Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: SeWIO/Har9/8wcHRaWVsj7/iIG8kh0PocUih+MWT4vo=
Subject key identifier: 35:5E:5F:CA:A4:43:2E:5B:C4:6D:50:A4:E9:E5:BF:67:82:7C:96:13
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 0196A653E9FFF8878C3B7560CF72860E1B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 152E
Signing time: Tue 06 May 2025 16:00:39 +0000
Manifest this update: Tue 06 May 2025 16:00:39 +0000
Manifest next update: Wed 07 May 2025 16:00:39 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: pmP0aSGvEbv3wfbZGNjYUqugSZy/OjH/ERNYACnJeEk=)
2: oon8tofXSL0bstXb0QiNHaSo5e0.roa (hash: q95x2W1H6So6PI+GrFNwBmF4x3vMZH20z4fA4E6gLBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:e9:ff:f8:87:8c:3b:75:60:cf:72:86:0e:1b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: May 6 16:00:39 2025 GMT
Not After : May 7 16:00:39 2025 GMT
Subject: CN=355e5fcaa4432e5bc46d50a4e9e5bf67827c9613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:e2:8c:62:de:2d:db:f7:f2:95:9b:64:29:
31:8d:d3:c2:29:7b:07:4c:24:ee:90:23:1a:d2:5e:
35:d2:eb:33:15:32:f3:97:9b:0e:da:4a:7e:63:03:
40:87:41:53:e5:41:1c:b6:de:09:c5:07:5c:3d:06:
af:3e:75:17:71:fe:c7:ad:16:14:ea:7e:37:8d:b9:
aa:22:c9:42:50:95:37:4a:f6:74:bc:95:76:3b:1f:
4b:2b:a8:25:c1:2a:52:45:94:21:a0:f2:f0:f3:30:
ec:19:4d:f9:1c:08:86:f0:5b:33:97:64:a3:fe:70:
cf:48:86:0e:dd:b3:50:1f:55:19:d3:da:d3:ac:ff:
9d:14:c8:4e:7f:f4:8b:3d:2f:c7:36:7b:b1:f0:b4:
56:e4:81:e1:cf:01:5e:cd:97:af:57:0b:76:1b:d7:
62:4c:6f:52:fd:81:37:56:93:57:62:66:8d:9e:aa:
9a:61:af:3b:3c:c1:50:e0:43:f5:52:21:af:e6:42:
0c:57:d6:7f:62:91:b2:0f:6e:9a:e1:77:1b:2e:36:
1d:82:d0:9e:43:b8:ec:2a:18:82:0a:a4:eb:b7:de:
d3:8a:cf:3d:c7:87:7b:5f:12:bd:17:4f:02:9f:8b:
77:87:b5:ec:00:3e:35:2c:b9:c1:12:6e:82:ea:98:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:5F:CA:A4:43:2E:5B:C4:6D:50:A4:E9:E5:BF:67:82:7C:96:13
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:33:a7:09:42:2b:f0:e1:af:cb:0b:b7:8f:66:c6:02:cb:
2c:d6:93:15:4e:ea:b8:87:f9:de:46:d0:bb:a7:26:81:f4:98:
63:68:dc:9e:78:71:a1:2f:6d:d0:4c:12:8b:3e:54:77:61:2e:
2a:74:4a:fa:cb:10:f3:8f:d6:b3:30:1b:6d:09:e8:fb:68:09:
a9:49:01:c9:1c:91:8a:cb:96:a9:bb:b4:50:b7:c9:03:ac:8b:
44:98:7b:1d:66:0f:0b:54:36:e3:f3:16:f3:18:9e:b2:dc:74:
c0:c4:d0:8f:8b:e1:f7:8c:da:53:2e:00:57:25:4b:5f:fc:df:
ca:15:1a:35:df:53:6b:c1:25:08:2e:df:f3:ba:a6:32:76:81:
cc:90:f7:8f:8f:5c:ba:d7:af:00:b2:ca:60:98:88:52:e9:1a:
ae:c4:db:0f:e8:cd:e6:e6:f1:ea:70:87:17:1b:e8:8d:6f:13:
7f:97:c7:8b:10:33:35:c1:1e:ea:e1:2f:d7:d9:2f:fa:ae:5b:
ea:41:8e:46:61:52:c7:c9:02:38:79:b7:3d:63:e7:09:25:fc:
50:30:41:65:4b:5a:36:43:33:c6:7a:72:af:9c:b9:0b:e2:b7:
7c:c6:fc:9f:22:24:da:94:1f:f7:a7:e2:de:0c:24:6a:6a:57:
98:5f:e0:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamU+n/+IeMO3Vgz3KGDhthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh
YzVjZDUwHhcNMjUwNTA2MTYwMDM5WhcNMjUwNTA3MTYwMDM5WjAzMTEwLwYDVQQD
EygzNTVlNWZjYWE0NDMyZTViYzQ2ZDUwYTRlOWU1YmY2NzgyN2M5NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo3ijGLeLdv38pWbZCkxjdPCKXsH
TCTukCMa0l410uszFTLzl5sO2kp+YwNAh0FT5UEctt4JxQdcPQavPnUXcf7HrRYU
6n43jbmqIslCUJU3SvZ0vJV2Ox9LK6glwSpSRZQhoPLw8zDsGU35HAiG8Fszl2Sj
/nDPSIYO3bNQH1UZ09rTrP+dFMhOf/SLPS/HNnux8LRW5IHhzwFezZevVwt2G9di
TG9S/YE3VpNXYmaNnqqaYa87PMFQ4EP1UiGv5kIMV9Z/YpGyD26a4XcbLjYdgtCe
Q7jsKhiCCqTrt97Tis89x4d7XxK9F08Cn4t3h7XsAD41LLnBEm6C6pjDmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVeX8qkQy5bxG1QpOnlv2eCfJYTMB8GA1UdIwQY
MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt
NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk
LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp0zpwlC
K/Dhr8sLt49mxgLLLNaTFU7quIf53kbQu6cmgfSYY2jcnnhxoS9t0EwSiz5Ud2Eu
KnRK+ssQ84/WszAbbQno+2gJqUkByRyRisuWqbu0ULfJA6yLRJh7HWYPC1Q24/MW
8xiestx0wMTQj4vh94zaUy4AVyVLX/zfyhUaNd9Ta8ElCC7f87qmMnaBzJD3j49c
utevALLKYJiIUukarsTbD+jN5ubx6nCHFxvojW8Tf5fHixAzNcEe6uEv19kv+q5b
6kGORmFSx8kCOHm3PWPnCSX8UDBBZUtaNkMzxnpyr5y5C+K3fMb8nyIk2pQf96fi
3gwkampXmF/gig==
-----END CERTIFICATE-----
Generated at Wed May 7 01:42:39 2025 by rpki-client