Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier: +6jTnrvEwkQolhoTsSwQBDMaB+od1FDkWsL/lUu3gtg=
Subject key identifier: F1:A5:3A:C3:28:09:C0:72:A5:37:BD:ED:79:E3:3F:80:D3:C4:7F:B1
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial: 019510C6DA58FAEF694381248476F141BF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number: 13E2
Signing time: Sun 16 Feb 2025 22:00:22 +0000
Manifest this update: Sun 16 Feb 2025 22:00:22 +0000
Manifest next update: Mon 17 Feb 2025 22:00:22 +0000
Files and hashes: 1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: bEHsRsi1mXs4o8/SyUqivNopXKNMTpKLjRybMPw/lzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:da:58:fa:ef:69:43:81:24:84:76:f1:41:bf:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Validity
Not Before: Feb 16 22:00:22 2025 GMT
Not After : Feb 17 22:00:22 2025 GMT
Subject: CN=f1a53ac32809c072a537bded79e33f80d3c47fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:a1:51:f3:a7:48:1b:a2:53:6a:4e:11:e5:
ce:f3:75:5a:20:46:03:f6:ef:67:29:9c:a0:be:c3:
1a:c9:44:e0:b1:c4:87:a1:c8:87:a1:f4:2f:ba:ee:
bb:db:16:6a:fb:cc:73:a4:65:3e:cc:33:36:b9:bc:
68:08:db:c8:11:04:f9:37:e6:19:35:71:7f:12:fa:
f2:9b:7f:cc:f7:f5:76:87:84:59:d4:c0:cc:71:ea:
60:24:0e:c7:05:b9:a3:26:97:4b:1b:a8:b0:41:8c:
29:e1:77:31:6c:96:be:6d:a1:03:cc:6a:4e:41:42:
b8:0e:a3:5a:ee:2b:47:d5:68:d9:31:46:d2:79:c5:
b5:d5:d7:10:65:50:0f:33:be:31:97:83:f5:cc:94:
6d:87:9d:50:01:a0:6c:dd:0a:ea:7b:ed:46:6c:de:
fc:a2:f6:83:44:78:a4:cf:97:8c:a2:4e:72:ee:43:
22:15:4e:ac:4d:91:9e:43:06:97:d8:51:6c:86:5a:
1b:e1:12:c1:29:a2:83:a0:e1:5b:39:d9:e6:3d:e4:
4c:bc:fb:68:90:a0:b0:92:81:e4:12:29:21:32:bd:
7b:2a:d1:a2:b3:72:38:76:6b:12:7b:d3:3b:76:25:
52:db:29:b9:7c:56:04:2f:00:ea:dd:96:c7:c9:c9:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A5:3A:C3:28:09:C0:72:A5:37:BD:ED:79:E3:3F:80:D3:C4:7F:B1
X509v3 Authority Key Identifier:
keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b2:82:30:94:86:8d:85:85:c0:ee:5a:75:97:2a:5f:a5:1f:
d1:b2:7a:a4:63:16:67:de:7b:07:b6:43:e8:ec:4d:1b:e6:0c:
2d:74:b1:de:3b:8d:09:21:53:e0:c7:6e:db:b2:35:35:95:0a:
30:46:d0:3f:1e:5f:62:a1:1b:ac:23:05:5f:c6:db:fa:1c:6d:
6e:c7:2e:b8:95:b0:69:17:54:d9:dc:03:35:b3:ed:72:b3:2f:
f6:8e:79:f9:1f:3f:c0:2a:4f:aa:d7:6b:57:5d:86:db:80:2f:
28:36:7d:41:c4:b8:3b:54:a3:b9:1e:67:44:0a:47:56:1b:38:
b8:46:bd:15:fa:b7:57:2c:be:7b:cd:11:b7:3a:18:54:21:2b:
2c:de:a3:b3:e5:d4:36:03:66:b5:38:f9:f1:86:c9:1f:c9:27:
ff:ef:d5:7e:b8:54:37:e4:4d:15:a6:13:dc:64:63:ea:bf:0d:
16:5e:4c:f9:eb:70:fc:71:d5:ab:e7:38:65:dc:e3:fc:3c:aa:
60:34:9e:97:28:8d:dd:11:2b:36:98:4f:e6:be:c6:54:86:46:
17:82:16:64:63:72:26:56:4c:b9:9a:71:95:74:a6:c5:b8:b2:
2e:f2:27:77:bf:86:41:3a:72:40:6d:5c:ee:2f:bd:9e:28:25:
6c:cc:dc:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxtpY+u9pQ4EkhHbxQb82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjBiZTliNTdiMjViMWVkYTNmODEwOTJlMDBiNDUzOGJl
OGIyOWQwHhcNMjUwMjE2MjIwMDIyWhcNMjUwMjE3MjIwMDIyWjAzMTEwLwYDVQQD
EyhmMWE1M2FjMzI4MDljMDcyYTUzN2JkZWQ3OWUzM2Y4MGQzYzQ3ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBShUfOnSBuiU2pOEeXO83VaIEYD
9u9nKZygvsMayUTgscSHociHofQvuu672xZq+8xzpGU+zDM2ubxoCNvIEQT5N+YZ
NXF/Evrym3/M9/V2h4RZ1MDMcepgJA7HBbmjJpdLG6iwQYwp4XcxbJa+baEDzGpO
QUK4DqNa7itH1WjZMUbSecW11dcQZVAPM74xl4P1zJRth51QAaBs3Qrqe+1GbN78
ovaDRHikz5eMok5y7kMiFU6sTZGeQwaX2FFshlob4RLBKaKDoOFbOdnmPeRMvPto
kKCwkoHkEikhMr17KtGis3I4dmsSe9M7diVS2ym5fFYELwDq3ZbHyclZuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGlOsMoCcBypTe97XnjP4DTxH+xMB8GA1UdIwQY
MBaAFLcgvptXslse2j+BCS4AtFOL6LKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEt
YTEwNTZmNTg5MzU0LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEtYTEwNTZmNTg5MzU0
LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbKCMJSG
jYWFwO5adZcqX6Uf0bJ6pGMWZ957B7ZD6OxNG+YMLXSx3juNCSFT4Mdu27I1NZUK
MEbQPx5fYqEbrCMFX8bb+hxtbscuuJWwaRdU2dwDNbPtcrMv9o55+R8/wCpPqtdr
V12G24AvKDZ9QcS4O1SjuR5nRApHVhs4uEa9Ffq3Vyy+e80RtzoYVCErLN6js+XU
NgNmtTj58YbJH8kn/+/VfrhUN+RNFaYT3GRj6r8NFl5M+etw/HHVq+c4Zdzj/Dyq
YDSelyiN3RErNphP5r7GVIZGF4IWZGNyJlZMuZpxlXSmxbiyLvInd7+GQTpyQG1c
7i+9niglbMzchQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:21 2025 by rpki-client