Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: SYH6Vus6RO5q3tjOeVm4eqCKdZj0xTXG1qV7mLEYFuk=
Subject key identifier: 52:EB:6C:11:81:ED:3B:A5:78:E0:B1:5E:95:F9:23:06:AC:D1:A7:6E
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 0196CB73075362B8C412C4549831A4C279AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 078B
Signing time: Tue 13 May 2025 21:00:35 +0000
Manifest this update: Tue 13 May 2025 21:00:35 +0000
Manifest next update: Wed 14 May 2025 21:00:35 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: xMbJQs+VhbpkmWCLbol6mpS/7hk7d6CsFT3EEZDGi+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:07:53:62:b8:c4:12:c4:54:98:31:a4:c2:79:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: May 13 21:00:35 2025 GMT
Not After : May 14 21:00:35 2025 GMT
Subject: CN=52eb6c1181ed3ba578e0b15e95f92306acd1a76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:c1:54:d2:b8:af:06:99:bf:ae:ff:2e:d1:
87:d9:43:e6:bc:46:5a:90:e1:fd:c3:0e:b1:c5:e3:
dd:06:be:84:86:82:35:f0:2e:1f:c8:02:e5:b6:a4:
ab:2d:26:a5:99:d0:5e:77:52:6a:25:71:56:d7:fb:
d6:1e:40:aa:6c:38:cb:f0:b2:76:65:22:cf:01:33:
c0:03:c1:97:15:a1:e7:7c:4d:3a:3e:7a:fc:ad:c4:
71:15:24:71:ac:60:08:0a:ed:49:8e:f8:ea:af:33:
1b:c7:1c:7b:bd:56:ab:e9:25:0a:ce:25:9d:88:2e:
c8:97:d6:f6:05:57:e8:40:cf:14:22:e2:c2:88:82:
06:25:8c:5c:91:fe:3c:3c:4d:d5:0d:3d:d0:05:82:
de:24:27:7b:48:4c:be:cf:28:69:e3:06:da:e5:16:
bd:c8:64:44:1c:b2:d3:74:f0:f6:eb:0a:af:b8:8f:
11:5e:e0:d5:26:b4:67:4d:fb:34:b6:4d:05:07:9a:
79:4c:a8:0a:33:e4:b7:11:96:11:b0:14:ca:10:62:
f9:c4:f5:01:20:b6:22:af:e7:c9:ce:28:23:2f:84:
f8:73:7d:34:e3:f3:83:81:3e:13:5b:5e:4b:40:23:
e8:a4:55:ab:bd:e0:3e:27:bb:06:3f:5d:5d:4b:5d:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:6C:11:81:ED:3B:A5:78:E0:B1:5E:95:F9:23:06:AC:D1:A7:6E
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5b:54:eb:76:38:6b:e7:39:71:a1:b4:6a:84:06:61:d3:81:
3a:b1:26:6e:df:1e:a0:c4:62:2c:2d:79:be:7c:7f:c7:40:3e:
63:3d:d2:39:5c:3e:b9:a4:60:e7:a9:48:27:9b:47:75:02:74:
ff:ca:e4:d3:97:fc:93:3d:7e:29:fa:3f:c6:fa:b1:f6:42:d9:
71:0e:24:49:90:46:a2:7a:f8:a3:e9:e6:5a:09:9d:d5:b8:25:
23:1d:7b:71:37:4c:74:37:95:77:7e:96:77:50:f1:b9:56:01:
cc:0b:25:53:7a:40:67:a1:f1:5b:5e:87:9c:41:26:2f:f8:a8:
41:a1:c0:8d:1f:5a:41:98:a5:94:e4:10:4a:ad:2c:f7:68:27:
ee:79:60:c3:5c:ed:0f:4b:3c:bc:dd:b3:7c:55:3d:c3:96:b1:
ac:dc:5c:aa:98:c5:95:7c:cd:01:3c:23:60:68:d4:51:fc:92:
78:14:8d:e5:4f:28:61:85:50:75:6d:80:e1:41:96:80:dd:d1:
d5:2a:77:7f:f2:0b:09:33:29:80:94:4b:bd:6f:61:68:2d:9f:
45:25:19:cf:d9:d7:24:18:9a:9a:c0:5f:b9:43:19:ed:2e:fe:
73:46:90:b4:14:67:47:83:97:ec:d8:a6:ec:d2:b8:76:e0:bb:
97:5b:ab:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLcwdTYrjEEsRUmDGkwnmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDM3N2JlOGFmMTE0NzhhOWFiZTI3MWY4YmRlMmRlM2Qz
MzM0MDgwHhcNMjUwNTEzMjEwMDM1WhcNMjUwNTE0MjEwMDM1WjAzMTEwLwYDVQQD
Eyg1MmViNmMxMTgxZWQzYmE1NzhlMGIxNWU5NWY5MjMwNmFjZDFhNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshzBVNK4rwaZv67/LtGH2UPmvEZa
kOH9ww6xxePdBr6EhoI18C4fyALltqSrLSalmdBed1JqJXFW1/vWHkCqbDjL8LJ2
ZSLPATPAA8GXFaHnfE06Pnr8rcRxFSRxrGAICu1JjvjqrzMbxxx7vVar6SUKziWd
iC7Il9b2BVfoQM8UIuLCiIIGJYxckf48PE3VDT3QBYLeJCd7SEy+zyhp4wba5Ra9
yGREHLLTdPD26wqvuI8RXuDVJrRnTfs0tk0FB5p5TKgKM+S3EZYRsBTKEGL5xPUB
ILYir+fJzigjL4T4c3004/ODgT4TW15LQCPopFWrveA+J7sGP11dS11dJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLrbBGB7TuleOCxXpX5Iwas0aduMB8GA1UdIwQY
MBaAFEzTd76K8RR4qavicfi94t49MzQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMt
YjEyZWIxY2VhYTE0LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMtYjEyZWIxY2VhYTE0
LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFtU63Y4
a+c5caG0aoQGYdOBOrEmbt8eoMRiLC15vnx/x0A+Yz3SOVw+uaRg56lIJ5tHdQJ0
/8rk05f8kz1+Kfo/xvqx9kLZcQ4kSZBGonr4o+nmWgmd1bglIx17cTdMdDeVd36W
d1DxuVYBzAslU3pAZ6HxW16HnEEmL/ioQaHAjR9aQZillOQQSq0s92gn7nlgw1zt
D0s8vN2zfFU9w5axrNxcqpjFlXzNATwjYGjUUfySeBSN5U8oYYVQdW2A4UGWgN3R
1Sp3f/ILCTMpgJRLvW9haC2fRSUZz9nXJBiamsBfuUMZ7S7+c0aQtBRnR4OX7Nim
7NK4duC7l1urGA==
-----END CERTIFICATE-----
Generated at Wed May 14 05:55:09 2025 by rpki-client