Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: OKgfCce/Vgp3davdEgLOmiG4THhOc4q9Z0jwHu4kruU=
Subject key identifier: 9C:40:56:85:65:BA:D5:6D:77:DC:AB:BB:83:0B:E3:0F:2F:28:72:0F
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01967FEAE631E565ACB7CEA23753F0B2CAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 05:00:22 +0000
Manifest this update: Tue 29 Apr 2025 05:00:22 +0000
Manifest next update: Wed 30 Apr 2025 05:00:22 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: dAnhBI99th9AvBJ2DiZHwoh+ssbM6M4qLg8G3zGEVhg=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:e6:31:e5:65:ac:b7:ce:a2:37:53:f0:b2:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Apr 29 05:00:22 2025 GMT
Not After : Apr 30 05:00:22 2025 GMT
Subject: CN=9c40568565bad56d77dcabbb830be30f2f28720f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:e0:68:42:a5:5d:27:90:f0:e1:e4:f5:e9:
bd:63:ec:42:ab:5b:3f:ba:fe:18:96:e8:e5:ed:82:
48:c6:17:3d:ef:f0:49:4f:b2:ab:b3:e8:ea:c2:df:
f4:24:96:3f:81:fe:d8:00:75:85:d0:3f:22:0c:31:
41:ab:62:4a:1c:2b:fe:ed:51:83:47:06:0c:5d:13:
8c:73:94:e2:9c:de:0a:47:ea:b8:a3:8e:89:d6:20:
e6:ca:91:54:9e:c9:4a:12:79:f3:66:fa:dc:70:28:
fd:b8:29:4c:b5:e5:53:f9:ab:94:f1:7d:e3:dc:98:
6e:7c:4a:d2:e0:03:98:36:62:17:36:f6:21:75:3d:
69:71:6d:81:3d:b5:98:b0:df:30:f5:83:e7:c0:99:
c2:98:1b:16:c2:e8:ee:ca:07:3b:28:a1:e9:fe:50:
a3:ad:ad:5c:95:f9:1d:31:b3:92:d7:af:2c:75:6a:
d8:21:4f:0d:c9:82:39:cc:81:2b:92:7d:ce:4b:14:
92:d1:1e:8b:bf:9c:01:d7:b7:50:90:8d:1a:32:4f:
99:00:4c:38:27:34:1f:42:31:ff:69:6d:21:20:26:
eb:7a:af:8a:19:f2:f3:48:d8:a3:a7:02:cb:bf:ab:
90:2f:c7:d3:51:73:c2:c7:b5:0f:f3:e3:27:5f:8c:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:56:85:65:BA:D5:6D:77:DC:AB:BB:83:0B:E3:0F:2F:28:72:0F
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:85:4b:5f:9d:53:62:93:8a:90:7f:3a:e8:f7:be:e8:99:06:
27:ed:67:ab:0c:f8:51:04:6c:8a:60:c3:4f:76:25:4d:96:f1:
15:e0:14:b1:57:84:c4:90:15:ff:d8:37:7c:60:f0:6f:0e:fd:
61:e9:2c:dc:c1:a1:d1:34:f4:ee:c7:65:3d:bf:ce:9d:8c:dd:
68:0e:4c:f7:14:43:fa:92:c9:2f:47:b6:83:45:c7:f8:95:56:
99:b6:cc:05:40:fc:e0:07:4e:36:df:db:c6:e3:7d:95:95:ed:
52:ed:b1:b6:0b:46:07:b3:a8:e4:00:0c:ef:34:c3:88:ae:58:
55:34:ef:f2:1c:2d:35:85:45:31:74:83:32:fb:5f:3a:7c:9a:
04:96:0c:01:31:71:5f:a6:2c:27:e9:51:b2:08:05:72:33:d4:
24:df:82:dc:cc:67:18:dc:1f:50:de:25:06:5f:c6:c3:e8:21:
f5:a3:70:7a:d7:3b:46:cf:bd:ca:20:36:53:9b:50:4d:de:83:
4c:23:33:9f:89:fc:75:8f:8d:97:25:e6:02:12:5c:89:34:cd:
87:12:1b:47:3a:ed:d3:20:76:84:89:d1:8f:cf:53:3c:df:a1:
33:5e:d0:9e:4a:50:72:15:b8:62:65:91:b2:d1:80:c0:b8:52:
6b:a4:39:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6uYx5WWst86iN1PwssrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2
YjIzNzgwHhcNMjUwNDI5MDUwMDIyWhcNMjUwNDMwMDUwMDIyWjAzMTEwLwYDVQQD
Eyg5YzQwNTY4NTY1YmFkNTZkNzdkY2FiYmI4MzBiZTMwZjJmMjg3MjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqczgaEKlXSeQ8OHk9em9Y+xCq1s/
uv4Ylujl7YJIxhc97/BJT7Krs+jqwt/0JJY/gf7YAHWF0D8iDDFBq2JKHCv+7VGD
RwYMXROMc5TinN4KR+q4o46J1iDmypFUnslKEnnzZvrccCj9uClMteVT+auU8X3j
3JhufErS4AOYNmIXNvYhdT1pcW2BPbWYsN8w9YPnwJnCmBsWwujuygc7KKHp/lCj
ra1clfkdMbOS168sdWrYIU8NyYI5zIErkn3OSxSS0R6Lv5wB17dQkI0aMk+ZAEw4
JzQfQjH/aW0hICbreq+KGfLzSNijpwLLv6uQL8fTUXPCx7UP8+MnX4z3mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxAVoVlutVtd9yru4ML4w8vKHIPMB8GA1UdIwQY
MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt
NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz
LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4VLX51T
YpOKkH866Pe+6JkGJ+1nqwz4UQRsimDDT3YlTZbxFeAUsVeExJAV/9g3fGDwbw79
Yeks3MGh0TT07sdlPb/OnYzdaA5M9xRD+pLJL0e2g0XH+JVWmbbMBUD84AdONt/b
xuN9lZXtUu2xtgtGB7Oo5AAM7zTDiK5YVTTv8hwtNYVFMXSDMvtfOnyaBJYMATFx
X6YsJ+lRsggFcjPUJN+C3MxnGNwfUN4lBl/Gw+gh9aNwetc7Rs+9yiA2U5tQTd6D
TCMzn4n8dY+NlyXmAhJciTTNhxIbRzrt0yB2hInRj89TPN+hM17QnkpQchW4YmWR
stGAwLhSa6Q5Pw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:06 2025 by rpki-client