Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: siNY3L1KJLxLjaer0LsiIrid4qyk/vacwfWsEq6YPo0=
Subject key identifier: 74:00:41:38:90:BD:17:91:5C:94:59:5F:5C:BC:C2:08:FC:1C:A8:75
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 0196B85A0672D2C47B2134EF72DD19DC4AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 04:00:29 +0000
Manifest this update: Sat 10 May 2025 04:00:29 +0000
Manifest next update: Sun 11 May 2025 04:00:29 +0000
Files and hashes: 1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: 9pPeLdbQfBvUDyzQAs3FijwKP5eLzuaKO1nV0/9mbI0=)
2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:06:72:d2:c4:7b:21:34:ef:72:dd:19:dc:4a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: May 10 04:00:29 2025 GMT
Not After : May 11 04:00:29 2025 GMT
Subject: CN=7400413890bd17915c94595f5cbcc208fc1ca875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:3f:72:ec:d9:bb:55:48:87:93:c4:a8:88:
75:96:4d:06:71:ba:6b:cc:d1:b2:38:bc:85:5d:f1:
d5:c6:a1:05:ab:93:df:e5:d4:80:21:a1:78:53:61:
34:01:f0:67:bf:f3:04:ff:0e:0a:f7:f3:e4:56:ba:
9a:78:bb:10:ed:58:ed:7b:66:ae:1c:e4:da:aa:85:
b3:eb:ab:51:a4:bf:19:1a:5b:30:3c:6f:a5:22:e7:
fe:c4:ed:ca:52:e6:43:5c:b0:49:67:6e:89:f5:dd:
1f:07:6a:43:a3:bd:31:42:ae:db:22:b7:ad:9e:53:
27:8a:c5:80:26:d0:5f:a7:bb:88:1b:2d:63:fb:ee:
00:2f:41:41:ff:89:cb:b6:7b:00:2d:14:55:25:ce:
ff:e2:0a:05:4f:5b:2f:66:e8:0d:09:1a:09:e4:1d:
e7:e0:62:27:fb:db:a1:5f:54:ef:17:55:6b:c9:21:
ca:8d:cb:22:a5:14:fc:cb:e2:af:20:1a:ae:e2:f1:
f2:12:8d:0b:31:69:3c:fc:7c:b6:c3:e6:36:e0:48:
a3:cd:2d:2d:ef:53:48:cf:aa:ec:a5:0d:0a:7a:4e:
ec:90:85:83:07:9c:de:7b:d5:bc:85:e3:ce:8e:ba:
ca:4e:b3:d1:bf:4a:23:48:b7:be:88:fa:bd:f4:49:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:41:38:90:BD:17:91:5C:94:59:5F:5C:BC:C2:08:FC:1C:A8:75
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:46:76:8b:44:6a:08:f6:2d:74:b3:42:c0:62:55:9a:22:
80:73:b4:6b:10:e0:80:b9:57:30:55:00:25:db:83:ac:c8:ec:
f3:8d:ad:80:0f:9e:c5:db:22:0c:f8:23:c7:42:ff:a6:63:73:
d0:45:47:43:fd:c8:19:6d:9e:39:a4:8e:76:4f:3a:ba:7e:03:
40:e2:65:1f:a7:67:1e:17:62:47:b0:7a:00:0c:f4:77:fc:d0:
37:fe:bf:1c:8c:af:70:00:62:f9:40:a2:be:0b:de:c6:3f:4d:
e2:a3:8f:59:b9:65:3f:82:6a:69:f7:c2:fb:a0:5f:ec:20:b2:
e2:f3:02:3c:d6:14:5c:60:2f:91:c9:76:9f:3d:cf:64:7e:93:
07:aa:0c:b6:77:a3:d4:8e:47:4a:c7:22:80:fe:ff:6d:e8:d5:
04:ab:65:78:1d:f2:6b:98:64:e4:c4:b6:36:78:97:95:62:46:
4d:30:a8:02:83:90:29:82:8a:74:2d:18:31:a8:b1:76:80:38:
68:4d:88:2b:e6:62:0e:3b:5f:15:29:2e:21:10:94:56:a0:98:
40:5b:26:fa:1f:df:f8:2f:b7:c4:95:51:4d:cb:9e:3b:12:ae:
7d:6c:d8:7b:8b:0f:00:9d:45:fc:7d:85:25:18:31:ee:52:17:
04:05:87:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WgZy0sR7ITTvct0Z3ErFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGQwZjlkY2Q4ODk0OWI4ZjNhMzc3MTA2MzU2MmEwNTc2
NzkyOTAwHhcNMjUwNTEwMDQwMDI5WhcNMjUwNTExMDQwMDI5WjAzMTEwLwYDVQQD
Eyg3NDAwNDEzODkwYmQxNzkxNWM5NDU5NWY1Y2JjYzIwOGZjMWNhODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzc/cuzZu1VIh5PEqIh1lk0Gcbpr
zNGyOLyFXfHVxqEFq5Pf5dSAIaF4U2E0AfBnv/ME/w4K9/PkVrqaeLsQ7Vjte2au
HOTaqoWz66tRpL8ZGlswPG+lIuf+xO3KUuZDXLBJZ26J9d0fB2pDo70xQq7bIret
nlMnisWAJtBfp7uIGy1j++4AL0FB/4nLtnsALRRVJc7/4goFT1svZugNCRoJ5B3n
4GIn+9uhX1TvF1VrySHKjcsipRT8y+KvIBqu4vHyEo0LMWk8/Hy2w+Y24EijzS0t
71NIz6rspQ0Kek7skIWDB5zee9W8hePOjrrKTrPRv0ojSLe+iPq99EnbmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQAQTiQvReRXJRZX1y8wgj8HKh1MB8GA1UdIwQY
MBaAFE3dD53NiJSbjzo3cQY1YqBXZ5KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYt
NmY2Y2NiNmUyY2RhLzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYtNmY2Y2NiNmUyY2Rh
LzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj1GdotE
agj2LXSzQsBiVZoigHO0axDggLlXMFUAJduDrMjs842tgA+exdsiDPgjx0L/pmNz
0EVHQ/3IGW2eOaSOdk86un4DQOJlH6dnHhdiR7B6AAz0d/zQN/6/HIyvcABi+UCi
vgvexj9N4qOPWbllP4JqaffC+6Bf7CCy4vMCPNYUXGAvkcl2nz3PZH6TB6oMtnej
1I5HSscigP7/bejVBKtleB3ya5hk5MS2NniXlWJGTTCoAoOQKYKKdC0YMaixdoA4
aE2IK+ZiDjtfFSkuIRCUVqCYQFsm+h/f+C+3xJVRTcueOxKufWzYe4sPAJ1F/H2F
JRgx7lIXBAWHAw==
-----END CERTIFICATE-----
Generated at Sat May 10 11:20:49 2025 by rpki-client