Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: /v8UL3a2lUHxRb7fhwrRzUI4ulhMUCOoyonJ3QYK20E=
Subject key identifier: 21:3F:08:0B:ED:5D:E5:1E:2E:C7:7A:7C:86:30:A1:83:A4:12:43:CE
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 0194BB2966AA50636D3AF730514E3FDBDFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 07:00:40 +0000
Manifest this update: Fri 31 Jan 2025 07:00:40 +0000
Manifest next update: Sat 01 Feb 2025 07:00:40 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: Chr+x13UPTnoBopLycFSVC+L54edIyixv0qETcDHZX4=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:66:aa:50:63:6d:3a:f7:30:51:4e:3f:db:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jan 31 07:00:40 2025 GMT
Not After : Feb 1 07:00:40 2025 GMT
Subject: CN=213f080bed5de51e2ec77a7c8630a183a41243ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:84:4b:97:41:7a:09:e4:04:40:52:fe:81:
6b:f4:ae:e1:e4:b5:d4:b4:f1:6b:3e:8e:5d:20:0e:
69:ee:fd:64:e3:11:20:52:95:08:3e:23:b3:f1:b6:
dc:fd:c2:6c:e8:86:45:92:41:bf:91:d3:33:1c:2d:
21:33:27:ad:72:07:e8:55:dc:3c:d1:a9:41:21:7c:
2b:59:e0:0f:4c:4e:4e:4e:9f:85:00:22:47:e4:11:
29:75:6d:e5:9f:8d:ec:f4:1a:4a:8b:d6:9f:95:c2:
49:b4:78:be:0d:a0:3a:68:0b:fc:e1:bb:46:c9:53:
36:f0:44:ac:e5:48:27:41:c4:e3:01:d4:4b:48:14:
12:50:2d:67:e3:78:1d:95:e7:d9:c1:7b:ae:a4:cf:
03:d7:45:6c:0b:4d:66:a1:72:eb:d9:d4:d8:e0:80:
85:47:5d:e5:a0:68:9d:c5:e8:d3:88:03:77:dd:80:
51:e7:7a:1c:78:20:c2:ba:f3:b9:53:54:df:98:17:
08:77:ee:b8:fc:fd:e5:81:ab:ea:5d:17:9a:a4:b1:
34:97:41:19:b8:ab:07:08:69:37:f1:3c:24:e2:b9:
49:54:3d:b0:0e:51:68:21:0d:a0:88:80:78:6e:32:
7a:ca:93:1a:0d:70:d5:d4:16:3f:18:e6:98:3b:c2:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:08:0B:ED:5D:E5:1E:2E:C7:7A:7C:86:30:A1:83:A4:12:43:CE
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a9:c5:86:72:e2:91:92:5b:2a:e2:5b:1c:48:e7:66:70:92:
62:95:dd:29:eb:09:b8:3e:6f:7a:75:15:51:36:57:bd:e6:b1:
74:81:1d:98:fc:39:45:ec:db:8a:2b:65:4f:cc:00:95:f9:09:
dc:cd:86:c5:e6:d4:f9:68:75:ed:0a:a7:20:d3:63:b9:15:3a:
38:e3:08:25:f9:82:3a:51:e9:56:73:40:87:3e:f5:c4:af:7e:
b3:83:bc:00:a7:8a:e9:a3:7d:69:c7:97:71:f7:8c:47:71:33:
b2:38:ca:a1:c2:f9:ef:23:0c:39:67:6b:75:d4:6e:30:fc:64:
e0:37:f7:5f:67:56:da:90:28:2c:6c:59:a1:2d:6a:fd:fc:64:
fa:b2:21:58:e3:42:18:a8:4a:44:e3:ea:33:6a:6c:ba:77:48:
ad:6a:6b:5a:0d:43:bc:41:8f:3c:9e:b8:a5:64:f8:08:5b:00:
03:ea:2b:81:b2:20:96:dc:70:b9:87:72:4f:70:aa:a7:a9:66:
b4:ad:7b:39:d0:16:fc:21:6b:be:bd:3a:8a:9c:be:81:8a:2e:
58:88:53:9b:85:9c:e1:59:91:26:3e:6e:45:24:c3:28:81:a4:
7a:57:63:3e:1a:ff:f1:21:a3:e8:ec:09:19:64:22:3a:e9:43:
2c:65:83:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KWaqUGNtOvcwUU4/29/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjJjNmZhNTRhOGNjMmRjNzFlODAyY2Y4M2Y1Yzc3NmNl
OTc0YzkwHhcNMjUwMTMxMDcwMDQwWhcNMjUwMjAxMDcwMDQwWjAzMTEwLwYDVQQD
EygyMTNmMDgwYmVkNWRlNTFlMmVjNzdhN2M4NjMwYTE4M2E0MTI0M2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5uES5dBegnkBEBS/oFr9K7h5LXU
tPFrPo5dIA5p7v1k4xEgUpUIPiOz8bbc/cJs6IZFkkG/kdMzHC0hMyetcgfoVdw8
0alBIXwrWeAPTE5OTp+FACJH5BEpdW3ln43s9BpKi9aflcJJtHi+DaA6aAv84btG
yVM28ESs5UgnQcTjAdRLSBQSUC1n43gdlefZwXuupM8D10VsC01moXLr2dTY4ICF
R13loGidxejTiAN33YBR53oceCDCuvO5U1TfmBcId+64/P3lgavqXReapLE0l0EZ
uKsHCGk38Twk4rlJVD2wDlFoIQ2giIB4bjJ6ypMaDXDV1BY/GOaYO8JtSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE/CAvtXeUeLsd6fIYwoYOkEkPOMB8GA1UdIwQY
MBaAFE3yxvpUqMwtxx6ALPg/XHds6XTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQt
OWUyNDNjMmQ4ODIxLzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQtOWUyNDNjMmQ4ODIx
LzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOanFhnLi
kZJbKuJbHEjnZnCSYpXdKesJuD5venUVUTZXveaxdIEdmPw5RezbiitlT8wAlfkJ
3M2GxebU+Wh17QqnINNjuRU6OOMIJfmCOlHpVnNAhz71xK9+s4O8AKeK6aN9aceX
cfeMR3EzsjjKocL57yMMOWdrddRuMPxk4Df3X2dW2pAoLGxZoS1q/fxk+rIhWONC
GKhKROPqM2psundIrWprWg1DvEGPPJ64pWT4CFsAA+orgbIgltxwuYdyT3Cqp6lm
tK17OdAW/CFrvr06ipy+gYouWIhTm4Wc4VmRJj5uRSTDKIGkeldjPhr/8SGj6OwJ
GWQiOulDLGWDkA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:43 2025 by rpki-client on console-fra.rpki-client.org