
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
File: TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft (raw, json)
Hash identifier: Bo0obvN6ItIWqf/mEGj7DIlbMh2iKl8Zm5ZINTdhqJY=
Subject key identifier: 4A:9A:BF:D4:96:D9:8A:83:EC:EA:35:04:7D:A9:EF:80:5B:23:10:9F
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 01967868E0E896A69DD64AB36E54A4F3448D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
Manifest number: 146D
Signing time: Sun 27 Apr 2025 18:01:01 +0000
Manifest this update: Sun 27 Apr 2025 18:01:01 +0000
Manifest next update: Mon 28 Apr 2025 18:01:01 +0000
Files and hashes: 1: TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl (hash: RkezRqsBedZbCqtLFzrWScfHw3q/6pM7/1z7WaZGBJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:e0:e8:96:a6:9d:d6:4a:b3:6e:54:a4:f3:44:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: Apr 27 18:01:01 2025 GMT
Not After : Apr 28 18:01:01 2025 GMT
Subject: CN=4a9abfd496d98a83ecea35047da9ef805b23109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:c6:14:0b:60:01:54:60:75:c1:f6:a0:4a:
c6:d2:0d:6a:fd:b8:0e:01:55:b9:ce:04:20:0f:8d:
a3:88:2b:af:dc:22:68:5a:86:a2:59:89:b7:e1:64:
fa:37:5e:cd:db:ee:bc:3b:e2:d9:12:c7:59:a1:5d:
b1:16:95:5e:cb:2c:4b:63:e2:68:5c:b4:83:e1:47:
8c:ec:58:a7:4d:41:88:22:84:13:dd:83:6f:5c:f3:
91:c5:f3:60:51:71:9e:71:fc:7d:a5:a2:3a:c3:e8:
56:3d:a0:85:90:8d:e6:a9:d6:9b:01:35:18:0e:48:
83:b6:12:21:d8:f2:3e:f8:05:80:9d:1d:6c:55:e4:
1e:af:a1:53:62:fe:12:51:4c:a5:22:9e:1e:0e:80:
dd:82:d9:ee:68:1a:1b:3a:c4:8d:de:ed:28:c5:f7:
2b:b3:b5:54:33:2f:12:da:97:cd:12:8c:fb:66:33:
de:85:0b:da:68:df:21:f0:30:45:15:6c:fd:f4:91:
ba:24:72:7b:ab:50:91:a8:9d:bb:52:67:1e:72:dc:
ab:76:11:96:d1:cc:e0:19:ad:f1:3a:e4:7f:61:5e:
6b:73:cb:b8:e3:18:37:73:49:58:94:b4:31:77:a5:
aa:0a:54:f8:be:a3:78:eb:d2:7c:b9:4e:23:e1:6c:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:BF:D4:96:D9:8A:83:EC:EA:35:04:7D:A9:EF:80:5B:23:10:9F
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:52:93:1b:ce:f1:4c:3e:2f:df:a6:49:fc:a1:0e:6c:7b:97:
ff:54:32:5f:c3:49:33:83:f0:ae:4e:92:08:5c:df:f4:0e:ef:
0c:37:58:fa:38:c9:a8:0a:9c:b3:ce:2e:f6:87:1a:49:c1:1a:
ca:43:1e:f6:66:17:54:c3:41:47:24:ab:92:72:da:2a:33:a4:
f9:1b:72:e5:a9:41:0c:69:29:1a:da:5f:bc:54:28:a5:a6:10:
28:7f:c2:25:db:5a:9c:e6:13:a8:15:cc:8d:13:f7:0d:b7:63:
b0:f3:14:0d:68:b1:dc:89:2b:97:35:6b:4f:f9:52:a5:f4:51:
a6:fa:dd:45:5a:47:3e:91:51:06:5f:31:c1:16:a8:b2:f3:bc:
9f:ab:ef:51:95:4c:3f:5a:49:45:ab:50:4f:d9:46:02:a7:24:
3e:76:fc:fd:c4:f5:19:47:be:56:26:e6:b2:ca:69:fd:8d:3f:
fe:c7:a4:ba:bc:26:19:a3:ff:78:70:c8:0e:ec:4b:7d:61:70:
98:d1:6c:63:5f:cd:d2:cb:6a:d0:0e:f9:35:20:a8:fa:58:cf:
57:33:0a:d2:c5:45:1a:f9:8f:e2:84:a7:46:e7:6d:68:d9:9e:
19:70:24:75:2b:c4:fd:d3:fc:94:75:7d:45:53:34:4d:59:41:
de:df:aa:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aODolqad1kqzblSk80SNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDAwNmUwNTg5NmY2ZmZiMzAxNjFlN2M4ZGRhMmY5YWQw
NWI1NjEwHhcNMjUwNDI3MTgwMTAxWhcNMjUwNDI4MTgwMTAxWjAzMTEwLwYDVQQD
Eyg0YTlhYmZkNDk2ZDk4YTgzZWNlYTM1MDQ3ZGE5ZWY4MDViMjMxMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xbGFAtgAVRgdcH2oErG0g1q/bgO
AVW5zgQgD42jiCuv3CJoWoaiWYm34WT6N17N2+68O+LZEsdZoV2xFpVeyyxLY+Jo
XLSD4UeM7FinTUGIIoQT3YNvXPORxfNgUXGecfx9paI6w+hWPaCFkI3mqdabATUY
DkiDthIh2PI++AWAnR1sVeQer6FTYv4SUUylIp4eDoDdgtnuaBobOsSN3u0oxfcr
s7VUMy8S2pfNEoz7ZjPehQvaaN8h8DBFFWz99JG6JHJ7q1CRqJ27UmcectyrdhGW
0czgGa3xOuR/YV5rc8u44xg3c0lYlLQxd6WqClT4vqN469J8uU4j4WziPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqav9SW2YqD7Oo1BH2p74BbIxCfMB8GA1UdIwQY
MBaAFEwABuBYlvb/swFh58jdovmtBbVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFBRzRGaVc5di16QVdIbnlOMmktYTBGdFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iN2Y4MzktYzY4MC00NWVhLWE4ZWUt
MTMwODdiZWJkMWU0LzEvVEFBRzRGaVc5di16QVdIbnlOMmktYTBGdFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iN2Y4MzktYzY4MC00NWVhLWE4ZWUtMTMwODdiZWJkMWU0
LzEvVEFBRzRGaVc5di16QVdIbnlOMmktYTBGdFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVKTG87x
TD4v36ZJ/KEObHuX/1QyX8NJM4Pwrk6SCFzf9A7vDDdY+jjJqAqcs84u9ocaScEa
ykMe9mYXVMNBRySrknLaKjOk+Rty5alBDGkpGtpfvFQopaYQKH/CJdtanOYTqBXM
jRP3DbdjsPMUDWix3IkrlzVrT/lSpfRRpvrdRVpHPpFRBl8xwRaosvO8n6vvUZVM
P1pJRatQT9lGAqckPnb8/cT1GUe+Vibmsspp/Y0//sekurwmGaP/eHDIDuxLfWFw
mNFsY1/N0stq0A75NSCo+ljPVzMK0sVFGvmP4oSnRudtaNmeGXAkdSvE/dP8lHV9
RVM0TVlB3t+qag==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:35 2025 by rpki-client