Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: 9oqRr0ouva5bMGICTORKQekienSz/Mwr6N7jfXkvWAU=
Subject key identifier: BC:1D:A1:31:38:D9:1A:D3:75:0A:E2:B8:F7:AB:ED:10:40:45:CB:50
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 01967A5709C321E7364F6E7FF3EA273ABF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 140E
Signing time: Mon 28 Apr 2025 03:00:46 +0000
Manifest this update: Mon 28 Apr 2025 03:00:46 +0000
Manifest next update: Tue 29 Apr 2025 03:00:46 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: f6PP2KDLxVSBOHtpV/gDTDRZsuK1ffCNCe+Hp7FoT/g=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:09:c3:21:e7:36:4f:6e:7f:f3:ea:27:3a:bf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Apr 28 03:00:46 2025 GMT
Not After : Apr 29 03:00:46 2025 GMT
Subject: CN=bc1da13138d91ad3750ae2b8f7abed104045cb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:6b:6f:41:28:09:6c:23:81:ad:4d:6d:86:
1e:3a:92:a9:23:31:44:6f:fc:d1:3b:70:84:4f:25:
7d:e3:23:70:74:05:a8:29:c7:f7:3f:57:13:04:d6:
75:7a:bf:f7:6f:ed:a5:a7:ee:48:0a:0e:1d:5b:f1:
47:35:f0:bb:e5:43:c8:17:ef:6f:c9:00:d8:8f:40:
33:f7:c1:37:f0:01:3a:28:58:4f:df:dc:ac:2f:d7:
48:3a:be:e8:14:01:ff:46:59:39:67:e9:9e:8b:43:
1b:cd:d8:4c:05:8b:22:00:5b:aa:bf:61:e5:b1:ef:
ea:d1:aa:f9:71:db:b0:3f:34:51:29:a2:d0:e2:c4:
98:20:aa:1c:5a:24:95:00:b0:bf:cd:11:9d:65:fa:
6d:0f:f0:fa:0a:b2:7a:2d:60:50:d4:75:0a:b4:ed:
5d:4f:ec:41:06:f7:4c:c3:9d:2d:82:d9:32:a0:d2:
ec:f9:2b:fb:97:af:95:fa:56:b9:cd:6a:10:28:f3:
b3:a8:dc:a9:27:04:ac:f6:38:d7:90:ea:89:b0:8a:
92:05:e0:82:94:e3:70:29:78:57:ec:96:14:7d:4f:
dd:b8:17:ae:d5:21:78:4a:fa:fc:20:c3:39:fc:fb:
9a:63:62:69:8c:9c:4a:37:dd:5c:ed:f1:01:41:97:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:A1:31:38:D9:1A:D3:75:0A:E2:B8:F7:AB:ED:10:40:45:CB:50
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:24:58:66:3a:ab:ff:63:5a:ef:bf:e8:cd:88:4c:c9:2c:a5:
b1:a1:9a:5b:c7:7e:e5:27:d8:b2:1a:27:74:9c:5f:be:42:e4:
4c:d1:22:90:34:08:fb:9f:c4:68:98:77:00:7f:b8:0f:67:35:
a2:48:5e:15:f6:f7:69:a3:1a:b2:e7:f8:6d:05:79:65:51:87:
05:48:ba:43:a7:d6:f2:cb:fe:d2:a9:8b:d9:89:f3:5e:68:41:
61:da:45:83:23:13:98:bf:b7:a9:60:9b:a0:80:13:87:68:0f:
fa:2f:b5:12:2b:9f:e3:d7:fd:37:0d:2e:bf:3f:a4:bd:f5:6f:
20:31:3f:a9:1b:ce:fe:93:f8:9b:bf:9b:fb:9d:f2:47:9e:a9:
26:61:ef:64:77:2b:6b:b9:b7:4e:8a:35:4a:c0:81:82:7f:fe:
9b:64:b1:77:45:fe:5a:1e:90:0a:97:36:5e:79:aa:44:de:a6:
58:fc:ce:e3:ef:8d:90:03:c4:f5:20:3f:16:cb:1f:59:52:04:
88:4c:e9:16:bd:9b:b5:c7:b8:b2:82:88:93:82:db:1e:64:18:
31:77:36:bb:de:30:a2:16:62:7a:43:2f:64:25:50:82:2e:fe:
08:05:f9:4e:27:3a:a1:ec:19:f1:c6:d7:97:a6:37:b2:c9:59:
36:f5:9f:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6VwnDIec2T25/8+onOr9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTRmOTY3NzFkOTFmODdjMjFiZTlmMDBkMTIwMzI3ZjVi
YmYyZWEwHhcNMjUwNDI4MDMwMDQ2WhcNMjUwNDI5MDMwMDQ2WjAzMTEwLwYDVQQD
EyhiYzFkYTEzMTM4ZDkxYWQzNzUwYWUyYjhmN2FiZWQxMDQwNDVjYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn45rb0EoCWwjga1NbYYeOpKpIzFE
b/zRO3CETyV94yNwdAWoKcf3P1cTBNZ1er/3b+2lp+5ICg4dW/FHNfC75UPIF+9v
yQDYj0Az98E38AE6KFhP39ysL9dIOr7oFAH/Rlk5Z+mei0MbzdhMBYsiAFuqv2Hl
se/q0ar5cduwPzRRKaLQ4sSYIKocWiSVALC/zRGdZfptD/D6CrJ6LWBQ1HUKtO1d
T+xBBvdMw50tgtkyoNLs+Sv7l6+V+la5zWoQKPOzqNypJwSs9jjXkOqJsIqSBeCC
lONwKXhX7JYUfU/duBeu1SF4Svr8IMM5/PuaY2JpjJxKN91c7fEBQZdYiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwdoTE42RrTdQriuPer7RBARctQMB8GA1UdIwQY
MBaAFE3k+Wdx2R+Hwhvp8A0SAyf1u/LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgt
NTkxMWZlNjNhZjc5LzEvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgtNTkxMWZlNjNhZjc5
LzEvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSRYZjqr
/2Na77/ozYhMySylsaGaW8d+5SfYshondJxfvkLkTNEikDQI+5/EaJh3AH+4D2c1
okheFfb3aaMasuf4bQV5ZVGHBUi6Q6fW8sv+0qmL2YnzXmhBYdpFgyMTmL+3qWCb
oIATh2gP+i+1Eiuf49f9Nw0uvz+kvfVvIDE/qRvO/pP4m7+b+53yR56pJmHvZHcr
a7m3Too1SsCBgn/+m2Sxd0X+Wh6QCpc2XnmqRN6mWPzO4++NkAPE9SA/FssfWVIE
iEzpFr2btce4soKIk4LbHmQYMXc2u94wohZiekMvZCVQgi7+CAX5Tic6oewZ8cbX
l6Y3sslZNvWfXA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:30 2025 by rpki-client