Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: zdmPE3fZl7A9zAz4bOiSJLbX++9tfjCs6Pz6F7/jdeA=
Subject key identifier: D8:11:93:F4:8E:C7:DC:9D:1E:1B:0C:FD:82:8B:D5:81:EC:8C:97:8D
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 01969F3F7EA13B4C8310C3FDE1E6F9FD3124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0AC2
Signing time: Mon 05 May 2025 07:01:00 +0000
Manifest this update: Mon 05 May 2025 07:01:00 +0000
Manifest next update: Tue 06 May 2025 07:01:00 +0000
Files and hashes: 1: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: /6mJauUA3KGJzj0fOH77AUgd66CYSnagb28abuoP2iI=)
2: tB_e4b44z7tzTJcmPG8zZ2YucoI.roa (hash: s8JbynneL4ehIPiVi1qZbHaxG7ZUldJKZL8Oak7GUOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:7e:a1:3b:4c:83:10:c3:fd:e1:e6:f9:fd:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: May 5 07:01:00 2025 GMT
Not After : May 6 07:01:00 2025 GMT
Subject: CN=d81193f48ec7dc9d1e1b0cfd828bd581ec8c978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:47:29:9e:d9:19:35:41:33:20:74:e7:0e:
21:d4:cb:8f:ca:89:6b:b1:cf:cc:d9:dd:e6:4e:76:
95:45:0b:0a:94:e2:a8:86:6f:c9:c1:50:86:be:ce:
71:9e:c1:da:b6:d3:ce:5f:9e:41:b7:d8:f4:39:3b:
48:b9:56:a4:96:fa:ed:e1:ff:b6:da:69:5f:94:19:
84:6b:b0:09:ec:8b:51:e9:6b:54:33:74:47:ce:65:
d0:42:e8:19:ac:27:bf:80:ed:2f:d7:00:f0:c4:eb:
c4:da:dc:6b:5b:3f:19:66:22:b1:57:16:a4:43:fa:
c6:98:03:23:14:a0:c0:9d:b9:1d:96:09:0a:03:48:
ee:c3:96:c8:9d:2d:28:fc:59:de:c6:5e:55:00:80:
89:ed:2d:5d:26:99:d4:91:f1:c5:ef:9a:c8:bf:90:
ba:f1:0b:34:79:b0:e8:9e:1c:c0:00:ca:9c:2c:6f:
50:18:4d:00:c1:21:87:73:8c:67:90:95:71:87:4f:
4c:d8:4d:b1:e3:0b:80:4e:4c:60:7f:8f:cb:5d:88:
e6:e4:60:f3:b9:66:6b:6d:1c:da:9a:0e:40:7c:57:
4a:be:b4:a8:f3:e4:43:89:3d:13:1d:f6:18:5e:79:
1d:49:1c:05:e3:a2:3b:61:26:9f:1f:d1:ff:98:97:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:11:93:F4:8E:C7:DC:9D:1E:1B:0C:FD:82:8B:D5:81:EC:8C:97:8D
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e7:d9:e1:47:c2:5d:0f:eb:07:d0:78:e9:30:8c:c1:13:d4:
a6:e2:41:9a:d2:6e:18:12:ec:29:26:12:cb:d7:8f:fb:1d:35:
16:00:0e:68:d1:a0:0b:0c:db:a1:b3:5b:0c:9a:9f:c0:ea:3f:
c5:ab:89:8c:68:e8:33:a4:34:2b:84:36:89:29:b6:e6:38:04:
89:e0:ab:ef:40:41:93:b2:4f:55:bb:75:be:e5:2b:83:f7:c0:
7e:48:5e:d2:64:f1:bd:f4:f4:1c:31:c5:71:f6:9f:67:48:42:
75:a4:fb:c2:f3:8a:28:ff:20:57:a2:30:41:d4:da:44:42:a7:
6d:41:26:d2:b4:52:28:c7:d6:39:6b:67:ed:be:8b:85:1c:1f:
f8:0a:e6:f2:44:af:b4:6e:1a:8d:77:48:de:88:1a:d0:b1:00:
fe:f0:06:6d:d4:22:b6:0d:75:b3:b3:e7:84:45:7b:7d:40:53:
ea:4a:22:32:40:97:f9:3a:f3:09:41:18:21:77:08:63:d2:b0:
8d:70:73:34:61:3a:7d:46:52:25:43:03:8e:90:72:03:cc:ec:
ca:44:63:f2:6e:0c:61:a6:de:da:a8:41:43:fc:79:45:aa:47:
93:1d:74:33:00:73:5e:db:8e:b0:4f:cd:36:67:99:20:67:dc:
8b:2d:60:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafP36hO0yDEMP94eb5/TEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx
MmQwMTEwHhcNMjUwNTA1MDcwMTAwWhcNMjUwNTA2MDcwMTAwWjAzMTEwLwYDVQQD
EyhkODExOTNmNDhlYzdkYzlkMWUxYjBjZmQ4MjhiZDU4MWVjOGM5NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTFHKZ7ZGTVBMyB05w4h1MuPyolr
sc/M2d3mTnaVRQsKlOKohm/JwVCGvs5xnsHattPOX55Bt9j0OTtIuVaklvrt4f+2
2mlflBmEa7AJ7ItR6WtUM3RHzmXQQugZrCe/gO0v1wDwxOvE2txrWz8ZZiKxVxak
Q/rGmAMjFKDAnbkdlgkKA0juw5bInS0o/Fnexl5VAICJ7S1dJpnUkfHF75rIv5C6
8Qs0ebDonhzAAMqcLG9QGE0AwSGHc4xnkJVxh09M2E2x4wuATkxgf4/LXYjm5GDz
uWZrbRzamg5AfFdKvrSo8+RDiT0THfYYXnkdSRwF46I7YSafH9H/mJd9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgRk/SOx9ydHhsM/YKL1YHsjJeNMB8GA1UdIwQY
MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt
MWU5YmZmNWU0MDIxLzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx
LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ufZ4UfC
XQ/rB9B46TCMwRPUpuJBmtJuGBLsKSYSy9eP+x01FgAOaNGgCwzbobNbDJqfwOo/
xauJjGjoM6Q0K4Q2iSm25jgEieCr70BBk7JPVbt1vuUrg/fAfkhe0mTxvfT0HDHF
cfafZ0hCdaT7wvOKKP8gV6IwQdTaREKnbUEm0rRSKMfWOWtn7b6LhRwf+Arm8kSv
tG4ajXdI3oga0LEA/vAGbdQitg11s7PnhEV7fUBT6koiMkCX+TrzCUEYIXcIY9Kw
jXBzNGE6fUZSJUMDjpByA8zsykRj8m4MYabe2qhBQ/x5RapHkx10MwBzXtuOsE/N
NmeZIGfciy1gvA==
-----END CERTIFICATE-----
Generated at Mon May 5 11:23:08 2025 by rpki-client