Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: hlxXf1kxdDGdGiLvqyoQ9kHbO83WpGSH6kp+1KqbYD4=
Subject key identifier: 7A:93:74:46:21:42:53:75:5E:FE:F7:E8:E0:63:98:A3:00:9E:70:DA
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 01968390F8384541E2B15B58C409C6D3B925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 22:00:38 +0000
Manifest this update: Tue 29 Apr 2025 22:00:38 +0000
Manifest next update: Wed 30 Apr 2025 22:00:38 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: tzxBl9WeJckFNt/LXoMhNvFFJ7d086bMxtoZ31SQWLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:f8:38:45:41:e2:b1:5b:58:c4:09:c6:d3:b9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Apr 29 22:00:38 2025 GMT
Not After : Apr 30 22:00:38 2025 GMT
Subject: CN=7a937446214253755efef7e8e06398a3009e70da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:72:53:c2:d3:c6:47:d5:c4:71:ad:cb:d9:
3e:73:bf:72:37:d4:95:81:1e:92:e5:09:8b:9b:49:
00:99:ed:df:ed:7b:f7:cd:03:79:8e:29:fe:6e:93:
2d:e1:3c:43:f2:fc:3b:a4:f1:69:ec:5a:03:f3:91:
3f:93:ae:9f:17:24:e7:b8:a7:36:0f:28:75:3e:5a:
a9:9b:2d:70:08:73:cf:b4:d2:57:9a:93:c0:5c:69:
c6:8f:d4:c4:59:ab:bf:18:bf:60:b3:54:90:5c:08:
f7:7b:db:51:6d:b9:15:32:8c:9f:ca:b2:2a:76:40:
37:90:20:ee:46:25:4c:1b:2a:12:1d:b4:43:d7:40:
5d:c3:d7:3e:c2:da:82:ed:c6:7c:01:90:0b:de:12:
56:67:54:66:ba:d1:e3:13:ba:e6:35:6a:c7:5d:92:
4e:6b:bd:cf:cc:b1:e0:f3:b0:71:e1:7c:0b:d1:b3:
62:df:62:de:a4:e5:a1:14:ee:51:3b:ea:d0:80:7e:
62:93:04:66:62:d1:4a:28:1a:7f:7f:b9:e6:85:00:
1a:14:47:8c:fd:50:19:19:f8:46:aa:43:0b:f4:3d:
b3:2b:05:80:6b:a5:92:bd:13:35:0d:2e:46:cb:8e:
06:a2:2c:b0:5d:64:b2:33:e2:f7:5c:de:df:19:b8:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:93:74:46:21:42:53:75:5E:FE:F7:E8:E0:63:98:A3:00:9E:70:DA
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:06:8b:e9:69:07:1b:0b:51:b9:3d:b4:a0:73:cc:81:0e:57:
e8:82:01:f9:7c:7e:1f:10:f4:9b:e8:b3:75:dd:24:25:f3:95:
5e:0c:84:80:47:6a:a9:87:e8:41:47:14:04:85:1a:b5:bf:cd:
27:20:48:4f:37:cc:4e:7a:3e:e8:1f:b9:ad:71:9a:f0:2b:17:
53:c2:7b:41:12:2a:33:b1:1e:ff:83:fd:8e:63:75:30:31:9e:
2f:6c:5c:77:50:f8:6c:12:01:af:e5:36:eb:af:46:be:71:69:
aa:3c:5e:43:6c:07:5d:ec:59:22:f1:c4:b6:28:2c:ed:ec:32:
c3:cc:e5:e7:c0:09:0d:3b:aa:97:a5:bf:1e:3a:ce:33:f4:87:
c7:06:16:86:96:be:25:90:34:ce:55:d0:50:c4:17:41:67:e6:
93:a8:d1:af:13:bd:ad:45:99:18:09:45:36:33:41:29:c3:5b:
55:30:ad:4d:3c:da:ec:c7:83:ae:24:f0:40:50:b4:d1:14:21:
d6:65:bd:f7:38:5d:6a:57:d6:32:48:e5:53:75:eb:c2:d2:b8:
e9:98:90:1a:c5:cb:ba:ec:94:38:55:9f:a8:e5:ea:6c:dd:56:
eb:31:b2:ca:88:22:2b:8a:87:92:8c:e5:a2:eb:56:a9:1e:59:
a3:36:eb:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkPg4RUHisVtYxAnG07klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGJlYjM0OTcyMzJiNmY1YWM5YTI2ODc1MzcyMTEwMTVh
Mjg3MTAwHhcNMjUwNDI5MjIwMDM4WhcNMjUwNDMwMjIwMDM4WjAzMTEwLwYDVQQD
Eyg3YTkzNzQ0NjIxNDI1Mzc1NWVmZWY3ZThlMDYzOThhMzAwOWU3MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxRyU8LTxkfVxHGty9k+c79yN9SV
gR6S5QmLm0kAme3f7Xv3zQN5jin+bpMt4TxD8vw7pPFp7FoD85E/k66fFyTnuKc2
Dyh1Plqpmy1wCHPPtNJXmpPAXGnGj9TEWau/GL9gs1SQXAj3e9tRbbkVMoyfyrIq
dkA3kCDuRiVMGyoSHbRD10Bdw9c+wtqC7cZ8AZAL3hJWZ1RmutHjE7rmNWrHXZJO
a73PzLHg87Bx4XwL0bNi32LepOWhFO5RO+rQgH5ikwRmYtFKKBp/f7nmhQAaFEeM
/VAZGfhGqkML9D2zKwWAa6WSvRM1DS5Gy44GoiywXWSyM+L3XN7fGbgRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqTdEYhQlN1Xv736OBjmKMAnnDaMB8GA1UdIwQY
MBaAFP7b6zSXIytvWsmiaHU3IRAVoocQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjIt
MGU1MTZmOWM0ZDQ1LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjItMGU1MTZmOWM0ZDQ1
LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQaL6WkH
GwtRuT20oHPMgQ5X6IIB+Xx+HxD0m+izdd0kJfOVXgyEgEdqqYfoQUcUBIUatb/N
JyBITzfMTno+6B+5rXGa8CsXU8J7QRIqM7Ee/4P9jmN1MDGeL2xcd1D4bBIBr+U2
669GvnFpqjxeQ2wHXexZIvHEtigs7ewyw8zl58AJDTuql6W/HjrOM/SHxwYWhpa+
JZA0zlXQUMQXQWfmk6jRrxO9rUWZGAlFNjNBKcNbVTCtTTza7MeDriTwQFC00RQh
1mW99zhdalfWMkjlU3XrwtK46ZiQGsXLuuyUOFWfqOXqbN1W6zGyyogiK4qHkozl
outWqR5Zozbr8w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:56:15 2025 by rpki-client