Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: CRTu2XFD1VkCp0r+Yarbf5nXcflMhAcfZorIlkv5vSQ=
Subject key identifier: 2B:F3:DA:D0:54:72:BD:60:FD:DD:32:5B:B5:FC:C3:BF:6C:F3:D3:8F
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 01968D3952F7AA8CD25D53B3377C69DE8DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 19:01:06 +0000
Manifest this update: Thu 01 May 2025 19:01:06 +0000
Manifest next update: Fri 02 May 2025 19:01:06 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: 3vqReCdBnATCFSTYHslrbxnh9jQ7upRJg9Sss24fdb0=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:52:f7:aa:8c:d2:5d:53:b3:37:7c:69:de:8d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: May 1 19:01:06 2025 GMT
Not After : May 2 19:01:06 2025 GMT
Subject: CN=2bf3dad05472bd60fddd325bb5fcc3bf6cf3d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:b0:52:31:9d:f8:44:04:c5:3b:d0:50:e8:
63:e7:b9:47:c5:24:29:b8:6b:73:4e:cb:c1:93:27:
bf:43:98:45:9d:f3:ce:06:c6:74:d3:9a:b8:54:4e:
7a:44:60:c7:0f:16:75:86:69:e6:58:ca:a2:61:60:
a4:41:93:81:88:e1:c4:c7:a2:1e:78:33:e1:97:ea:
68:a2:9c:f3:85:35:be:4a:a1:42:1a:a9:67:3d:a6:
4f:0a:27:d6:07:b7:0f:2a:81:38:c0:d2:5b:16:f7:
16:92:a8:7e:8b:41:61:90:43:e2:e2:7d:95:bf:67:
f5:c9:81:fc:cd:2d:f7:c0:cc:72:b6:8e:03:4f:d9:
97:a0:f6:a5:ee:e2:92:d0:0f:4b:29:b4:01:c8:e7:
5e:46:cd:5e:f3:fe:99:48:f9:9e:f5:cb:79:ba:4e:
7e:1d:65:ba:9c:da:dd:f5:2f:54:88:b9:7b:87:36:
06:88:81:68:36:da:f5:19:29:4e:7b:17:bc:86:62:
86:56:04:09:92:c6:d1:d8:8b:8f:47:9a:35:1a:92:
14:a0:c7:48:f5:f9:ad:c4:fb:d2:90:19:60:51:88:
6c:b3:6a:1f:78:48:49:13:8d:2d:e8:d4:92:f7:7a:
14:14:bb:17:4b:65:12:dc:97:df:51:b9:ca:93:33:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:DA:D0:54:72:BD:60:FD:DD:32:5B:B5:FC:C3:BF:6C:F3:D3:8F
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:5d:2d:17:30:cd:80:31:1b:5a:fb:d1:38:36:1e:08:d7:
e9:46:c5:04:c6:6a:fe:d8:f2:5d:7c:fa:e0:db:39:fb:1b:f0:
3b:3c:c6:94:b8:41:64:fc:be:5f:a6:0d:66:a5:af:66:b6:27:
2f:1f:35:77:41:70:72:ed:b9:eb:61:cf:cd:91:a7:30:5e:34:
8a:f0:0b:9b:7d:dd:be:06:8f:7b:12:91:ce:53:8e:89:9d:5f:
b0:2d:ec:de:05:ec:92:db:93:aa:b6:9c:b0:c2:56:85:e3:47:
a2:ce:5d:10:c5:ad:49:66:4c:97:9b:30:57:4f:a8:7e:66:ab:
72:c6:55:ae:ea:7f:ff:86:42:78:86:d6:9e:ee:f1:ec:7e:30:
5b:65:90:c3:6c:fc:52:e5:30:f5:fc:8c:4b:49:47:18:51:5e:
0f:6a:af:fd:16:09:63:b4:98:b9:c2:f7:63:ff:f3:ac:e1:39:
20:42:b9:81:e5:37:a5:1a:6f:54:3d:bb:12:75:4b:20:a2:1c:
d9:0b:77:e1:4a:3b:6b:06:8c:d5:39:42:ed:02:4e:52:8b:7c:
72:82:d8:f9:2c:e3:ef:be:dd:fc:6b:c2:7c:56:28:b0:6c:c7:
53:e1:54:a2:53:f0:f8:2b:3b:40:dd:5e:c6:ed:9b:76:88:26:
23:01:88:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNOVL3qozSXVOzN3xp3o20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMzZjY2UyMTQyY2ExOGI1MDU4OTcxNThkMjZlNTgzOWQy
YjQxN2YwHhcNMjUwNTAxMTkwMTA2WhcNMjUwNTAyMTkwMTA2WjAzMTEwLwYDVQQD
EygyYmYzZGFkMDU0NzJiZDYwZmRkZDMyNWJiNWZjYzNiZjZjZjNkMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI2wUjGd+EQExTvQUOhj57lHxSQp
uGtzTsvBkye/Q5hFnfPOBsZ005q4VE56RGDHDxZ1hmnmWMqiYWCkQZOBiOHEx6Ie
eDPhl+poopzzhTW+SqFCGqlnPaZPCifWB7cPKoE4wNJbFvcWkqh+i0FhkEPi4n2V
v2f1yYH8zS33wMxyto4DT9mXoPal7uKS0A9LKbQByOdeRs1e8/6ZSPme9ct5uk5+
HWW6nNrd9S9UiLl7hzYGiIFoNtr1GSlOexe8hmKGVgQJksbR2IuPR5o1GpIUoMdI
9fmtxPvSkBlgUYhss2ofeEhJE40t6NSS93oUFLsXS2US3JffUbnKkzO91wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvz2tBUcr1g/d0yW7X8w79s89OPMB8GA1UdIwQY
MBaAFE42zOIULKGLUFiXFY0m5YOdK0F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYt
OWY4NDVjNTQ2NDcwLzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYtOWY4NDVjNTQ2NDcw
LzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1tdLRcw
zYAxG1r70Tg2HgjX6UbFBMZq/tjyXXz64Ns5+xvwOzzGlLhBZPy+X6YNZqWvZrYn
Lx81d0Fwcu2562HPzZGnMF40ivALm33dvgaPexKRzlOOiZ1fsC3s3gXsktuTqrac
sMJWheNHos5dEMWtSWZMl5swV0+ofmarcsZVrup//4ZCeIbWnu7x7H4wW2WQw2z8
UuUw9fyMS0lHGFFeD2qv/RYJY7SYucL3Y//zrOE5IEK5geU3pRpvVD27EnVLIKIc
2Qt34Uo7awaM1TlC7QJOUot8coLY+Szj777d/GvCfFYosGzHU+FUolPw+Cs7QN1e
xu2bdogmIwGIbA==
-----END CERTIFICATE-----
Generated at Fri May 2 04:28:32 2025 by rpki-client