Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: 00M4cEZOwhUfe8oigiuli8dFfWdrmO9pToBvlzuDUYA=
Subject key identifier: DD:03:D2:07:72:F3:BA:11:59:AC:8C:6A:EE:1A:ED:6B:A4:1C:AC:EA
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 0196827E3482191D45CF4AF037FECAAC9B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 0E11
Signing time: Tue 29 Apr 2025 17:00:31 +0000
Manifest this update: Tue 29 Apr 2025 17:00:31 +0000
Manifest next update: Wed 30 Apr 2025 17:00:31 +0000
Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: LchgVD5my9HGF+RGAFgqTUa52JITA6REBVIIytOJ1fA=)
2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:34:82:19:1d:45:cf:4a:f0:37:fe:ca:ac:9b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Apr 29 17:00:31 2025 GMT
Not After : Apr 30 17:00:31 2025 GMT
Subject: CN=dd03d20772f3ba1159ac8c6aee1aed6ba41cacea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:b3:a9:92:81:6c:d7:44:bc:d4:ec:ad:6d:
b9:6e:16:ec:ad:ff:68:04:e8:0a:9c:b4:61:ff:39:
b3:34:0a:40:18:43:fd:e8:ad:3a:a1:66:81:a2:8a:
be:59:4b:4f:04:ed:9f:7f:ef:5d:ab:1b:db:7c:2b:
9e:d4:7d:d7:f6:8e:bf:fa:c9:2d:a3:e7:f2:4a:df:
c1:5c:fd:b1:12:63:49:29:5a:f0:10:76:f4:41:5d:
e0:de:55:97:a7:49:12:70:f9:ee:85:9f:f4:dd:51:
50:e7:9b:d9:ff:1e:91:e6:f5:9b:ea:9b:58:42:6b:
18:5c:24:ad:6c:1e:e2:85:38:1d:bb:90:e1:c0:c7:
cb:ea:9c:96:e3:e3:bf:75:b4:b1:30:5c:07:bf:cf:
19:3b:cd:aa:6e:93:31:58:5c:dd:85:f3:a6:7e:53:
12:d8:07:28:e0:1a:d3:76:a2:cc:37:d8:ba:9f:b4:
a1:d3:c2:bd:07:6a:df:46:57:8c:8d:ce:57:7e:44:
1c:e3:0f:97:81:2d:a5:32:36:ec:82:d3:30:66:e7:
6c:77:1b:48:05:10:53:61:28:7d:0a:c4:67:8e:94:
46:d2:37:24:ee:3b:89:06:eb:a7:c0:ba:e8:99:3c:
b1:b3:df:44:20:81:a4:0b:ef:da:66:8e:14:ef:fb:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:03:D2:07:72:F3:BA:11:59:AC:8C:6A:EE:1A:ED:6B:A4:1C:AC:EA
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:49:75:19:34:de:7f:d2:94:87:bf:d9:8a:39:4e:05:8e:0a:
bc:a6:8a:83:88:f5:19:0d:83:3d:a6:e5:95:4a:e8:dc:b9:e7:
1a:97:15:28:64:d7:3a:dc:40:3a:3f:55:64:41:c3:93:b8:a3:
d1:85:1d:37:ff:92:70:79:2d:d1:c2:8d:e3:8c:5f:c9:73:c4:
86:8a:6b:d5:6e:81:9e:54:54:54:a3:d0:4a:f3:bc:2c:c5:1c:
66:45:96:37:74:81:2c:6e:d9:3c:05:3f:97:ef:30:24:95:22:
0a:39:b1:ac:c1:64:be:54:76:cf:ac:88:20:c9:92:a8:7b:5a:
b7:02:c7:7f:2b:4f:27:b6:75:a0:cc:4e:2a:a3:80:b1:2e:e5:
b9:2a:57:80:5f:97:f4:59:a3:d7:09:8d:7e:bf:ae:88:63:ad:
27:51:23:78:ad:91:a9:85:62:75:b8:79:6f:3e:49:d5:35:cc:
4a:0e:b5:16:5a:b8:b8:6b:15:0d:fc:3c:1a:70:bd:7c:d6:22:
db:88:21:6d:a3:d5:15:1d:9d:98:4f:ad:46:0e:7d:c8:e8:b8:
53:40:b8:b3:92:68:2a:9c:cc:ca:d8:dc:bc:66:57:bc:61:90:
00:78:fd:75:7a:8c:10:8b:41:30:3a:21:a4:97:e1:e2:8b:17:
85:f3:b5:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfjSCGR1Fz0rwN/7KrJtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNGMxMzg5YTg0OWVmNWRjY2I4MzAzNzAzYjg5OGM5MWU2
M2QxNGYwHhcNMjUwNDI5MTcwMDMxWhcNMjUwNDMwMTcwMDMxWjAzMTEwLwYDVQQD
EyhkZDAzZDIwNzcyZjNiYTExNTlhYzhjNmFlZTFhZWQ2YmE0MWNhY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WyzqZKBbNdEvNTsrW25bhbsrf9o
BOgKnLRh/zmzNApAGEP96K06oWaBooq+WUtPBO2ff+9dqxvbfCue1H3X9o6/+skt
o+fySt/BXP2xEmNJKVrwEHb0QV3g3lWXp0kScPnuhZ/03VFQ55vZ/x6R5vWb6ptY
QmsYXCStbB7ihTgdu5DhwMfL6pyW4+O/dbSxMFwHv88ZO82qbpMxWFzdhfOmflMS
2Aco4BrTdqLMN9i6n7Sh08K9B2rfRleMjc5XfkQc4w+XgS2lMjbsgtMwZudsdxtI
BRBTYSh9CsRnjpRG0jck7juJBuunwLromTyxs99EIIGkC+/aZo4U7/v9cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0D0gdy87oRWayMau4a7WukHKzqMB8GA1UdIwQY
MBaAFE5ME4moSe9dzLgwNwO4mMkeY9FPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQt
YThkODM4NDM4ZDhhLzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQtYThkODM4NDM4ZDhh
LzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUl1GTTe
f9KUh7/ZijlOBY4KvKaKg4j1GQ2DPabllUro3LnnGpcVKGTXOtxAOj9VZEHDk7ij
0YUdN/+ScHkt0cKN44xfyXPEhopr1W6BnlRUVKPQSvO8LMUcZkWWN3SBLG7ZPAU/
l+8wJJUiCjmxrMFkvlR2z6yIIMmSqHtatwLHfytPJ7Z1oMxOKqOAsS7luSpXgF+X
9Fmj1wmNfr+uiGOtJ1EjeK2RqYVidbh5bz5J1TXMSg61Flq4uGsVDfw8GnC9fNYi
24ghbaPVFR2dmE+tRg59yOi4U0C4s5JoKpzMytjcvGZXvGGQAHj9dXqMEItBMDoh
pJfh4osXhfO1sg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:49:34 2025 by rpki-client