Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: G97KEh9BIffAMxvH3oSaA4xN9aWsNd62DFjtrOe/8fw=
Subject key identifier: CB:17:70:2A:79:00:19:A0:AA:4E:B2:75:95:93:67:55:3D:69:7E:D8
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019660297106294D32C42A3BD248064E8EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1502
Signing time: Wed 23 Apr 2025 01:00:50 +0000
Manifest this update: Wed 23 Apr 2025 01:00:50 +0000
Manifest next update: Thu 24 Apr 2025 01:00:50 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: xFa4rjg/ZOjdHaNWcaLwiFS9ZgOeiY1T2e2yEln+hxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:29:71:06:29:4d:32:c4:2a:3b:d2:48:06:4e:8e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Apr 23 01:00:50 2025 GMT
Not After : Apr 24 01:00:50 2025 GMT
Subject: CN=cb17702a790019a0aa4eb275959367553d697ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:7a:f3:fd:8e:d4:47:a8:4d:77:52:c9:ad:
10:d2:ca:db:9d:13:cc:2e:e0:cb:f6:53:ff:0c:9b:
5c:78:75:c7:2c:1e:40:0b:5f:45:0f:e3:ed:09:67:
85:21:53:16:f6:03:1d:44:7b:cf:e2:31:d2:0a:d0:
10:24:fb:3d:85:f2:4b:65:69:26:02:76:1e:27:ae:
1b:e0:ec:42:02:63:23:44:57:6f:b3:b5:e5:14:25:
a9:5f:51:41:e9:f8:85:e9:d0:0f:ac:de:a6:58:cc:
62:8c:26:f1:73:40:ce:41:c9:8f:1e:d8:d1:4e:f5:
94:7a:ef:d5:1b:69:f5:75:48:df:ef:35:99:30:af:
f0:54:2a:fb:c8:17:e2:bb:1c:10:dc:fa:0c:85:24:
f0:22:56:33:88:da:1c:50:ad:14:b1:c8:43:29:ea:
ae:fe:7e:2c:2c:14:53:c0:13:fa:12:ff:7a:7b:cf:
79:9c:96:77:41:02:3a:29:64:0c:dd:91:c4:c3:94:
04:14:a8:3d:06:ae:7c:c1:4a:37:46:bd:67:d2:c2:
3c:0d:7b:c4:3c:f0:0f:68:07:9e:40:ac:cb:6b:59:
67:da:71:3c:5b:cd:e8:fb:83:b4:18:a3:e3:2b:cf:
ab:a3:d8:07:78:3a:50:30:12:a4:88:34:07:55:c8:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:70:2A:79:00:19:A0:AA:4E:B2:75:95:93:67:55:3D:69:7E:D8
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:4b:91:62:f5:c8:51:4f:7a:b3:79:df:e7:da:3e:4e:e6:
cc:cc:cf:b2:a8:9b:40:a8:ff:f4:9c:c0:4d:d1:a4:65:89:a4:
87:02:e9:00:05:44:c8:f9:61:35:86:fb:ae:3a:ee:d0:35:71:
f2:a2:2b:2d:3e:19:ea:12:62:d5:d8:f1:4b:52:c5:df:08:75:
01:c7:8b:ee:b0:26:3d:93:e3:7e:e0:c2:cf:56:22:41:40:20:
0b:d3:b1:d8:74:66:e2:cb:e8:74:c7:6a:0c:9f:fa:13:b2:d5:
c0:12:19:a8:2d:3c:a5:8c:76:c4:ff:1d:00:d2:16:d5:e1:47:
56:27:81:16:e6:26:1e:57:03:40:7b:b9:20:a0:4e:08:98:0a:
de:8f:41:9d:cd:5e:6d:e0:d2:35:f0:f2:82:76:bd:81:97:19:
d9:ec:ad:36:48:ec:5c:64:71:0c:6f:ed:7c:69:e1:ba:e6:18:
f9:66:0f:47:b2:77:ea:af:47:11:8b:b6:86:41:b5:d4:da:18:
e0:f8:9c:30:e0:ed:f3:47:6d:2a:81:43:b5:cf:de:b1:b9:b2:
97:62:8a:1f:09:c8:55:2b:34:3c:c3:56:c1:f7:09:71:e7:4d:
19:d7:8e:47:bc:9a:40:06:1a:e6:43:49:11:63:43:cb:c5:48:
bb:3a:ab:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZgKXEGKU0yxCo70kgGTo73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi
YTNlMzgwHhcNMjUwNDIzMDEwMDUwWhcNMjUwNDI0MDEwMDUwWjAzMTEwLwYDVQQD
EyhjYjE3NzAyYTc5MDAxOWEwYWE0ZWIyNzU5NTkzNjc1NTNkNjk3ZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ168/2O1EeoTXdSya0Q0srbnRPM
LuDL9lP/DJtceHXHLB5AC19FD+PtCWeFIVMW9gMdRHvP4jHSCtAQJPs9hfJLZWkm
AnYeJ64b4OxCAmMjRFdvs7XlFCWpX1FB6fiF6dAPrN6mWMxijCbxc0DOQcmPHtjR
TvWUeu/VG2n1dUjf7zWZMK/wVCr7yBfiuxwQ3PoMhSTwIlYziNocUK0UschDKequ
/n4sLBRTwBP6Ev96e895nJZ3QQI6KWQM3ZHEw5QEFKg9Bq58wUo3Rr1n0sI8DXvE
PPAPaAeeQKzLa1ln2nE8W83o+4O0GKPjK8+ro9gHeDpQMBKkiDQHVchgywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsXcCp5ABmgqk6ydZWTZ1U9aX7YMB8GA1UdIwQY
MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt
MTQ5ODcyNDNhYzU2LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2
LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyFLkWL1
yFFPerN53+faPk7mzMzPsqibQKj/9JzATdGkZYmkhwLpAAVEyPlhNYb7rjru0DVx
8qIrLT4Z6hJi1djxS1LF3wh1AceL7rAmPZPjfuDCz1YiQUAgC9Ox2HRm4svodMdq
DJ/6E7LVwBIZqC08pYx2xP8dANIW1eFHVieBFuYmHlcDQHu5IKBOCJgK3o9Bnc1e
beDSNfDygna9gZcZ2eytNkjsXGRxDG/tfGnhuuYY+WYPR7J36q9HEYu2hkG11NoY
4PicMODt80dtKoFDtc/esbmyl2KKHwnIVSs0PMNWwfcJcedNGdeOR7yaQAYa5kNJ
EWNDy8VIuzqrpQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:59:28 2025 by rpki-client