Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: aLUmV6tDUjhgVJiY9/rI1ZWDDFS4dbXp6+VWsfujtFw=
Subject key identifier: 6F:4C:33:10:BE:1B:87:F2:30:3C:3E:48:0B:67:95:0E:3C:B7:87:EA
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 0196827E8019E6C183DD27E3F0C45CE6C42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 1217
Signing time: Tue 29 Apr 2025 17:00:50 +0000
Manifest this update: Tue 29 Apr 2025 17:00:50 +0000
Manifest next update: Wed 30 Apr 2025 17:00:50 +0000
Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: rZ/I4hDvEUz8m1Vl7qfQN6EGo4girV1+GycLh59Zw/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:80:19:e6:c1:83:dd:27:e3:f0:c4:5c:e6:c4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: Apr 29 17:00:50 2025 GMT
Not After : Apr 30 17:00:50 2025 GMT
Subject: CN=6f4c3310be1b87f2303c3e480b67950e3cb787ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:61:96:ff:04:d8:87:36:7a:57:23:b4:34:
8a:7c:ed:e8:a0:22:08:29:9c:df:ea:62:78:7b:00:
44:80:2e:5a:da:d4:6e:9f:d4:6e:fe:1d:00:b9:1e:
0c:90:a0:2a:63:1f:8e:fe:0e:f5:63:76:62:96:51:
79:c7:a3:e5:2c:1b:9c:87:ce:d5:76:e1:e1:4b:d7:
1e:9a:22:29:a8:b8:1a:4c:a2:95:3d:00:54:9a:91:
4a:c8:f7:29:66:ad:23:b4:c1:db:52:07:15:0b:b2:
99:ae:51:0d:97:d8:4c:8f:5e:bd:84:c8:19:0d:58:
6c:10:fc:62:8c:7f:e2:0d:40:3e:d2:55:ab:80:b9:
5f:f7:67:0e:a5:4f:a0:05:21:47:71:dd:b9:ae:cf:
4b:f2:56:1f:9c:57:f5:26:38:da:e3:0b:49:04:85:
b5:b8:31:fc:c4:3c:fa:18:9f:8b:f4:59:9f:05:23:
c7:19:cd:64:0d:63:a5:b1:70:7e:e1:6e:44:71:23:
08:91:16:84:1c:3d:bf:9d:4e:e8:f2:41:c7:9e:01:
25:83:e7:00:4f:a7:0f:71:9f:51:f8:91:65:84:92:
a1:e6:c7:8c:cf:42:74:12:b9:95:1e:c6:4f:96:4b:
16:34:33:54:15:82:23:65:d3:31:9e:70:8b:67:b2:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4C:33:10:BE:1B:87:F2:30:3C:3E:48:0B:67:95:0E:3C:B7:87:EA
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ee:85:3b:c3:d7:29:31:c3:fa:7d:6e:93:f4:92:d0:ae:a5:
71:20:52:4d:61:fd:2e:40:02:9c:aa:e1:9f:3e:70:0b:ea:f3:
8c:1c:c8:d3:85:87:cf:48:02:0c:73:c9:a9:7b:a4:74:d0:a2:
fe:b6:ec:35:ba:48:24:83:8d:cc:bc:0a:27:94:0f:c2:f1:2f:
83:6b:5e:03:9c:87:e9:5a:0c:e8:d9:0f:52:5e:ec:36:41:c3:
0c:cf:85:7c:c5:49:28:f5:bd:2a:51:5d:29:79:79:53:10:3a:
85:6a:52:a4:56:96:a6:44:b5:76:ce:47:b2:34:9e:04:67:79:
8f:36:9d:46:88:b3:79:d5:a4:be:94:cf:9f:5f:db:13:45:ea:
6e:f5:35:25:bd:9f:69:a9:c1:92:b0:c1:c8:2e:95:37:bd:5b:
71:a2:e3:ef:a6:5e:b5:23:7c:50:71:14:7d:37:21:da:cc:6a:
1e:58:ac:53:83:85:46:04:1c:a2:75:1a:c1:fd:43:37:1d:e7:
19:9a:42:62:c9:79:44:55:d3:06:c2:d4:d6:4d:9e:e0:80:a6:
55:f5:97:f2:31:0e:47:86:04:af:7a:0f:66:8f:30:58:78:29:
0d:c8:d6:72:75:f9:9e:73:5d:3f:69:5c:f0:3e:d9:7b:ee:a7:
34:e4:90:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfoAZ5sGD3Sfj8MRc5sQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTBlOWQ0ZjRhZmI4YTRkMWI5MTllYzg1OTNmNDZiYTNi
YmE3ZjcwHhcNMjUwNDI5MTcwMDUwWhcNMjUwNDMwMTcwMDUwWjAzMTEwLwYDVQQD
Eyg2ZjRjMzMxMGJlMWI4N2YyMzAzYzNlNDgwYjY3OTUwZTNjYjc4N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm5hlv8E2Ic2elcjtDSKfO3ooCII
KZzf6mJ4ewBEgC5a2tRun9Ru/h0AuR4MkKAqYx+O/g71Y3ZillF5x6PlLBuch87V
duHhS9cemiIpqLgaTKKVPQBUmpFKyPcpZq0jtMHbUgcVC7KZrlENl9hMj169hMgZ
DVhsEPxijH/iDUA+0lWrgLlf92cOpU+gBSFHcd25rs9L8lYfnFf1Jjja4wtJBIW1
uDH8xDz6GJ+L9FmfBSPHGc1kDWOlsXB+4W5EcSMIkRaEHD2/nU7o8kHHngElg+cA
T6cPcZ9R+JFlhJKh5seMz0J0ErmVHsZPlksWNDNUFYIjZdMxnnCLZ7K2TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9MMxC+G4fyMDw+SAtnlQ48t4fqMB8GA1UdIwQY
MBaAFE0Q6dT0r7ik0bkZ7IWT9Guju6f3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMt
MTU1YWY5ZDgzMDM2LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMtMTU1YWY5ZDgzMDM2
LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUO6FO8PX
KTHD+n1uk/SS0K6lcSBSTWH9LkACnKrhnz5wC+rzjBzI04WHz0gCDHPJqXukdNCi
/rbsNbpIJIONzLwKJ5QPwvEvg2teA5yH6VoM6NkPUl7sNkHDDM+FfMVJKPW9KlFd
KXl5UxA6hWpSpFaWpkS1ds5HsjSeBGd5jzadRoizedWkvpTPn1/bE0XqbvU1Jb2f
aanBkrDByC6VN71bcaLj76ZetSN8UHEUfTch2sxqHlisU4OFRgQconUawf1DNx3n
GZpCYsl5RFXTBsLU1k2e4ICmVfWX8jEOR4YEr3oPZo8wWHgpDcjWcnX5nnNdP2lc
8D7Ze+6nNOSQSA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:26:51 2025 by rpki-client