Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: MOkmmshVyAhIXryejq5nAtwkgktVILgO3GDcspa4/QU=
Subject key identifier: D5:2C:1A:25:8B:F1:25:E5:B6:0B:94:46:34:95:BD:15:A6:C6:FF:24
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 01968FCC6CA34979C91EC0E19B2F82904D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 07:01:01 +0000
Manifest this update: Fri 02 May 2025 07:01:01 +0000
Manifest next update: Sat 03 May 2025 07:01:01 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: byW0wdAg3Ek6TGTdH1KVLCBC+fMmj7UlLkojqDkjrqQ=)
2: sXBtr0RmYgN7EHzS2OAuZuhPnSk.roa (hash: vzTvtT3U+hF4Cf7zWB9jndQ+LVyRdJBiHZIGS8DcnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:6c:a3:49:79:c9:1e:c0:e1:9b:2f:82:90:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: May 2 07:01:01 2025 GMT
Not After : May 3 07:01:01 2025 GMT
Subject: CN=d52c1a258bf125e5b60b94463495bd15a6c6ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:32:38:90:76:c2:3f:d7:b9:c1:fe:cf:25:
83:17:63:c6:85:e3:cd:81:11:ea:66:a9:8e:08:a3:
c9:ba:e4:f5:08:03:ef:80:fb:2b:46:d6:58:8a:47:
f5:a9:95:02:59:23:ca:26:fd:e3:a2:24:17:7a:16:
2e:cb:1f:b0:76:dd:0f:2b:9c:f6:42:7a:74:69:ee:
73:fd:30:38:33:e7:c2:59:1a:09:56:21:03:e1:44:
fa:4f:19:3a:b5:45:9c:cb:66:9f:e6:c5:1b:e7:01:
82:7c:3b:f0:3e:9b:60:55:d4:96:fe:d9:57:ee:5a:
3e:1a:1d:02:0d:5c:2f:ed:fc:28:c6:b3:13:4b:2c:
39:d5:94:9a:ef:ec:0c:36:58:c8:59:f3:fa:65:7c:
8b:a4:1a:c1:fd:21:0e:54:00:f5:7f:e6:59:f9:18:
da:8c:15:40:9d:0e:69:a6:7d:b5:79:49:8c:37:9f:
c4:67:d0:6a:2b:f6:41:5f:7b:7d:25:7a:6a:3b:e9:
af:93:f3:88:9d:b8:59:db:bd:41:58:57:b5:b6:22:
05:b4:c5:df:ce:24:7f:dc:48:b4:62:b3:68:ad:72:
1c:ba:37:06:eb:51:dc:d4:17:44:b3:ef:b5:d4:0f:
64:1d:05:f0:66:18:ec:7c:b1:80:c3:76:94:ce:37:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:1A:25:8B:F1:25:E5:B6:0B:94:46:34:95:BD:15:A6:C6:FF:24
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:98:b1:4e:c5:f6:ca:54:eb:69:95:f7:6e:44:5c:79:5d:d0:
6b:8a:a5:9f:db:06:6d:77:ab:ef:dd:f8:a6:c9:32:e0:9f:16:
33:e5:5c:ed:b5:80:08:bd:cf:f2:dd:00:be:03:86:8c:2f:ae:
8e:94:15:68:76:9f:cc:38:0d:f3:9b:24:d3:3c:00:42:6a:29:
89:a0:92:91:43:cd:bd:bf:db:6b:2e:b0:79:47:c4:87:ab:cb:
2e:a7:6d:0d:18:f1:cd:d4:92:31:a4:4f:5b:87:ef:f3:11:2f:
9d:7a:98:a2:9a:65:f8:a2:67:78:e3:1e:49:13:19:06:a7:84:
19:c2:ff:28:3b:03:e0:11:aa:5f:42:1d:83:a4:e8:8e:52:54:
7d:0c:70:d4:7c:29:7f:eb:ad:c1:53:5a:cf:ca:9b:ab:22:1f:
22:36:22:1a:45:77:ad:07:4b:be:f2:4d:a3:26:81:53:7e:2c:
a9:2e:34:bd:fc:90:b3:4b:e0:17:31:d4:8c:e1:a2:55:53:fb:
6b:d7:b5:f2:b4:0a:23:60:24:c3:43:5f:58:2c:ca:50:6a:cd:
2f:e7:9e:9c:7c:ab:cd:f6:c8:2c:fe:c7:31:47:aa:ba:e7:44:
ce:16:a3:1f:3c:46:d1:49:ea:7e:d5:3f:6c:6c:da:47:0b:5c:
a4:12:d3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPzGyjSXnJHsDhmy+CkE1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOThmZTUwMmFjMTZlOTU3Y2MzM2ViYzJlYzFiZTgzYmJl
ZDdjYzQwHhcNMjUwNTAyMDcwMTAxWhcNMjUwNTAzMDcwMTAxWjAzMTEwLwYDVQQD
EyhkNTJjMWEyNThiZjEyNWU1YjYwYjk0NDYzNDk1YmQxNWE2YzZmZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmokyOJB2wj/XucH+zyWDF2PGhePN
gRHqZqmOCKPJuuT1CAPvgPsrRtZYikf1qZUCWSPKJv3joiQXehYuyx+wdt0PK5z2
Qnp0ae5z/TA4M+fCWRoJViED4UT6Txk6tUWcy2af5sUb5wGCfDvwPptgVdSW/tlX
7lo+Gh0CDVwv7fwoxrMTSyw51ZSa7+wMNljIWfP6ZXyLpBrB/SEOVAD1f+ZZ+Rja
jBVAnQ5ppn21eUmMN5/EZ9BqK/ZBX3t9JXpqO+mvk/OInbhZ271BWFe1tiIFtMXf
ziR/3Ei0YrNorXIcujcG61Hc1BdEs++11A9kHQXwZhjsfLGAw3aUzjfnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUsGiWL8SXltguURjSVvRWmxv8kMB8GA1UdIwQY
MBaAFE2Y/lAqwW6VfMM+vC7BvoO77XzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYt
Y2QwMDliMzAwYTZjLzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYtY2QwMDliMzAwYTZj
LzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5ixTsX2
ylTraZX3bkRceV3Qa4qln9sGbXer7934psky4J8WM+Vc7bWACL3P8t0AvgOGjC+u
jpQVaHafzDgN85sk0zwAQmopiaCSkUPNvb/bay6weUfEh6vLLqdtDRjxzdSSMaRP
W4fv8xEvnXqYoppl+KJneOMeSRMZBqeEGcL/KDsD4BGqX0Idg6TojlJUfQxw1Hwp
f+utwVNaz8qbqyIfIjYiGkV3rQdLvvJNoyaBU34sqS40vfyQs0vgFzHUjOGiVVP7
a9e18rQKI2Akw0NfWCzKUGrNL+eenHyrzfbILP7HMUequudEzhajHzxG0UnqftU/
bGzaRwtcpBLTog==
-----END CERTIFICATE-----
Generated at Fri May 2 12:05:59 2025 by rpki-client