Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
File: TGD9CUHz0veinDVh5WMYbvd1oeU.mft (raw, json)
Hash identifier: v4/Sseg4ghhB7mRn2IqfXG2ha4zzd4u1G4kH7aCzPUc=
Subject key identifier: 60:5C:F4:70:A1:21:C7:C5:8E:F1:EE:E3:23:4C:65:D8:22:33:E6:8E
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Certificate issuer: /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial: 01964AB3E1C05DE231BCE573430492FAE951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
Manifest number: 04A5
Signing time: Fri 18 Apr 2025 21:00:24 +0000
Manifest this update: Fri 18 Apr 2025 21:00:24 +0000
Manifest next update: Sat 19 Apr 2025 21:00:24 +0000
Files and hashes: 1: InvlOQlXHysCNzw0ls55YDrBMiI.roa (hash: w/RbbXLN25pr436QWg9t/JqUqj+z8QTi6SAzMiRWMFM=)
2: TGD9CUHz0veinDVh5WMYbvd1oeU.crl (hash: H0kDTAWP8aSFVr2Kl59prFDasYo8yiu9m0ZzuFvNZCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:e1:c0:5d:e2:31:bc:e5:73:43:04:92:fa:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Validity
Not Before: Apr 18 21:00:24 2025 GMT
Not After : Apr 19 21:00:24 2025 GMT
Subject: CN=605cf470a121c7c58ef1eee3234c65d82233e68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:89:4c:87:57:b8:8e:36:ca:52:dc:f1:5a:
18:ae:f3:f0:d9:04:4b:24:9a:47:73:9d:ae:cb:b3:
bc:76:64:71:cf:4c:93:a4:77:19:bd:d1:55:b7:f7:
40:85:3e:d2:1c:8a:05:ca:73:3d:4b:64:fb:87:81:
25:20:65:be:1d:a0:94:cf:da:95:89:ad:ab:64:9c:
c1:93:53:1d:75:31:98:f2:07:0f:b6:3f:4c:e0:02:
d9:22:3d:8c:3d:63:e3:e1:82:14:c3:ca:f0:4c:b3:
45:3d:38:2f:96:a0:be:fe:a3:46:c9:1c:2e:fb:2c:
7b:54:22:8b:f8:ea:51:60:f0:1f:5d:68:0e:09:2a:
51:3d:c3:a4:e2:7d:1e:ba:05:fa:ce:02:92:e4:a8:
c0:a1:c5:0a:22:24:54:87:88:18:0e:04:b2:fa:43:
08:f3:4c:2a:2d:e8:30:26:e1:4e:70:7b:ea:5f:9a:
17:60:e3:d9:33:05:0d:13:ec:bf:1c:43:db:05:b7:
65:98:a0:21:56:dc:ab:9c:dc:02:18:29:49:e2:d1:
08:d5:28:7d:d0:66:a4:40:2d:61:5a:93:e1:7f:2b:
20:c7:7c:f4:c6:b2:f1:0c:08:7a:7d:ac:7e:fd:c3:
80:70:3b:d8:62:38:e8:9f:0f:69:38:9a:2d:e8:c2:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:F4:70:A1:21:C7:C5:8E:F1:EE:E3:23:4C:65:D8:22:33:E6:8E
X509v3 Authority Key Identifier:
keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:1e:9b:b6:cf:0c:db:04:94:b7:10:eb:e1:18:bd:ee:ba:
e2:df:10:31:1e:f9:84:c4:e3:3e:8f:ac:cd:44:b8:45:ba:6f:
50:e6:8b:30:9c:ac:3a:6a:f7:06:4c:46:a2:2b:a3:fe:9a:8f:
91:be:a8:75:47:45:8a:ba:ae:4c:59:58:32:6f:0f:fb:db:e3:
d3:3a:7f:c5:99:ba:d4:3c:97:12:2d:88:86:f3:ad:f2:73:ed:
f7:ad:15:b4:4e:45:8d:19:73:34:cc:dd:98:07:ac:f7:cd:82:
d5:15:ac:19:f6:9a:e6:a3:9a:4e:11:c8:a1:a4:cb:4d:b8:6d:
c5:29:77:4e:a3:76:0b:d1:39:83:8e:60:47:8f:a0:5b:47:68:
ba:b2:a9:90:ef:35:4e:39:40:b3:66:7a:5f:f6:69:ea:2a:1e:
f1:25:59:3b:eb:d3:f7:33:b0:20:52:34:49:0f:e8:21:4c:00:
60:6c:12:d3:1a:7e:39:43:e7:68:ae:17:6f:13:a3:36:8e:4b:
62:5e:b1:6b:19:e0:a9:ea:51:7b:ea:b6:09:b4:04:7e:4a:cb:
bb:72:69:9e:d5:1e:dd:57:d0:f8:37:a5:99:39:c4:74:7c:07:
d8:91:d6:b9:92:13:ca:a0:7f:43:93:12:b8:7c:2b:55:9e:be:
bc:ed:67:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKs+HAXeIxvOVzQwSS+ulRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNjBmZDA5NDFmM2QyZjdhMjljMzU2MWU1NjMxODZlZjc3
NWExZTUwHhcNMjUwNDE4MjEwMDI0WhcNMjUwNDE5MjEwMDI0WjAzMTEwLwYDVQQD
Eyg2MDVjZjQ3MGExMjFjN2M1OGVmMWVlZTMyMzRjNjVkODIyMzNlNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIqJTIdXuI42ylLc8VoYrvPw2QRL
JJpHc52uy7O8dmRxz0yTpHcZvdFVt/dAhT7SHIoFynM9S2T7h4ElIGW+HaCUz9qV
ia2rZJzBk1MddTGY8gcPtj9M4ALZIj2MPWPj4YIUw8rwTLNFPTgvlqC+/qNGyRwu
+yx7VCKL+OpRYPAfXWgOCSpRPcOk4n0eugX6zgKS5KjAocUKIiRUh4gYDgSy+kMI
80wqLegwJuFOcHvqX5oXYOPZMwUNE+y/HEPbBbdlmKAhVtyrnNwCGClJ4tEI1Sh9
0GakQC1hWpPhfysgx3z0xrLxDAh6fax+/cOAcDvYYjjonw9pOJot6MKweQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBc9HChIcfFjvHu4yNMZdgiM+aOMB8GA1UdIwQY
MBaAFExg/QlB89L3opw1YeVjGG73daHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNTVjOGItMDRhNC00MTJiLThiZGEt
MWY1ZDZmNTZjZjcyLzEvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wNTVjOGItMDRhNC00MTJiLThiZGEtMWY1ZDZmNTZjZjcy
LzEvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmEem7bP
DNsElLcQ6+EYve664t8QMR75hMTjPo+szUS4RbpvUOaLMJysOmr3BkxGoiuj/pqP
kb6odUdFirquTFlYMm8P+9vj0zp/xZm61DyXEi2IhvOt8nPt960VtE5FjRlzNMzd
mAes982C1RWsGfaa5qOaThHIoaTLTbhtxSl3TqN2C9E5g45gR4+gW0dourKpkO81
TjlAs2Z6X/Zp6ioe8SVZO+vT9zOwIFI0SQ/oIUwAYGwS0xp+OUPnaK4XbxOjNo5L
Yl6xaxngqepRe+q2CbQEfkrLu3JpntUe3VfQ+DelmTnEdHwH2JHWuZITyqB/Q5MS
uHwrVZ6+vO1nGg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:11:24 2025 by rpki-client