Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: cB7P4P8rvQ47nP4niL7P2prvqfe2dVrsVRD7du0Mf0k=
Subject key identifier: 4B:ED:51:D1:A3:84:6A:FB:31:32:B2:F4:CD:BD:86:B4:93:F1:25:E7
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 01961BB6C0538DCF65D886FEC36F5766AA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 0EDA
Signing time: Wed 09 Apr 2025 18:01:23 +0000
Manifest this update: Wed 09 Apr 2025 18:01:23 +0000
Manifest next update: Thu 10 Apr 2025 18:01:23 +0000
Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=)
2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: dA4/VnFsJNuJeRR73Qh65UsiLL/kdlyKlPJ5MtskwYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:b6:c0:53:8d:cf:65:d8:86:fe:c3:6f:57:66:aa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Apr 9 18:01:23 2025 GMT
Not After : Apr 10 18:01:23 2025 GMT
Subject: CN=4bed51d1a3846afb3132b2f4cdbd86b493f125e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:b3:b3:01:27:33:93:e7:f3:43:03:e1:f7:
f9:d1:d2:87:1e:0c:13:27:87:56:48:c2:73:e7:c6:
a4:cd:12:64:b0:b8:8b:41:fe:37:37:4e:9f:23:cf:
7b:4a:f4:ab:18:f7:2f:85:f2:0f:65:dc:64:84:55:
e9:94:2e:f1:84:fb:da:c9:ea:82:12:fb:18:6b:e4:
10:07:86:3f:3a:52:24:af:94:57:1c:a6:e7:fd:c8:
d8:09:90:67:fa:6a:b7:50:cc:6a:95:47:8b:1f:62:
dc:be:69:54:66:bf:c2:1e:de:5b:dd:1e:c2:32:9c:
e6:d9:5e:c2:9b:95:a1:e1:73:c0:04:0e:73:87:8d:
5e:09:50:9c:6f:04:06:80:70:68:7b:42:b7:68:6f:
25:3b:98:22:80:d5:f1:ef:eb:77:1b:15:e0:87:d2:
c6:bd:e7:8d:48:ba:05:86:0a:38:70:b1:53:d0:6b:
c8:a0:f9:fd:82:32:92:50:81:45:c9:9a:cc:dd:79:
61:2f:3b:7e:7b:84:91:de:98:91:0c:50:fa:9e:b8:
70:07:b9:1a:26:cb:ec:a0:86:05:08:d2:c2:31:59:
59:09:61:f2:81:e3:6d:8a:63:18:ce:f2:c1:fc:f6:
e4:02:7a:7e:e1:e9:a4:34:c2:01:14:ea:bb:8d:c8:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:51:D1:A3:84:6A:FB:31:32:B2:F4:CD:BD:86:B4:93:F1:25:E7
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6a:64:14:5d:e8:24:e9:71:88:bb:fb:dc:ce:0d:14:b1:68:
3d:cf:c3:d0:29:85:15:ce:51:0a:ce:37:cb:ef:84:9e:64:89:
4b:cd:02:82:d3:42:90:24:7c:fd:6a:5a:dd:45:46:f3:1d:85:
af:c3:43:63:6c:82:1e:37:54:e2:91:88:8d:31:a0:e8:7c:54:
70:8d:7a:33:7f:4d:95:01:c5:cb:0e:81:64:58:18:1c:77:46:
33:67:29:ff:89:ee:7d:90:49:80:06:a7:72:33:b3:8b:92:c9:
96:a3:8a:fe:cd:6d:8f:33:80:32:bb:10:2b:36:90:96:75:e3:
35:bb:5d:1b:45:d0:6b:a7:80:3b:5c:2a:8d:97:40:2f:f2:70:
6a:64:e2:33:1b:cc:dc:a7:5b:c0:f5:01:85:4c:ba:a3:88:3f:
fd:fa:a7:c6:ad:e1:a5:04:6a:5b:2a:44:78:1a:3b:5d:09:4e:
42:7d:d2:d3:cd:f9:77:df:f5:40:c7:ea:3a:f0:dc:8f:9f:74:
96:7a:61:68:42:fb:b3:e0:43:18:9f:14:7d:c2:63:2f:08:ac:
de:02:f0:cf:d4:04:61:08:83:aa:15:4e:53:11:7c:61:1a:5b:
3f:e3:78:6a:9f:8e:9b:9c:c3:f3:d2:2c:42:a2:62:c8:bf:c0:
49:9f:04:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYbtsBTjc9l2Ib+w29XZqojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2Y0MjhmZDk4MzRjZDVlYzliYjE2MGY4YjZkY2Y0NDZl
ZjVkOTMwHhcNMjUwNDA5MTgwMTIzWhcNMjUwNDEwMTgwMTIzWjAzMTEwLwYDVQQD
Eyg0YmVkNTFkMWEzODQ2YWZiMzEzMmIyZjRjZGJkODZiNDkzZjEyNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bKzswEnM5Pn80MD4ff50dKHHgwT
J4dWSMJz58akzRJksLiLQf43N06fI897SvSrGPcvhfIPZdxkhFXplC7xhPvayeqC
EvsYa+QQB4Y/OlIkr5RXHKbn/cjYCZBn+mq3UMxqlUeLH2LcvmlUZr/CHt5b3R7C
Mpzm2V7Cm5Wh4XPABA5zh41eCVCcbwQGgHBoe0K3aG8lO5gigNXx7+t3GxXgh9LG
veeNSLoFhgo4cLFT0GvIoPn9gjKSUIFFyZrM3XlhLzt+e4SR3piRDFD6nrhwB7ka
JsvsoIYFCNLCMVlZCWHygeNtimMYzvLB/PbkAnp+4emkNMIBFOq7jcg/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvtUdGjhGr7MTKy9M29hrST8SXnMB8GA1UdIwQY
MBaAFEw/Qo/Zg0zV7JuxYPi23PRG712TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzIt
MTM5NTM2OTUyODk2LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzItMTM5NTM2OTUyODk2
LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWpkFF3o
JOlxiLv73M4NFLFoPc/D0CmFFc5RCs43y++EnmSJS80CgtNCkCR8/Wpa3UVG8x2F
r8NDY2yCHjdU4pGIjTGg6HxUcI16M39NlQHFyw6BZFgYHHdGM2cp/4nufZBJgAan
cjOzi5LJlqOK/s1tjzOAMrsQKzaQlnXjNbtdG0XQa6eAO1wqjZdAL/JwamTiMxvM
3KdbwPUBhUy6o4g//fqnxq3hpQRqWypEeBo7XQlOQn3S0835d9/1QMfqOvDcj590
lnphaEL7s+BDGJ8UfcJjLwis3gLwz9QEYQiDqhVOUxF8YRpbP+N4ap+Om5zD89Is
QqJiyL/ASZ8Ekg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:48 2025 by rpki-client