Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: 6WTDNY346zp+LGP9Ytfbm8NJ/ETjcYzCLB+qEvEF9vo=
Subject key identifier: 0D:0B:42:A0:89:C7:C5:AE:5A:E6:15:38:F1:8A:1A:5B:F7:A6:1A:C1
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 01969ED11D24B07A897A67D1B9CAA7327C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 05:00:26 +0000
Manifest this update: Mon 05 May 2025 05:00:26 +0000
Manifest next update: Tue 06 May 2025 05:00:26 +0000
Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: JYhKzQD1nZ8J2ms6eklVmtzS2iIHYNhGAIa/WM7yDQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:1d:24:b0:7a:89:7a:67:d1:b9:ca:a7:32:7c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: May 5 05:00:26 2025 GMT
Not After : May 6 05:00:26 2025 GMT
Subject: CN=0d0b42a089c7c5ae5ae61538f18a1a5bf7a61ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:a3:15:66:bd:74:fa:f5:87:05:f6:fa:cc:
f0:3d:3f:ac:c6:9b:03:ea:86:1c:c8:9f:76:ed:8a:
14:01:60:46:b4:c8:cb:a2:20:91:6c:14:e6:c1:29:
4f:df:92:3a:69:c5:af:a5:e1:08:9e:92:da:37:cd:
e1:be:de:12:e2:9e:86:a5:de:e7:c5:76:c0:09:4b:
6d:d7:ef:ac:0c:68:4a:65:3f:99:57:6c:6f:f0:28:
fc:ab:fa:c3:25:5d:af:56:4a:5e:4d:7d:59:7a:28:
f2:eb:5e:02:96:0c:cc:2c:5b:b9:c6:1c:32:fb:eb:
bb:9e:c9:af:e7:96:68:d3:fc:a0:c0:f9:1c:73:93:
7a:1f:4e:6c:fc:fc:77:b1:c2:c0:1c:cc:18:0f:c8:
16:98:57:29:01:c9:c8:cf:54:eb:ec:4c:07:6c:24:
35:35:67:06:3b:d6:12:f7:df:28:59:ed:31:e2:0f:
00:c0:89:5c:cb:93:3b:f7:bd:d9:2c:a9:85:fc:f8:
52:af:99:6e:42:96:3c:00:6b:da:31:05:bc:11:8a:
75:83:54:29:5f:ee:33:d4:b9:e2:38:5d:6f:2a:79:
5e:a1:a5:57:de:cb:20:08:90:5b:d6:0d:d2:60:24:
9d:2b:25:87:41:89:95:d8:34:e1:37:80:10:61:60:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:42:A0:89:C7:C5:AE:5A:E6:15:38:F1:8A:1A:5B:F7:A6:1A:C1
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e0:48:cf:d0:c7:6e:f2:03:97:0c:de:52:0a:02:0b:93:cd:
06:26:1a:63:c0:72:10:28:f8:b3:38:df:8f:3e:a7:2c:c0:6e:
04:41:1b:28:3f:0f:89:51:b0:bd:ae:85:05:40:c8:9f:51:4d:
83:25:03:62:30:f1:fe:96:1a:df:de:aa:1d:ba:96:93:77:eb:
c1:18:c0:7a:a8:24:d9:cb:71:19:71:91:4d:4c:66:c1:e4:63:
60:a7:ee:63:3e:e8:54:86:e0:11:a7:f4:ff:28:77:97:f9:ea:
85:8c:cd:dc:4f:bb:de:da:93:3b:6c:65:b5:cc:b4:45:1b:6b:
65:63:66:87:1b:89:12:b8:5e:ba:59:9f:2d:3b:7b:b3:17:12:
26:35:b2:f9:3c:7c:aa:35:b1:49:3f:19:57:4b:1e:86:64:9e:
3e:6c:fc:b7:7f:0b:09:9d:9f:64:d1:80:eb:65:04:fd:74:10:
cf:52:7d:54:d6:aa:e0:88:37:38:ea:d4:22:ca:52:56:f9:45:
c6:8c:1f:d6:c8:ef:38:12:10:ac:be:cb:83:d4:2a:c5:53:e1:
9b:36:b2:39:49:f0:aa:21:5e:01:5c:a0:83:f5:67:26:f0:db:
ae:f7:12:4a:31:f1:53:99:2d:33:ac:df:0a:fa:a9:af:76:26:
6c:aa:49:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0R0ksHqJemfRucqnMnxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2NjODM3MWVkMjRiYWNmNjdhY2E4YjkwMmNlZTcwNmFm
YzYyNGIwHhcNMjUwNTA1MDUwMDI2WhcNMjUwNTA2MDUwMDI2WjAzMTEwLwYDVQQD
EygwZDBiNDJhMDg5YzdjNWFlNWFlNjE1MzhmMThhMWE1YmY3YTYxYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NGjFWa9dPr1hwX2+szwPT+sxpsD
6oYcyJ927YoUAWBGtMjLoiCRbBTmwSlP35I6acWvpeEInpLaN83hvt4S4p6Gpd7n
xXbACUtt1++sDGhKZT+ZV2xv8Cj8q/rDJV2vVkpeTX1Zeijy614ClgzMLFu5xhwy
++u7nsmv55Zo0/ygwPkcc5N6H05s/Px3scLAHMwYD8gWmFcpAcnIz1Tr7EwHbCQ1
NWcGO9YS998oWe0x4g8AwIlcy5M7973ZLKmF/PhSr5luQpY8AGvaMQW8EYp1g1Qp
X+4z1LniOF1vKnleoaVX3ssgCJBb1g3SYCSdKyWHQYmV2DThN4AQYWBWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0LQqCJx8WuWuYVOPGKGlv3phrBMB8GA1UdIwQY
MBaAFE58yDce0kus9nrKi5As7nBq/GJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQt
OGVkNWE3OWRlODM1LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQtOGVkNWE3OWRlODM1
LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuBIz9DH
bvIDlwzeUgoCC5PNBiYaY8ByECj4szjfjz6nLMBuBEEbKD8PiVGwva6FBUDIn1FN
gyUDYjDx/pYa396qHbqWk3frwRjAeqgk2ctxGXGRTUxmweRjYKfuYz7oVIbgEaf0
/yh3l/nqhYzN3E+73tqTO2xltcy0RRtrZWNmhxuJErheulmfLTt7sxcSJjWy+Tx8
qjWxST8ZV0sehmSePmz8t38LCZ2fZNGA62UE/XQQz1J9VNaq4Ig3OOrUIspSVvlF
xowf1sjvOBIQrL7Lg9QqxVPhmzayOUnwqiFeAVygg/VnJvDbrvcSSjHxU5ktM6zf
Cvqpr3YmbKpJ8w==
-----END CERTIFICATE-----
Generated at Mon May 5 07:09:34 2025 by rpki-client