Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier: 0GMCDMnlDE2Ckd1JOEXe6KSDTpAZ28VUCHf/v6SLyL8=
Subject key identifier: 9D:52:50:32:B0:7A:86:2F:05:2A:5F:BB:30:F5:11:B8:E4:0F:5F:59
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial: 0196BFA5EA9A087BD4473EAB4214022B3891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number: 09A6
Signing time: Sun 11 May 2025 14:00:43 +0000
Manifest this update: Sun 11 May 2025 14:00:43 +0000
Manifest next update: Mon 12 May 2025 14:00:43 +0000
Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: crkg2cVxDE4+KnuwVNnCIplySQuKMQTrVrThaL8t4cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:ea:9a:08:7b:d4:47:3e:ab:42:14:02:2b:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Validity
Not Before: May 11 14:00:43 2025 GMT
Not After : May 12 14:00:43 2025 GMT
Subject: CN=9d525032b07a862f052a5fbb30f511b8e40f5f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:4a:fc:dd:e5:75:08:d1:d9:4b:a2:f5:e0:
41:1a:7c:19:6b:99:51:a0:a4:62:b6:47:31:2b:11:
b4:c7:4f:c3:fa:55:da:05:a2:4c:99:c3:98:a4:52:
bc:49:b8:29:5c:53:16:55:a5:be:42:ec:b3:95:79:
c8:55:dd:2d:e3:04:a5:ef:00:9b:ab:c2:4a:01:97:
47:f6:9d:5c:06:1f:3a:0e:82:b5:6f:91:22:95:28:
a6:f4:c6:57:fe:fc:36:3e:e8:e4:cc:e4:b4:0e:63:
20:b5:fd:f2:6e:31:d8:ee:2c:77:2a:65:6d:09:60:
84:03:4c:01:76:64:e8:2c:9d:9d:5f:b4:0f:53:29:
7e:4f:cd:82:ce:df:75:8a:8c:ce:51:76:cf:51:92:
00:7b:07:84:56:8d:7b:2a:77:a8:85:9e:5c:e0:54:
9c:8b:27:96:78:5e:ef:da:10:09:d1:15:2a:2f:ec:
6f:f2:94:43:81:dd:ba:89:97:a3:71:e1:75:26:b2:
13:69:e1:ed:33:0c:a3:c4:a1:64:76:00:7b:89:57:
98:57:9f:ae:21:54:56:c4:86:15:d2:41:a5:34:c5:
94:fc:cd:9f:fb:e7:dd:23:77:0c:c9:b5:9c:62:42:
9e:a0:eb:4b:d7:87:73:da:43:4a:12:c9:56:c9:67:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:52:50:32:B0:7A:86:2F:05:2A:5F:BB:30:F5:11:B8:E4:0F:5F:59
X509v3 Authority Key Identifier:
keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:a2:2b:99:b7:d0:e5:53:cf:c0:c4:a0:c7:f2:6d:01:1e:
b1:60:e5:bf:92:49:0d:cb:a3:4b:85:32:b8:bc:7d:e7:1c:7b:
d3:4a:d2:bb:07:2c:d0:e1:b6:6f:2b:05:7e:ef:17:27:fd:95:
53:41:5d:41:7a:67:a1:e4:06:35:24:d2:b9:cc:e9:5e:3d:ed:
ae:8c:8a:b9:89:b4:d0:6d:cb:a7:e6:a3:c3:77:bb:99:0e:39:
2a:28:fe:f7:c0:54:be:0d:64:57:d8:d1:3c:dd:e4:b4:4b:0b:
6e:86:2d:db:99:dd:45:10:d0:8a:77:7b:0e:ab:a7:de:db:03:
4b:97:d7:9f:76:2b:55:99:80:72:8e:93:3e:4a:81:12:00:b5:
b1:b1:12:98:6c:36:b9:4b:41:a8:19:d3:91:53:97:ef:74:e9:
9e:fd:f9:70:59:ac:d1:ee:bb:49:3f:73:6c:c2:ea:4c:cf:9e:
c0:54:fa:cf:d5:17:56:de:4f:10:30:a1:c9:05:8f:43:72:81:
79:66:6f:e7:a2:45:2b:61:69:7b:b6:39:9a:b8:fb:fd:be:a1:
b0:f4:6f:5a:de:62:29:a6:0d:27:35:78:e7:e8:05:75:ba:66:
0b:0a:80:9e:7f:ce:cb:ac:5e:81:3f:1e:41:f7:5f:1b:cf:79:
03:bb:1f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/peqaCHvURz6rQhQCKziRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Q4MjEzNWU0NTkzMTU1ZmE2YWQ2ZmI3ZmVjYjAxZjEz
ODE4YjIwHhcNMjUwNTExMTQwMDQzWhcNMjUwNTEyMTQwMDQzWjAzMTEwLwYDVQQD
Eyg5ZDUyNTAzMmIwN2E4NjJmMDUyYTVmYmIzMGY1MTFiOGU0MGY1ZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioxK/N3ldQjR2Uui9eBBGnwZa5lR
oKRitkcxKxG0x0/D+lXaBaJMmcOYpFK8SbgpXFMWVaW+QuyzlXnIVd0t4wSl7wCb
q8JKAZdH9p1cBh86DoK1b5EilSim9MZX/vw2PujkzOS0DmMgtf3ybjHY7ix3KmVt
CWCEA0wBdmToLJ2dX7QPUyl+T82Czt91iozOUXbPUZIAeweEVo17KneohZ5c4FSc
iyeWeF7v2hAJ0RUqL+xv8pRDgd26iZejceF1JrITaeHtMwyjxKFkdgB7iVeYV5+u
IVRWxIYV0kGlNMWU/M2f++fdI3cMybWcYkKeoOtL14dz2kNKEslWyWc/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1SUDKweoYvBSpfuzD1EbjkD19ZMB8GA1UdIwQY
MBaAFE09ghNeRZMVX6atb7f+ywHxOBiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt
MDVkODc1NmYwOTJlLzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl
LzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABheiK5m3
0OVTz8DEoMfybQEesWDlv5JJDcujS4UyuLx95xx700rSuwcs0OG2bysFfu8XJ/2V
U0FdQXpnoeQGNSTSuczpXj3troyKuYm00G3Lp+ajw3e7mQ45Kij+98BUvg1kV9jR
PN3ktEsLboYt25ndRRDQind7Dqun3tsDS5fXn3YrVZmAco6TPkqBEgC1sbESmGw2
uUtBqBnTkVOX73Tpnv35cFms0e67ST9zbMLqTM+ewFT6z9UXVt5PEDChyQWPQ3KB
eWZv56JFK2Fpe7Y5mrj7/b6hsPRvWt5iKaYNJzV45+gFdbpmCwqAnn/Oy6xegT8e
QfdfG895A7sfYA==
-----END CERTIFICATE-----
Generated at Sun May 11 19:22:07 2025 by rpki-client