Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: WdBp9dhIP3HqN8QS5eCYLnwBXNbiD7hgvovlycAjJTQ=
Subject key identifier: D5:25:A7:CA:A0:11:93:40:41:E8:2A:0A:A8:C7:42:8F:19:AD:83:EF
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 0196C4276EF70D2C8016E39944B58DCBCE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0B68
Signing time: Mon 12 May 2025 11:00:40 +0000
Manifest this update: Mon 12 May 2025 11:00:40 +0000
Manifest next update: Tue 13 May 2025 11:00:40 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: gnxQeMePwk8qIRGkGhlZIQQT9otF1ABllq2oWqFiq9I=)
2: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:6e:f7:0d:2c:80:16:e3:99:44:b5:8d:cb:ce:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: May 12 11:00:40 2025 GMT
Not After : May 13 11:00:40 2025 GMT
Subject: CN=d525a7caa011934041e82a0aa8c7428f19ad83ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:13:b4:a0:f0:d7:83:69:5f:00:5c:d1:df:
ba:e1:22:c2:a9:16:91:80:98:49:e5:0d:e0:3c:c2:
b0:59:5c:b6:93:76:98:ad:6a:70:bf:74:59:f6:f2:
29:a6:98:2e:3f:63:44:f3:c9:ab:dd:5b:47:88:92:
ce:7a:f2:06:19:77:5b:00:76:21:b4:36:63:88:5c:
12:33:72:ea:b9:e7:c4:19:6e:4f:51:bc:30:a8:c5:
c4:cb:e6:01:ab:5f:97:e1:f1:32:31:39:50:08:d1:
b7:64:4b:62:28:61:40:9a:25:f0:75:5d:1a:5c:e5:
fd:45:a4:a2:60:a2:a5:41:93:ef:2e:f6:ae:bc:9a:
31:33:9d:95:3e:4e:8e:22:9b:41:4c:aa:b6:74:10:
84:d3:c2:67:9b:cd:60:fc:e0:11:eb:00:bf:5f:9d:
22:01:2b:d4:c2:80:a9:7d:d2:1c:b8:76:58:7f:85:
16:6f:de:ac:7d:56:64:e0:27:52:89:1d:40:3f:a1:
a8:c9:fc:60:99:3d:ae:f0:e8:8c:3b:6d:ab:3e:c2:
0c:c1:bb:2f:32:5b:e8:ce:a4:e9:1e:29:66:03:2e:
08:19:46:f6:01:f4:d9:6b:5e:8b:bb:16:94:60:62:
01:32:6d:63:f1:ad:63:bb:b6:11:0f:cd:44:89:46:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:A7:CA:A0:11:93:40:41:E8:2A:0A:A8:C7:42:8F:19:AD:83:EF
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:03:c5:a0:72:e8:f5:04:56:70:1a:70:87:91:56:87:74:e1:
db:cc:1b:62:a0:65:d4:49:ba:d3:1a:4d:b9:37:18:eb:a4:99:
83:30:4e:73:a6:a1:0f:b3:21:d2:4d:ae:f1:ec:86:8f:a3:bb:
be:82:61:d7:0f:47:30:ce:fe:91:ec:bb:08:ac:dc:02:7b:54:
72:aa:d7:a9:16:28:54:b7:9e:14:a0:45:2c:65:47:57:e6:8b:
8a:38:b0:82:43:ee:24:26:da:96:7e:ad:f4:9a:c2:33:69:3f:
0b:10:8b:e9:13:81:78:85:76:de:b7:a8:28:3c:8d:bd:a2:8a:
71:24:0c:e6:58:ed:3a:5d:a1:b1:3e:e8:9d:f5:89:9c:b4:0e:
aa:3c:96:4f:ec:e8:d9:4e:74:b8:ea:eb:e7:5d:6b:d9:31:ff:
dc:d8:13:96:27:f9:14:8d:fc:ff:c8:94:73:dc:05:b9:8f:67:
d5:b5:37:53:fc:80:88:46:6f:56:a6:13:60:53:b7:fc:e9:76:
4d:e0:5d:1e:0a:57:33:50:48:a6:d1:ba:bf:f7:d9:46:6c:dc:
dc:e7:d6:b3:0e:c4:05:a2:09:04:4f:61:77:aa:80:4b:24:07:
2a:e5:1e:48:01:5c:0f:00:86:33:94:41:e6:c0:ac:1c:84:3c:
56:4c:d7:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ273DSyAFuOZRLWNy847MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMwMjljNWIyNjM5Y2QyOWI5ZjlkZDUyOTRjYzk0ZWY1
MmQ2YWYwHhcNMjUwNTEyMTEwMDQwWhcNMjUwNTEzMTEwMDQwWjAzMTEwLwYDVQQD
EyhkNTI1YTdjYWEwMTE5MzQwNDFlODJhMGFhOGM3NDI4ZjE5YWQ4M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibITtKDw14NpXwBc0d+64SLCqRaR
gJhJ5Q3gPMKwWVy2k3aYrWpwv3RZ9vIpppguP2NE88mr3VtHiJLOevIGGXdbAHYh
tDZjiFwSM3LquefEGW5PUbwwqMXEy+YBq1+X4fEyMTlQCNG3ZEtiKGFAmiXwdV0a
XOX9RaSiYKKlQZPvLvauvJoxM52VPk6OIptBTKq2dBCE08Jnm81g/OAR6wC/X50i
ASvUwoCpfdIcuHZYf4UWb96sfVZk4CdSiR1AP6GoyfxgmT2u8OiMO22rPsIMwbsv
MlvozqTpHilmAy4IGUb2AfTZa16LuxaUYGIBMm1j8a1ju7YRD81EiUZ18wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUlp8qgEZNAQegqCqjHQo8ZrYPvMB8GA1UdIwQY
MBaAFEyTApxbJjnNKbn53VKUzJTvUtavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYt
MTg3YjFmNzdjMWE1LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYtMTg3YjFmNzdjMWE1
LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwPFoHLo
9QRWcBpwh5FWh3Th28wbYqBl1Em60xpNuTcY66SZgzBOc6ahD7Mh0k2u8eyGj6O7
voJh1w9HMM7+key7CKzcAntUcqrXqRYoVLeeFKBFLGVHV+aLijiwgkPuJCbaln6t
9JrCM2k/CxCL6ROBeIV23reoKDyNvaKKcSQM5ljtOl2hsT7onfWJnLQOqjyWT+zo
2U50uOrr511r2TH/3NgTlif5FI38/8iUc9wFuY9n1bU3U/yAiEZvVqYTYFO3/Ol2
TeBdHgpXM1BIptG6v/fZRmzc3OfWsw7EBaIJBE9hd6qASyQHKuUeSAFcDwCGM5RB
5sCsHIQ8VkzXuA==
-----END CERTIFICATE-----
Generated at Mon May 12 18:02:40 2025 by rpki-client