Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier: O2jqpHKp+yuGFBLcMHg5WPo2by4CKIRePgJvTVu+VIg=
Subject key identifier: DC:2F:F1:76:3C:90:7F:15:23:94:12:62:62:79:F5:7C:EA:2D:D0:A6
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 0196BDEED090BEAF5CCDF9A4FC3EE8727A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number: 1549
Signing time: Sun 11 May 2025 06:01:06 +0000
Manifest this update: Sun 11 May 2025 06:01:06 +0000
Manifest next update: Mon 12 May 2025 06:01:06 +0000
Files and hashes: 1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: TcgV6kdOXrOLYnx2B8qbCg80Oe4MLiNIfIE2zfVX7Fo=)
4: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
5: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=)
6: _EI-DCtehkQJuSEZGP7N7ioX6Zg.roa (hash: uPXDlP3jf6C/noTaAyluTTWys0GZfmXGo9pUC5iBPfs=)
7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
8: tIGmW-EI2nrWk4qC7j5FTTvEcKw.roa (hash: KGRsrUvfWuNnw7M6OrT2LhIDhaEzLkzjBqoyrd5RfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:d0:90:be:af:5c:cd:f9:a4:fc:3e:e8:72:7a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: May 11 06:01:06 2025 GMT
Not After : May 12 06:01:06 2025 GMT
Subject: CN=dc2ff1763c907f15239412626279f57cea2dd0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:c4:9b:24:f3:8e:3c:8c:87:37:17:8b:55:
df:7a:b6:d7:81:31:0a:72:d8:10:58:ee:14:3c:fe:
62:21:81:22:1c:d8:f6:de:ed:a8:f5:df:93:0d:2b:
49:82:e5:09:c4:69:dc:dd:8f:cc:bb:26:20:6b:fe:
76:33:4f:88:dc:fc:ab:08:ac:95:df:63:3a:0c:d8:
8e:e4:bd:25:17:73:30:2d:3b:86:11:68:4c:ed:db:
88:14:05:65:62:e2:c9:23:a0:00:10:90:8b:b8:d0:
40:04:03:35:59:66:6e:89:ac:74:06:63:9c:8c:f9:
27:c8:54:8d:74:bd:27:8c:7f:81:52:08:ff:2d:d2:
1e:f6:54:a7:39:00:c4:ce:6f:b1:f6:ea:c7:2e:1c:
7b:96:b8:27:01:0b:24:a6:93:fb:66:de:f3:b6:83:
c7:da:87:4e:9b:69:7f:4f:63:20:71:e8:cc:f8:ca:
ff:90:40:c8:62:33:b8:1c:c5:a2:bb:85:1d:1e:cf:
39:ae:bb:dd:ae:eb:c0:07:47:6f:43:56:06:c0:20:
8e:cf:f1:f4:d1:20:0c:ba:6f:8f:7f:39:b7:31:ef:
9e:3a:b6:95:6d:d7:a0:ba:cf:fc:4b:be:4b:53:b4:
88:a5:e2:a9:61:4c:fb:37:eb:ad:ae:3c:67:29:08:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:F1:76:3C:90:7F:15:23:94:12:62:62:79:F5:7C:EA:2D:D0:A6
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:9f:3f:22:1c:ad:36:36:0e:a8:96:5b:ce:b7:bb:53:d0:
25:4e:b0:1f:dc:04:73:78:52:ec:e5:4c:f8:d9:5d:35:96:e6:
08:19:0d:16:26:a7:bb:b7:10:cd:9c:fa:f9:f8:d7:26:4e:33:
dc:64:f9:e9:84:59:d9:15:12:00:81:1e:25:03:45:7c:93:d5:
25:5f:55:c6:73:50:6a:ab:d8:10:c3:d0:df:2c:bb:b3:93:77:
0d:96:3f:ea:ce:09:bc:13:cf:9c:0e:5c:95:e1:f0:ed:c1:0d:
62:58:48:78:d4:40:7b:9c:d2:12:99:e7:26:e3:c5:94:e0:9a:
e8:79:d9:18:45:10:4d:59:1a:13:84:3b:6a:ed:65:8f:6c:04:
b3:66:8d:46:82:25:a2:86:21:61:65:43:68:3c:cd:6a:93:08:
c9:86:3a:3c:a3:5d:21:1b:f6:81:a8:42:95:8a:0e:09:bb:55:
31:b9:2c:d0:35:02:f4:cd:ad:d3:cc:35:5f:65:0b:a1:2f:3e:
1e:cf:65:2e:80:e5:7e:1e:30:14:51:7b:1a:af:35:90:3b:7f:
77:8b:ed:25:4f:27:c5:a2:7b:91:72:ab:0f:b4:ad:75:e8:bb:
48:4e:d7:3a:e4:6b:a9:44:2c:6d:cb:b7:82:e7:55:cd:32:cd:
34:1f:65:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97tCQvq9czfmk/D7ocnp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjUwNTExMDYwMTA2WhcNMjUwNTEyMDYwMTA2WjAzMTEwLwYDVQQD
EyhkYzJmZjE3NjNjOTA3ZjE1MjM5NDEyNjI2Mjc5ZjU3Y2VhMmRkMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8zEmyTzjjyMhzcXi1XferbXgTEK
ctgQWO4UPP5iIYEiHNj23u2o9d+TDStJguUJxGnc3Y/MuyYga/52M0+I3PyrCKyV
32M6DNiO5L0lF3MwLTuGEWhM7duIFAVlYuLJI6AAEJCLuNBABAM1WWZuiax0BmOc
jPknyFSNdL0njH+BUgj/LdIe9lSnOQDEzm+x9urHLhx7lrgnAQskppP7Zt7ztoPH
2odOm2l/T2MgcejM+Mr/kEDIYjO4HMWiu4UdHs85rrvdruvAB0dvQ1YGwCCOz/H0
0SAMum+Pfzm3Me+eOraVbdegus/8S75LU7SIpeKpYUz7N+utrjxnKQh+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwv8XY8kH8VI5QSYmJ59XzqLdCmMB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3qfPyIc
rTY2DqiWW863u1PQJU6wH9wEc3hS7OVM+NldNZbmCBkNFianu7cQzZz6+fjXJk4z
3GT56YRZ2RUSAIEeJQNFfJPVJV9VxnNQaqvYEMPQ3yy7s5N3DZY/6s4JvBPPnA5c
leHw7cENYlhIeNRAe5zSEpnnJuPFlOCa6HnZGEUQTVkaE4Q7au1lj2wEs2aNRoIl
ooYhYWVDaDzNapMIyYY6PKNdIRv2gahClYoOCbtVMbks0DUC9M2t08w1X2ULoS8+
Hs9lLoDlfh4wFFF7Gq81kDt/d4vtJU8nxaJ7kXKrD7Stdei7SE7XOuRrqUQsbcu3
gudVzTLNNB9l7Q==
-----END CERTIFICATE-----
Generated at Sun May 11 10:29:06 2025 by rpki-client