Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: rLWufwjtMdd3GKJD+TudxE1oZuuLNJBuziYQsjI/O5g=
Subject key identifier: 74:58:54:BC:29:80:62:9F:40:10:93:D8:7F:40:79:7B:72:B6:6E:B1
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 0196526D66155C3F817DB5FDFE6B8692C65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1490
Signing time: Sun 20 Apr 2025 09:00:23 +0000
Manifest this update: Sun 20 Apr 2025 09:00:23 +0000
Manifest next update: Mon 21 Apr 2025 09:00:23 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: FTu942UAWjYKgY5g7tSsWczqG9Fqdqv+LQs04xeF1ec=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:66:15:5c:3f:81:7d:b5:fd:fe:6b:86:92:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Apr 20 09:00:23 2025 GMT
Not After : Apr 21 09:00:23 2025 GMT
Subject: CN=745854bc2980629f401093d87f40797b72b66eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:6c:e0:54:86:ab:f2:db:8e:f3:de:7b:81:
7c:c7:2b:9b:8a:37:a7:20:5f:ae:e8:00:e1:24:40:
b6:eb:7d:97:0e:39:13:bb:2f:c5:55:48:73:1e:7c:
70:84:f1:56:e8:2a:0a:e0:cc:f1:8c:09:60:4c:2a:
8a:a8:ec:c0:02:1f:9a:64:89:d6:7a:5a:03:61:11:
d2:e3:4c:13:e6:ef:41:09:f2:e4:1c:34:38:0d:32:
c3:ba:04:22:7e:8a:73:c6:0c:fe:60:79:44:5f:5e:
85:96:4b:41:8b:43:5f:ad:46:02:b4:92:09:59:2b:
82:5b:86:6f:b4:88:6d:ef:ad:07:c7:5b:9c:64:c0:
07:42:4e:47:25:44:c3:9a:47:4e:2d:4d:8d:cd:a1:
ce:21:b4:4e:f7:eb:f2:60:fe:12:b2:a6:49:06:37:
12:36:24:dd:aa:fc:e7:e2:08:5a:39:49:27:27:7d:
74:39:48:33:5b:ba:01:f3:4e:7d:65:a9:4b:44:69:
15:fe:d3:89:65:fb:a6:af:d2:57:87:72:93:bc:e5:
23:56:57:3a:7e:cf:3b:d7:01:46:49:28:37:2d:9e:
b2:3e:c2:2c:78:bd:96:e2:64:7d:fc:4f:83:62:ba:
a9:fa:74:65:2f:5c:de:48:6d:a8:3c:ec:d8:f9:d8:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:54:BC:29:80:62:9F:40:10:93:D8:7F:40:79:7B:72:B6:6E:B1
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:64:8d:64:27:46:95:34:07:6e:6f:84:3a:5a:4f:7d:c1:fd:
4f:e1:ad:91:c5:c2:3f:d7:ab:2a:cc:fe:7d:00:ea:70:e3:2b:
0b:2d:5f:92:1d:3a:38:b6:73:e4:3a:4a:2d:c9:d4:68:3a:9b:
84:e8:31:07:08:69:8b:d4:46:75:c1:3e:5d:96:c0:ac:36:47:
9e:2f:de:1a:3a:93:78:35:59:89:f4:77:ff:7b:9e:32:db:0b:
fd:64:9d:b1:54:0c:9a:8f:f5:6a:df:85:00:96:0a:04:78:6d:
ae:3c:eb:d3:83:1d:f4:7f:a8:09:f5:bb:d9:38:14:94:b5:97:
88:5e:49:f6:87:ed:40:b3:74:01:18:de:a6:43:27:4c:c8:f6:
04:d5:0a:3c:ff:e3:c2:f9:1b:9b:bd:45:02:d0:48:57:5c:38:
a7:d3:3f:1a:de:b8:c0:d3:b7:a1:2c:c4:76:09:9d:dc:26:c4:
48:23:a0:f9:7c:88:73:05:a5:64:9b:6d:19:e2:a8:1d:b1:f4:
8e:d9:f6:a9:36:84:79:c5:0f:b6:9c:44:d6:78:f3:c6:9c:76:
8d:bc:6e:7d:16:c8:31:78:6a:a1:7e:b2:fa:04:ab:aa:a2:0b:
06:6d:5f:42:1b:c8:a3:1f:1c:5a:2d:a8:bf:3d:18:ab:b3:85:
dc:02:bf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbWYVXD+BfbX9/muGksZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWQxODU0MTRjMTZhZTVkMjI5YThhYTJiZmExNWZlZmM3
MWEyMjIwHhcNMjUwNDIwMDkwMDIzWhcNMjUwNDIxMDkwMDIzWjAzMTEwLwYDVQQD
Eyg3NDU4NTRiYzI5ODA2MjlmNDAxMDkzZDg3ZjQwNzk3YjcyYjY2ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Bs4FSGq/LbjvPee4F8xyubijen
IF+u6ADhJEC2632XDjkTuy/FVUhzHnxwhPFW6CoK4MzxjAlgTCqKqOzAAh+aZInW
eloDYRHS40wT5u9BCfLkHDQ4DTLDugQifopzxgz+YHlEX16FlktBi0NfrUYCtJIJ
WSuCW4ZvtIht760Hx1ucZMAHQk5HJUTDmkdOLU2NzaHOIbRO9+vyYP4SsqZJBjcS
NiTdqvzn4ghaOUknJ310OUgzW7oB8059ZalLRGkV/tOJZfumr9JXh3KTvOUjVlc6
fs871wFGSSg3LZ6yPsIseL2W4mR9/E+DYrqp+nRlL1zeSG2oPOzY+diraQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRYVLwpgGKfQBCT2H9AeXtytm6xMB8GA1UdIwQY
MBaAFEytGFQUwWrl0imoqiv6Ff78caIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQt
OTY0Y2NhNzIyZjczLzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQtOTY0Y2NhNzIyZjcz
LzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2SNZCdG
lTQHbm+EOlpPfcH9T+GtkcXCP9erKsz+fQDqcOMrCy1fkh06OLZz5DpKLcnUaDqb
hOgxBwhpi9RGdcE+XZbArDZHni/eGjqTeDVZifR3/3ueMtsL/WSdsVQMmo/1at+F
AJYKBHhtrjzr04Md9H+oCfW72TgUlLWXiF5J9oftQLN0ARjepkMnTMj2BNUKPP/j
wvkbm71FAtBIV1w4p9M/Gt64wNO3oSzEdgmd3CbESCOg+XyIcwWlZJttGeKoHbH0
jtn2qTaEecUPtpxE1njzxpx2jbxufRbIMXhqoX6y+gSrqqILBm1fQhvIox8cWi2o
vz0Yq7OF3AK/Xg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:04:02 2025 by rpki-client