Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json)
Hash identifier: MvuGo+Gr1JOvLs1dUXiOA0btEbLj55XocWcR4Do3S9o=
Subject key identifier: A4:47:8F:5E:48:F5:B4:19:E9:EE:5D:FA:9F:4F:B0:0E:2B:BA:88:AB
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial: 01964EFEC21A80504E10C6EB5E38FD02065D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 17:00:40 +0000
Manifest this update: Sat 19 Apr 2025 17:00:40 +0000
Manifest next update: Sun 20 Apr 2025 17:00:40 +0000
Files and hashes: 1: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: yT7aD6dLVTCg6kVeNJQe0SDdZuFBeV86n6/OtzymZjI=)
2: kE8LdGAFW614HUcjN1MoZxFokJs.roa (hash: XYMGtkKoA87TX5nzm+UQ3ylduTU9EvUGKlmdAtXqyu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:c2:1a:80:50:4e:10:c6:eb:5e:38:fd:02:06:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Validity
Not Before: Apr 19 17:00:40 2025 GMT
Not After : Apr 20 17:00:40 2025 GMT
Subject: CN=a4478f5e48f5b419e9ee5dfa9f4fb00e2bba88ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:1e:e6:62:f2:33:3b:14:c6:c9:ca:76:ec:
54:e1:82:44:c3:03:4f:28:4e:10:ad:c1:55:9d:7d:
ff:9c:f6:1d:29:17:f2:78:59:9a:81:23:64:31:19:
df:0d:50:ab:d7:dd:33:99:50:35:05:79:69:fe:6b:
09:b0:66:71:ce:d5:7a:94:50:33:4d:90:98:b0:bf:
7c:91:38:a9:f7:61:98:31:34:d1:40:4e:3c:da:85:
ee:10:9f:5e:a8:6a:05:80:e9:a5:1a:81:28:ae:5e:
2b:56:67:2b:0e:59:eb:8a:9d:bd:05:49:81:53:aa:
4f:fd:bd:46:d6:64:ff:53:9f:ba:e8:a8:bf:79:02:
94:cd:9b:f9:0f:d3:d2:a3:11:54:a0:8f:e2:23:e5:
36:ba:27:9b:39:ae:fe:df:a4:79:53:0b:fe:fa:25:
ba:98:44:de:79:9f:37:64:f9:83:c6:b6:6f:d6:b9:
d2:d6:aa:87:fe:2e:26:08:a1:8f:6e:fe:14:cb:a7:
39:f0:95:20:ce:10:06:40:c8:2f:cc:ee:21:d9:f1:
62:df:13:1d:e5:93:ff:e0:f8:0b:e0:87:1c:96:a3:
2c:d0:36:2e:19:f3:12:fb:41:6e:d7:43:ca:e3:8f:
32:5b:68:6d:b2:ca:4f:eb:ab:50:d4:5b:7a:cb:e4:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:47:8F:5E:48:F5:B4:19:E9:EE:5D:FA:9F:4F:B0:0E:2B:BA:88:AB
X509v3 Authority Key Identifier:
keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:96:22:8d:90:a5:29:8e:9b:06:a6:ba:ba:9b:77:df:2b:76:
d5:3e:bf:b9:29:a3:00:29:8b:f3:91:1d:64:15:f6:11:36:50:
7f:0f:dd:cc:2e:d0:ad:a3:07:13:55:ea:5b:30:48:ea:f9:3e:
ad:55:d6:54:d0:23:20:5a:0c:95:f6:e9:e6:8f:cf:8d:d7:28:
41:b9:b1:3f:c6:ed:03:84:30:42:36:db:fc:68:64:56:3c:22:
ab:9d:48:f5:a1:f5:2b:f6:38:c4:75:43:d4:1f:12:e0:eb:95:
59:2d:47:18:a0:23:68:18:bd:5a:6d:ec:f4:12:ac:e3:bb:c1:
89:3c:a4:c1:6a:64:d3:25:a2:1c:fd:28:c2:76:51:a7:0b:a1:
97:08:ef:a3:c3:3a:ee:f3:b4:7a:f2:06:cb:87:11:0e:ee:a0:
56:e8:40:32:15:47:89:ff:e6:96:17:ca:65:51:87:0b:ea:5e:
65:e6:32:50:13:a9:25:1c:78:3e:0b:17:1a:b4:3e:ad:4c:bf:
68:cc:26:aa:72:7c:f0:a6:21:50:d1:33:b1:44:80:76:10:07:
6a:1a:4c:7f:9e:42:2d:d2:af:54:0d:24:ac:a5:94:c4:ae:46:
2d:5e:a7:aa:55:69:e6:f3:16:a6:f3:b3:4c:9f:8b:87:33:a3:
c2:6f:4e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZO/sIagFBOEMbrXjj9AgZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYjZkZTNjZDkxMGYzYmZmN2ZmODVkZWQ0NTJjNDMxYjFl
OGE1MjAwHhcNMjUwNDE5MTcwMDQwWhcNMjUwNDIwMTcwMDQwWjAzMTEwLwYDVQQD
EyhhNDQ3OGY1ZTQ4ZjViNDE5ZTllZTVkZmE5ZjRmYjAwZTJiYmE4OGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO4e5mLyMzsUxsnKduxU4YJEwwNP
KE4QrcFVnX3/nPYdKRfyeFmagSNkMRnfDVCr190zmVA1BXlp/msJsGZxztV6lFAz
TZCYsL98kTip92GYMTTRQE482oXuEJ9eqGoFgOmlGoEorl4rVmcrDlnrip29BUmB
U6pP/b1G1mT/U5+66Ki/eQKUzZv5D9PSoxFUoI/iI+U2uiebOa7+36R5Uwv++iW6
mETeeZ83ZPmDxrZv1rnS1qqH/i4mCKGPbv4Uy6c58JUgzhAGQMgvzO4h2fFi3xMd
5ZP/4PgL4IcclqMs0DYuGfMS+0Fu10PK448yW2htsspP66tQ1Ft6y+SYswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRHj15I9bQZ6e5d+p9PsA4ruoirMB8GA1UdIwQY
MBaAFEy23jzZEPO/9/+F3tRSxDGx6KUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgt
MDNmNjA0MzI0ZmNmLzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgtMDNmNjA0MzI0ZmNm
LzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJYijZCl
KY6bBqa6upt33yt21T6/uSmjACmL85EdZBX2ETZQfw/dzC7QraMHE1XqWzBI6vk+
rVXWVNAjIFoMlfbp5o/PjdcoQbmxP8btA4QwQjbb/GhkVjwiq51I9aH1K/Y4xHVD
1B8S4OuVWS1HGKAjaBi9Wm3s9BKs47vBiTykwWpk0yWiHP0ownZRpwuhlwjvo8M6
7vO0evIGy4cRDu6gVuhAMhVHif/mlhfKZVGHC+peZeYyUBOpJRx4PgsXGrQ+rUy/
aMwmqnJ88KYhUNEzsUSAdhAHahpMf55CLdKvVA0krKWUxK5GLV6nqlVp5vMWpvOz
TJ+LhzOjwm9OzA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:43 2025 by rpki-client