Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: 4BxWpjckdrY9mUDol/4k3SGkg/tr+8IKqPm5Mgs8Wzg=
Subject key identifier: 8B:27:16:3E:3A:EF:35:05:22:27:52:EA:E6:6F:02:92:13:D7:D6:B2
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 01969D87E43C00B2002D108C89A3B055B94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 09CB
Signing time: Sun 04 May 2025 23:00:50 +0000
Manifest this update: Sun 04 May 2025 23:00:50 +0000
Manifest next update: Mon 05 May 2025 23:00:50 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: AasfGvqoRQAxybBxhp9h3zjeADcNenRwg98W6IMlwyg=)
2: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (hash: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:e4:3c:00:b2:00:2d:10:8c:89:a3:b0:55:b9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: May 4 23:00:50 2025 GMT
Not After : May 5 23:00:50 2025 GMT
Subject: CN=8b27163e3aef3505222752eae66f029213d7d6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:47:47:13:fb:e2:4e:5f:63:63:c8:e9:48:
b7:46:2d:1c:98:b4:e1:84:1e:ac:51:46:d1:0d:3e:
0b:f5:4d:60:29:1d:3c:22:ba:43:22:91:6f:56:78:
e5:14:3e:d2:c3:d3:ec:c3:a6:26:84:12:30:27:1c:
2e:00:ea:b0:d6:b3:c4:a0:27:72:ca:b7:ea:71:10:
a8:2f:02:9b:44:16:6c:d1:e7:76:2d:bc:eb:1d:7f:
2c:02:91:fb:bd:0c:17:86:e3:3d:b3:2e:4c:2b:f0:
43:6e:db:01:40:a7:26:4a:2f:c0:d8:83:c0:bf:60:
51:c2:db:74:01:30:4e:29:b1:37:aa:16:b8:44:5a:
52:a7:e3:ee:79:2e:24:3f:5b:87:81:8c:31:fa:bd:
df:ee:48:83:00:bb:ff:6e:00:d0:f2:53:44:a8:aa:
c8:c1:74:42:b1:e0:c6:bb:38:d6:44:ba:b5:44:d2:
00:49:68:d3:54:56:e3:a5:d3:df:38:57:48:3a:9d:
c3:58:b6:cc:cd:6e:55:f9:43:85:d9:68:74:8a:b4:
a9:41:30:f2:d1:89:d6:3d:24:6d:2b:f1:90:81:19:
f4:28:bf:9d:f5:22:ae:ec:15:a6:12:28:d9:71:8a:
d2:11:42:93:87:8b:3e:d3:1f:8b:83:fd:f1:81:d2:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:16:3E:3A:EF:35:05:22:27:52:EA:E6:6F:02:92:13:D7:D6:B2
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f5:d8:de:3c:1d:d1:f1:d0:ce:0b:f1:1b:00:c2:ab:82:99:
b7:9e:3d:e4:e0:7f:1c:f4:8a:1f:c1:f3:6a:dc:92:52:1a:57:
99:08:58:d7:4c:88:69:60:d3:b7:6e:11:64:02:32:31:b4:7e:
db:0c:74:e1:b3:e2:97:9d:d8:7a:86:d7:0f:c9:4b:9f:15:01:
17:a2:a3:8a:3e:a0:76:fa:18:5a:f0:07:f6:05:c5:5b:a4:79:
6b:2b:99:84:5b:65:ac:a1:59:f1:96:03:0b:53:a6:6c:41:7c:
4e:4e:a9:47:c5:9f:1c:24:32:ae:87:67:cb:79:de:13:48:74:
9e:76:b9:8f:e4:ec:82:65:54:68:79:86:6d:1a:91:bf:ed:4a:
da:14:77:c5:47:b3:ea:ca:f5:65:96:4c:8d:e5:14:40:b4:67:
c4:64:ae:ef:2e:e7:88:89:30:bb:e9:a6:3f:da:aa:03:ee:b9:
44:b1:03:03:6a:26:f5:30:80:a2:fb:f5:12:3b:00:5c:a8:5e:
1a:53:8f:ac:1c:c5:fa:0b:6c:16:56:43:0c:b1:b5:18:6f:d5:
65:e1:dc:7d:1a:74:7b:00:d4:e5:14:a0:e1:b1:17:9f:29:31:
d9:ef:37:60:3a:ea:33:88:fe:5f:a6:68:37:13:33:78:89:22:
5a:35:c3:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh+Q8ALIALRCMiaOwVblLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlM2ZlOTBmMGZhZDZhMjVkNDZiZDdjMzM1YjkyMmRhMDMx
YjJjNzgwHhcNMjUwNTA0MjMwMDUwWhcNMjUwNTA1MjMwMDUwWjAzMTEwLwYDVQQD
Eyg4YjI3MTYzZTNhZWYzNTA1MjIyNzUyZWFlNjZmMDI5MjEzZDdkNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfZHRxP74k5fY2PI6Ui3Ri0cmLTh
hB6sUUbRDT4L9U1gKR08IrpDIpFvVnjlFD7Sw9Psw6YmhBIwJxwuAOqw1rPEoCdy
yrfqcRCoLwKbRBZs0ed2LbzrHX8sApH7vQwXhuM9sy5MK/BDbtsBQKcmSi/A2IPA
v2BRwtt0ATBOKbE3qha4RFpSp+PueS4kP1uHgYwx+r3f7kiDALv/bgDQ8lNEqKrI
wXRCseDGuzjWRLq1RNIASWjTVFbjpdPfOFdIOp3DWLbMzW5V+UOF2Wh0irSpQTDy
0YnWPSRtK/GQgRn0KL+d9SKu7BWmEijZcYrSEUKTh4s+0x+Lg/3xgdJpmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsnFj467zUFIidS6uZvApIT19ayMB8GA1UdIwQY
MBaAFE4/6Q8PrWol1GvXwzW5ItoDGyx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2Et
MTQ4N2M2MDIwYzQ2LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2EtMTQ4N2M2MDIwYzQ2
LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz/XY3jwd
0fHQzgvxGwDCq4KZt5495OB/HPSKH8HzatySUhpXmQhY10yIaWDTt24RZAIyMbR+
2wx04bPil53YeobXD8lLnxUBF6Kjij6gdvoYWvAH9gXFW6R5ayuZhFtlrKFZ8ZYD
C1OmbEF8Tk6pR8WfHCQyrodny3neE0h0nna5j+TsgmVUaHmGbRqRv+1K2hR3xUez
6sr1ZZZMjeUUQLRnxGSu7y7niIkwu+mmP9qqA+65RLEDA2om9TCAovv1EjsAXKhe
GlOPrBzF+gtsFlZDDLG1GG/VZeHcfRp0ewDU5RSg4bEXnykx2e83YDrqM4j+X6Zo
NxMzeIkiWjXD0w==
-----END CERTIFICATE-----
Generated at Mon May 5 06:23:38 2025 by rpki-client