEwhUa/B0YxwzsejbJkXGX
ttrMujZb56BGwrRGIVdjULV2phw/jcUTlaR+juH900mQipKs4bdA+bAtCGjFug20
fOiFdhJoaVG3ig==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:50 2025 by rpki-client