Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: z/LW/DbQiiXiswL0pDX6ktPv2psJuduqfY0KfGYrzcY=
Subject key identifier: 3C:84:CD:35:5B:FB:2E:B4:01:52:19:AB:D7:83:FB:46:7D:C2:1F:5D
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 01969E635DB514B34025A7ACBE7DF28BC357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 03:00:34 +0000
Manifest this update: Mon 05 May 2025 03:00:34 +0000
Manifest next update: Tue 06 May 2025 03:00:34 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: Ec579Y8EOF44jm6f/6EQvGEA7TRLvJV/JTk014Ng3sw=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:5d:b5:14:b3:40:25:a7:ac:be:7d:f2:8b:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: May 5 03:00:34 2025 GMT
Not After : May 6 03:00:34 2025 GMT
Subject: CN=3c84cd355bfb2eb4015219abd783fb467dc21f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:ce:0e:da:d5:32:5f:61:93:50:7b:38:44:
2d:79:e0:73:6b:bc:6e:68:24:e4:0b:03:93:c9:d0:
54:44:d0:b8:64:a0:b7:48:7c:5b:c5:be:6c:ab:65:
6d:91:2a:6a:1a:1b:85:a4:41:1b:a3:a2:00:ae:e5:
94:89:0c:d1:e8:d2:54:cf:8b:fe:60:14:73:af:bf:
f0:54:ef:9c:79:ea:65:e1:e8:1f:4d:39:d4:6c:a1:
89:71:38:8a:71:6f:87:73:44:9f:8c:e5:82:33:6c:
99:6b:21:07:b6:67:82:a5:b3:b9:59:18:71:9a:4f:
31:b8:93:24:b1:0f:ba:92:30:4b:e7:05:cf:e6:32:
b6:0b:68:cb:9e:21:8a:d6:5c:24:ad:a1:e5:21:09:
37:7b:61:30:e6:53:f2:95:83:b8:f0:80:a4:99:f3:
df:13:f4:27:82:45:31:f6:b5:3a:39:e6:1d:1c:76:
ad:36:8b:68:cc:93:92:f9:50:6c:2a:c2:ab:d6:6e:
bb:bd:f7:e7:78:55:c2:47:86:f3:ad:0f:a3:4c:d4:
22:65:3e:a5:f4:ec:69:e3:0b:1e:05:a1:4f:c9:7f:
22:b0:6e:58:5b:dd:d5:d5:f0:29:4f:fb:a7:8a:c8:
07:a6:8f:bb:77:a4:0a:a6:5b:ae:0e:62:fe:1d:55:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:84:CD:35:5B:FB:2E:B4:01:52:19:AB:D7:83:FB:46:7D:C2:1F:5D
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:17:ce:37:a1:d2:8c:a2:cd:4d:b1:3f:1d:e7:16:71:0d:a6:
08:79:3e:3b:4d:d6:78:07:d0:b3:6e:d6:80:4d:17:2e:11:13:
52:16:0c:c6:93:3a:0b:75:bb:1b:c9:fb:20:ff:17:f9:e9:9d:
0c:db:1a:ca:01:48:a5:12:4b:67:1d:e3:8d:b2:b7:cb:a7:1a:
84:9d:17:c5:6d:ef:35:20:48:27:f0:3b:03:08:54:0f:07:c9:
c8:a6:1d:c2:d4:e6:80:17:19:cb:d7:60:b9:b8:b0:b9:24:d1:
8b:66:6c:56:f1:40:1c:e9:12:e1:a5:66:ff:66:02:35:42:b0:
c2:7c:5a:f6:5b:f3:14:d2:32:8d:c4:34:5f:77:c0:9c:81:76:
fa:84:42:4e:43:60:99:20:33:f0:af:54:ba:89:d6:5f:3a:6b:
71:f9:50:7a:61:d6:ae:ef:97:b6:b0:7b:1d:74:04:2a:17:e2:
1a:9b:84:e1:f2:a2:b4:0b:5f:ef:ca:6a:f7:d0:1a:50:6f:51:
9d:5f:0c:b7:bf:2a:a1:4d:87:7d:0b:fd:1c:9a:06:ff:7b:39:
95:23:9c:33:e9:47:3c:94:05:c1:fd:51:0b:62:0b:dc:33:34:
f9:5b:0a:3d:03:7c:ab:00:52:81:df:12:a1:64:d5:b2:4e:80:
a6:29:9c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY121FLNAJaesvn3yi8NXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMjYxOTE5YjU1YzJjMDhmNzJhNWFiMWQwZWIxODVlZTEy
YmRmZjcwHhcNMjUwNTA1MDMwMDM0WhcNMjUwNTA2MDMwMDM0WjAzMTEwLwYDVQQD
EygzYzg0Y2QzNTViZmIyZWI0MDE1MjE5YWJkNzgzZmI0NjdkYzIxZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSDODtrVMl9hk1B7OEQteeBza7xu
aCTkCwOTydBURNC4ZKC3SHxbxb5sq2VtkSpqGhuFpEEbo6IAruWUiQzR6NJUz4v+
YBRzr7/wVO+ceepl4egfTTnUbKGJcTiKcW+Hc0SfjOWCM2yZayEHtmeCpbO5WRhx
mk8xuJMksQ+6kjBL5wXP5jK2C2jLniGK1lwkraHlIQk3e2Ew5lPylYO48ICkmfPf
E/QngkUx9rU6OeYdHHatNotozJOS+VBsKsKr1m67vffneFXCR4bzrQ+jTNQiZT6l
9Oxp4wseBaFPyX8isG5YW93V1fApT/unisgHpo+7d6QKpluuDmL+HVU+CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyEzTVb+y60AVIZq9eD+0Z9wh9dMB8GA1UdIwQY
MBaAFEwmGRm1XCwI9ypasdDrGF7hK9/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENZWkdiVmNMQWozS2xxeDBPc1lYdUVyM19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jMWQ5NDAtMDQ0ZC00OWM0LWE3YTEt
YTAwNzY2NzliZTYwLzEvVENZWkdiVmNMQWozS2xxeDBPc1lYdUVyM19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jMWQ5NDAtMDQ0ZC00OWM0LWE3YTEtYTAwNzY2NzliZTYw
LzEvVENZWkdiVmNMQWozS2xxeDBPc1lYdUVyM19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhfON6HS
jKLNTbE/HecWcQ2mCHk+O03WeAfQs27WgE0XLhETUhYMxpM6C3W7G8n7IP8X+emd
DNsaygFIpRJLZx3jjbK3y6cahJ0XxW3vNSBIJ/A7AwhUDwfJyKYdwtTmgBcZy9dg
ubiwuSTRi2ZsVvFAHOkS4aVm/2YCNUKwwnxa9lvzFNIyjcQ0X3fAnIF2+oRCTkNg
mSAz8K9UuonWXzprcflQemHWru+XtrB7HXQEKhfiGpuE4fKitAtf78pq99AaUG9R
nV8Mt78qoU2HfQv9HJoG/3s5lSOcM+lHPJQFwf1RC2IL3DM0+VsKPQN8qwBSgd8S
oWTVsk6ApimcyQ==
-----END CERTIFICATE-----
Generated at Mon May 5 11:51:31 2025 by rpki-client