Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: w2UfRsUUhLgj9Y3WoqL3YzlSplis9x291b8cDUY1CR0=
Subject key identifier: 24:57:C9:9C:BD:C5:73:C4:31:D2:92:E9:A4:5F:31:8F:AB:6F:C2:F1
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019684DA374CA604B69F19CC7EFACB339E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 05D7
Signing time: Wed 30 Apr 2025 04:00:15 +0000
Manifest this update: Wed 30 Apr 2025 04:00:15 +0000
Manifest next update: Thu 01 May 2025 04:00:15 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: jKLF9QBqWIrdbli4vgj12iWwVPwix5wl1mkRqDXyE2Y=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:37:4c:a6:04:b6:9f:19:cc:7e:fa:cb:33:9e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Apr 30 04:00:15 2025 GMT
Not After : May 1 04:00:15 2025 GMT
Subject: CN=2457c99cbdc573c431d292e9a45f318fab6fc2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:31:bb:51:49:9a:83:ff:2b:a0:ac:e0:f3:
e6:4c:51:24:00:88:58:22:a6:61:ea:ac:65:69:f6:
e8:2f:f5:17:82:eb:6f:d6:8b:39:65:25:49:31:aa:
a5:e9:f2:97:df:ec:d6:47:2e:53:f9:11:3a:ac:4f:
1e:34:02:32:f6:e2:0d:35:67:21:3d:69:84:a8:a0:
42:70:3b:41:96:1c:47:d2:6d:05:f3:fa:25:e9:e0:
cd:4b:8f:8c:3a:33:1d:99:c5:60:00:1f:f9:18:03:
b2:a9:08:1a:d6:55:c4:ee:2a:89:40:46:4f:9c:8b:
0b:05:ee:91:25:9b:55:45:a5:04:31:df:98:46:6b:
df:7f:55:72:e4:c7:84:1b:bd:2e:b5:a8:c6:1d:87:
5e:dc:f1:cb:4d:4e:ed:b6:73:a2:a1:5b:1b:ca:12:
c5:bf:81:98:2e:0f:37:1d:33:0a:d4:59:b6:76:ae:
81:13:2d:0f:ec:27:65:3c:8b:95:9d:96:aa:3a:50:
29:36:58:8e:6d:c1:4a:0c:50:11:e5:78:88:f2:30:
37:78:58:6b:08:ea:33:b1:39:29:e3:2e:57:ce:28:
a8:ea:32:c2:bc:66:aa:a4:2f:c8:50:a8:a6:4c:3a:
f7:98:fe:36:b7:90:45:d9:e8:69:f4:07:81:e1:30:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:C9:9C:BD:C5:73:C4:31:D2:92:E9:A4:5F:31:8F:AB:6F:C2:F1
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f0:a8:e5:de:c7:09:7a:4d:e8:d8:b2:dc:9c:0e:f7:8f:e8:
1e:7c:41:b0:c7:5b:50:de:ce:2f:64:a3:49:11:93:28:0f:c8:
ec:8d:8e:ce:99:a6:88:fb:95:58:f3:50:9b:46:d0:17:06:b5:
bf:72:e3:55:1e:be:03:64:56:af:65:6c:7a:24:d1:f1:a3:84:
a8:c1:b1:46:c7:86:f2:55:db:3b:e3:b4:51:47:43:3c:2b:3d:
31:cb:98:ca:58:41:57:09:cd:19:fa:ab:0e:f4:2c:bb:4b:1d:
33:ae:0d:26:6e:4c:ab:84:1c:22:00:0e:6b:94:26:1d:cf:d6:
aa:c2:0a:ec:66:7d:58:33:35:9f:f5:fe:2d:96:7c:93:1f:44:
10:b0:2b:16:aa:0b:be:c9:f6:9f:ce:60:61:f8:a3:7c:0b:48:
58:bf:b8:17:24:27:b7:95:66:05:f2:fe:11:3e:10:f1:c6:05:
47:cc:ae:7a:f8:02:9c:57:a2:f3:fb:7f:7c:b8:25:bc:da:1d:
00:b0:6a:17:25:35:4b:31:7a:7e:04:76:2c:ab:3f:69:63:1a:
65:d6:b4:33:ff:d8:81:d1:96:37:c7:e5:b3:dd:c8:f0:aa:24:
fa:de:37:df:09:35:aa:1a:ec:96:ec:bc:67:92:dd:46:ca:d0:
85:b0:5e:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2jdMpgS2nxnMfvrLM56FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjljM2VjNDdmY2NmMDFkOTMwNWZlMGQ3ZDQ4MWIzMDZi
MGQ0OGMwHhcNMjUwNDMwMDQwMDE1WhcNMjUwNTAxMDQwMDE1WjAzMTEwLwYDVQQD
EygyNDU3Yzk5Y2JkYzU3M2M0MzFkMjkyZTlhNDVmMzE4ZmFiNmZjMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKgxu1FJmoP/K6Cs4PPmTFEkAIhY
IqZh6qxlafboL/UXgutv1os5ZSVJMaql6fKX3+zWRy5T+RE6rE8eNAIy9uINNWch
PWmEqKBCcDtBlhxH0m0F8/ol6eDNS4+MOjMdmcVgAB/5GAOyqQga1lXE7iqJQEZP
nIsLBe6RJZtVRaUEMd+YRmvff1Vy5MeEG70utajGHYde3PHLTU7ttnOioVsbyhLF
v4GYLg83HTMK1Fm2dq6BEy0P7CdlPIuVnZaqOlApNliObcFKDFAR5XiI8jA3eFhr
COozsTkp4y5Xziio6jLCvGaqpC/IUKimTDr3mP42t5BF2ehp9AeB4TDVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRXyZy9xXPEMdKS6aRfMY+rb8LxMB8GA1UdIwQY
MBaAFEz5w+xH/M8B2TBf4NfUgbMGsNSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYt
ODYwMTY2MzM5NWViLzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYtODYwMTY2MzM5NWVi
LzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/Co5d7H
CXpN6Niy3JwO94/oHnxBsMdbUN7OL2SjSRGTKA/I7I2OzpmmiPuVWPNQm0bQFwa1
v3LjVR6+A2RWr2VseiTR8aOEqMGxRseG8lXbO+O0UUdDPCs9McuYylhBVwnNGfqr
DvQsu0sdM64NJm5Mq4QcIgAOa5QmHc/WqsIK7GZ9WDM1n/X+LZZ8kx9EELArFqoL
vsn2n85gYfijfAtIWL+4FyQnt5VmBfL+ET4Q8cYFR8yuevgCnFei8/t/fLglvNod
ALBqFyU1SzF6fgR2LKs/aWMaZda0M//YgdGWN8fls93I8Kok+t433wk1qhrsluy8
Z5LdRsrQhbBeHw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:59 2025 by rpki-client