Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: /6Lh9fp8ynBBawLcyAXpIZeMIAXOY3u6v5xkncm/PPw=
Subject key identifier: 81:44:22:29:B3:EC:C9:E6:BC:9E:7B:90:5D:4B:2E:24:56:19:D4:38
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 019655DD303BFCF751E6CE28D6D74CCBC537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 01:01:21 +0000
Manifest this update: Mon 21 Apr 2025 01:01:21 +0000
Manifest next update: Tue 22 Apr 2025 01:01:21 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: eb9XZcQbbvvj9XYQo6otfEkXuWtoLFJOPQiEl1KjWDk=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:30:3b:fc:f7:51:e6:ce:28:d6:d7:4c:cb:c5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Apr 21 01:01:21 2025 GMT
Not After : Apr 22 01:01:21 2025 GMT
Subject: CN=81442229b3ecc9e6bc9e7b905d4b2e245619d438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:91:ec:39:1d:c9:e3:ef:e2:04:db:82:08:
ee:1d:28:4c:0a:0f:01:80:15:01:9d:2f:d5:05:bc:
3d:fc:de:a6:0b:5a:df:7c:e5:81:af:93:42:94:d3:
a5:22:ad:1c:4f:4b:ed:04:7a:d2:88:d1:0c:43:98:
da:b4:47:61:54:80:3d:5f:ae:af:1f:5c:7c:e6:16:
24:cf:8b:3a:3a:58:ac:0f:8e:a5:02:d1:3f:32:73:
a0:b0:11:74:92:96:97:ca:b5:51:50:87:60:8f:9a:
11:cd:56:2d:ee:e7:19:06:8a:05:de:ee:92:81:03:
30:46:56:7b:81:00:6b:02:1b:58:5d:0c:e5:7a:43:
64:40:fd:38:15:11:84:1b:8a:5e:71:e4:58:28:7a:
36:45:85:1d:13:85:e3:1f:36:bd:7d:b2:9c:6d:b1:
7a:05:f8:59:24:54:ab:0d:b0:51:98:d6:45:10:66:
cd:51:74:19:3a:65:e3:38:67:08:b3:20:bf:b5:c1:
cf:04:b4:2a:c7:03:57:46:3a:c6:97:4a:93:9a:df:
32:71:02:ee:dd:be:81:6b:f7:fa:55:fa:2a:13:10:
53:a2:cc:c8:cb:45:e6:c9:cd:9b:1a:c5:e1:96:93:
1f:67:43:62:b6:9b:c1:5c:2b:66:4e:96:de:f0:22:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:22:29:B3:EC:C9:E6:BC:9E:7B:90:5D:4B:2E:24:56:19:D4:38
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:04:7c:61:73:53:3a:ee:6d:db:e3:14:34:d4:f5:ce:d0:cc:
7e:44:8e:97:58:1a:dd:8c:fe:ce:ad:53:93:e5:a9:7e:7d:ca:
35:cf:7a:e6:0f:91:23:fd:49:27:e5:86:d8:30:d8:a9:12:94:
7c:8c:dc:cc:34:da:d2:37:94:d2:7c:0b:28:fe:55:f6:28:cd:
25:b5:32:06:c2:2a:33:6a:6a:04:6f:b1:d2:66:2a:f9:7f:ad:
c3:e5:ce:42:29:50:51:51:11:79:bb:3d:9e:8d:85:c9:2d:2b:
8e:ca:d0:e9:7b:83:9f:f4:3f:75:9d:dc:fa:88:e5:76:51:a4:
43:2a:36:5b:5a:9b:9e:ff:3d:4b:e1:f8:0f:49:6c:3b:cd:2a:
e6:31:9a:54:97:33:3a:51:6b:86:af:67:60:11:51:4a:41:c6:
7c:48:51:e2:23:40:55:db:22:8c:b0:e2:46:9c:a3:19:52:cd:
c5:d8:39:86:b0:b3:92:a0:8c:06:31:26:cb:2f:65:67:bf:e9:
97:1d:9a:be:46:17:90:ce:24:4f:15:96:8a:47:cc:50:52:e8:
3d:09:1a:cb:0c:cb:da:75:5d:62:e3:4f:17:ae:b5:f7:9d:55:
77:59:9b:8b:41:94:fb:5f:56:e5:ea:7a:89:bf:60:03:a3:16:
c4:e2:5f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3TA7/PdR5s4o1tdMy8U3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYWU2ZjUyNGVlZDBmNzNjODQ5YjA2NDM4MjdiODBlMzdj
NDZjNzEwHhcNMjUwNDIxMDEwMTIxWhcNMjUwNDIyMDEwMTIxWjAzMTEwLwYDVQQD
Eyg4MTQ0MjIyOWIzZWNjOWU2YmM5ZTdiOTA1ZDRiMmUyNDU2MTlkNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6qR7DkdyePv4gTbggjuHShMCg8B
gBUBnS/VBbw9/N6mC1rffOWBr5NClNOlIq0cT0vtBHrSiNEMQ5jatEdhVIA9X66v
H1x85hYkz4s6OlisD46lAtE/MnOgsBF0kpaXyrVRUIdgj5oRzVYt7ucZBooF3u6S
gQMwRlZ7gQBrAhtYXQzlekNkQP04FRGEG4peceRYKHo2RYUdE4XjHza9fbKcbbF6
BfhZJFSrDbBRmNZFEGbNUXQZOmXjOGcIsyC/tcHPBLQqxwNXRjrGl0qTmt8ycQLu
3b6Ba/f6VfoqExBToszIy0Xmyc2bGsXhlpMfZ0NitpvBXCtmTpbe8CLlKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFEIimz7MnmvJ57kF1LLiRWGdQ4MB8GA1UdIwQY
MBaAFE6ub1JO7Q9zyEmwZDgnuA43xGxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzct
M2JiMmNkODBhMmM5LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzctM2JiMmNkODBhMmM5
LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgR8YXNT
Ou5t2+MUNNT1ztDMfkSOl1ga3Yz+zq1Tk+Wpfn3KNc965g+RI/1JJ+WG2DDYqRKU
fIzczDTa0jeU0nwLKP5V9ijNJbUyBsIqM2pqBG+x0mYq+X+tw+XOQilQUVERebs9
no2FyS0rjsrQ6XuDn/Q/dZ3c+ojldlGkQyo2W1qbnv89S+H4D0lsO80q5jGaVJcz
OlFrhq9nYBFRSkHGfEhR4iNAVdsijLDiRpyjGVLNxdg5hrCzkqCMBjEmyy9lZ7/p
lx2avkYXkM4kTxWWikfMUFLoPQkaywzL2nVdYuNPF661951Vd1mbi0GU+19W5ep6
ib9gA6MWxOJf+w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:49 2025 by rpki-client