Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier: zj1iXBmlt8RiAXWe+z13aD3FUduWFb1BNtjfLZr0v0o=
Subject key identifier: A8:80:4C:D1:E0:1C:E0:20:3D:6A:77:D9:7F:72:36:73:B3:C2:DB:04
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial: 0196B4B43E4125BCD282171802A70803DDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number: 0D2D
Signing time: Fri 09 May 2025 11:00:33 +0000
Manifest this update: Fri 09 May 2025 11:00:33 +0000
Manifest next update: Sat 10 May 2025 11:00:33 +0000
Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: joUgdcE3SU21ZL2y+MVZc0l1/nAGCLPA4I1KQwXAx8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:3e:41:25:bc:d2:82:17:18:02:a7:08:03:dd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Validity
Not Before: May 9 11:00:33 2025 GMT
Not After : May 10 11:00:33 2025 GMT
Subject: CN=a8804cd1e01ce0203d6a77d97f723673b3c2db04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:3f:2c:89:5b:98:d7:56:b2:3a:3a:83:63:
a1:59:88:0a:43:1e:75:9e:d0:d0:09:05:ab:38:3d:
2e:6a:4c:59:a3:2b:aa:5d:10:28:77:d2:8f:a4:27:
b6:be:f9:ae:10:06:06:9d:c2:e8:77:e4:9e:0d:16:
21:b7:19:90:c5:56:4a:da:e8:38:92:ce:4b:82:a9:
cb:ad:ce:db:5f:f9:e3:b2:1c:b6:1d:30:94:84:94:
0e:77:81:78:dd:47:22:c6:08:ce:05:5c:6b:29:b7:
52:36:be:66:45:01:57:2c:70:06:f4:03:01:3b:56:
b4:dc:d6:1c:0a:9b:f9:7a:e7:c8:29:48:58:ea:17:
53:60:4d:28:3e:0b:63:1c:57:0d:43:4d:29:ee:bf:
79:71:15:5c:7b:72:f6:3f:16:6f:e0:8b:86:d9:c7:
2a:13:25:3c:36:05:70:c5:4a:7d:9c:b8:37:eb:16:
36:e1:85:94:f7:1b:91:49:69:f8:d2:a1:bd:c5:36:
9b:bb:ce:b9:af:f7:4a:c1:f1:6c:75:44:30:29:67:
ff:bc:f4:35:ab:fc:4d:47:63:d4:b7:f8:b0:47:fb:
72:7f:d8:35:a4:60:a1:7b:33:63:aa:da:20:c3:d9:
1d:5e:1e:1f:48:bf:87:35:f2:93:f9:be:e8:77:98:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:4C:D1:E0:1C:E0:20:3D:6A:77:D9:7F:72:36:73:B3:C2:DB:04
X509v3 Authority Key Identifier:
keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:db:5f:7b:22:0b:97:31:72:67:6a:6a:88:dd:f4:12:c8:41:
d7:98:45:92:1b:80:65:c3:36:95:44:1c:90:4b:75:09:1e:6a:
05:2f:4d:93:16:90:68:1a:73:51:0d:1b:c5:95:0e:0e:6d:15:
8b:3c:d5:9c:05:57:97:47:0b:9f:49:03:bf:8e:c1:14:fa:87:
d8:df:88:03:0f:e5:0e:f0:bc:a2:98:99:10:8d:6d:5f:f8:11:
14:be:03:42:21:ce:ff:d7:75:8b:1c:10:5f:ae:bc:f6:92:c7:
78:38:60:01:9e:ec:e9:57:6a:f8:f2:38:2f:70:18:43:47:f6:
72:b8:1b:9b:4d:73:4a:85:c2:37:c3:76:e6:cb:ca:c3:8f:0d:
35:93:06:8d:99:db:d6:27:57:3a:8a:26:7a:c5:fb:3e:e5:ba:
49:e7:7d:04:3e:a8:8f:b7:e2:43:db:c1:79:18:18:94:f4:f5:
46:3d:13:f9:02:53:8d:ea:ae:80:a0:c2:50:3d:01:d2:20:67:
dc:02:2b:9e:bc:78:c4:12:40:f5:1b:ca:6d:c3:bb:72:83:93:
2d:f1:40:c8:b1:32:58:1c:cd:a5:18:cb:9b:de:20:82:78:ed:
48:28:9f:32:70:4d:ac:05:24:dc:66:20:5f:81:c0:81:be:25:
1c:b4:e8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0tD5BJbzSghcYAqcIA93aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz
MTMwMTIwHhcNMjUwNTA5MTEwMDMzWhcNMjUwNTEwMTEwMDMzWjAzMTEwLwYDVQQD
EyhhODgwNGNkMWUwMWNlMDIwM2Q2YTc3ZDk3ZjcyMzY3M2IzYzJkYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx64/LIlbmNdWsjo6g2OhWYgKQx51
ntDQCQWrOD0uakxZoyuqXRAod9KPpCe2vvmuEAYGncLod+SeDRYhtxmQxVZK2ug4
ks5LgqnLrc7bX/njshy2HTCUhJQOd4F43UcixgjOBVxrKbdSNr5mRQFXLHAG9AMB
O1a03NYcCpv5eufIKUhY6hdTYE0oPgtjHFcNQ00p7r95cRVce3L2PxZv4IuG2ccq
EyU8NgVwxUp9nLg36xY24YWU9xuRSWn40qG9xTabu865r/dKwfFsdUQwKWf/vPQ1
q/xNR2PUt/iwR/tyf9g1pGChezNjqtogw9kdXh4fSL+HNfKT+b7od5gy1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiATNHgHOAgPWp32X9yNnOzwtsEMB8GA1UdIwQY
MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt
YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi
LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNtfeyIL
lzFyZ2pqiN30EshB15hFkhuAZcM2lUQckEt1CR5qBS9NkxaQaBpzUQ0bxZUODm0V
izzVnAVXl0cLn0kDv47BFPqH2N+IAw/lDvC8opiZEI1tX/gRFL4DQiHO/9d1ixwQ
X6689pLHeDhgAZ7s6Vdq+PI4L3AYQ0f2crgbm01zSoXCN8N25svKw48NNZMGjZnb
1idXOoomesX7PuW6Sed9BD6oj7fiQ9vBeRgYlPT1Rj0T+QJTjequgKDCUD0B0iBn
3AIrnrx4xBJA9RvKbcO7coOTLfFAyLEyWBzNpRjLm94ggnjtSCifMnBNrAUk3GYg
X4HAgb4lHLToOA==
-----END CERTIFICATE-----
Generated at Fri May 9 13:44:44 2025 by rpki-client