Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier: a1MQk6ewfeHghDlSbgAyebP2mM7tMMNi5SDyy2vwZl8=
Subject key identifier: 46:75:6B:08:16:EF:40:63:77:EA:FD:4C:3C:40:14:1E:C2:24:BD:7F
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial: 01967BD83F8E60E433217E10AA0A67734135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number: 149E
Signing time: Mon 28 Apr 2025 10:01:31 +0000
Manifest this update: Mon 28 Apr 2025 10:01:31 +0000
Manifest next update: Tue 29 Apr 2025 10:01:31 +0000
Files and hashes: 1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: cxGmIKSpWyg5BGy3EXxaBow9EAoA6ngkfxfBIczjBHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:3f:8e:60:e4:33:21:7e:10:aa:0a:67:73:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Validity
Not Before: Apr 28 10:01:31 2025 GMT
Not After : Apr 29 10:01:31 2025 GMT
Subject: CN=46756b0816ef406377eafd4c3c40141ec224bd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b2:b1:9c:6b:d9:7f:75:5d:78:2c:4e:7f:77:
96:fb:46:9d:86:9b:b9:b6:df:be:8b:1e:14:c4:69:
59:a2:5e:a0:ee:2a:15:c4:bf:ae:80:94:eb:b1:5c:
08:9c:72:7c:78:2e:73:e7:3b:e5:91:4a:94:7a:4f:
cf:1e:85:77:c7:b3:5a:39:ae:9d:79:74:5d:9f:23:
e7:99:84:39:15:79:1d:27:92:25:b7:7d:39:88:c6:
4b:ac:af:99:2c:b2:47:b6:c9:4c:1b:ee:0d:70:0f:
a4:ab:cf:24:cc:94:42:47:08:44:36:a6:8f:b3:7b:
4a:91:e5:1d:a0:5b:1d:d4:7a:81:9c:59:ef:4d:30:
a7:5b:95:3b:f9:71:51:07:0a:fd:ba:42:c9:c4:fb:
d4:27:1b:59:8c:29:72:b7:ab:ad:74:3d:2e:55:4b:
02:9d:60:ce:29:90:64:d8:18:6e:01:7e:2e:4c:69:
7f:33:a9:e9:07:51:0d:94:ed:fc:25:92:cb:a3:d8:
20:ae:88:79:73:09:9e:f5:1f:f7:28:ad:8f:e1:96:
16:66:5c:a9:50:eb:c1:61:9f:ad:0f:38:84:58:fb:
ef:42:36:fc:b5:ab:2f:b8:82:27:57:0a:1e:2f:ff:
cb:cb:6a:a6:bb:30:10:d0:0b:c8:14:af:56:a5:c0:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:6B:08:16:EF:40:63:77:EA:FD:4C:3C:40:14:1E:C2:24:BD:7F
X509v3 Authority Key Identifier:
keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e0:65:f9:c5:d2:e9:f5:92:91:0c:6c:60:f9:2e:87:8c:08:
7e:e8:59:0a:ed:af:96:13:68:11:13:36:55:99:de:29:fc:aa:
e0:08:d3:13:25:17:16:c5:24:47:93:dd:9d:4f:c0:27:24:7d:
9c:9d:52:38:fb:72:d0:30:77:30:b5:64:2e:ed:34:8c:e1:81:
3b:e9:56:12:0b:81:24:78:4b:19:36:6e:c9:8a:69:2a:a1:9b:
78:4d:fd:37:2c:ee:92:72:aa:da:ce:22:32:76:8b:b5:ac:49:
a7:1d:6a:4e:e1:64:7d:55:4c:05:eb:63:85:b5:c8:a5:af:03:
b6:2c:a1:ed:aa:fb:08:b7:d3:9e:a6:8f:ea:52:20:2a:18:09:
1c:eb:95:d2:a4:64:b2:0b:a9:91:4f:e2:50:51:72:b8:1b:3a:
ac:63:07:63:49:33:a8:b8:ec:f8:56:2a:56:04:3b:81:86:50:
a7:6e:58:d9:35:1c:95:35:27:32:55:d6:77:34:73:36:a2:0c:
27:5c:99:0b:a8:fa:63:73:30:0e:f5:60:22:ec:6c:59:81:bd:
a4:f8:83:41:02:77:db:1a:7a:60:ac:6c:8d:cc:56:c5:03:5c:
f6:5c:26:ba:56:33:b1:c7:d1:20:a6:5e:5c:cf:90:e7:b6:37:
d0:b9:d2:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ72D+OYOQzIX4Qqgpnc0E1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjBiZTliNTdiMjViMWVkYTNmODEwOTJlMDBiNDUzOGJl
OGIyOWQwHhcNMjUwNDI4MTAwMTMxWhcNMjUwNDI5MTAwMTMxWjAzMTEwLwYDVQQD
Eyg0Njc1NmIwODE2ZWY0MDYzNzdlYWZkNGMzYzQwMTQxZWMyMjRiZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57KxnGvZf3VdeCxOf3eW+0adhpu5
tt++ix4UxGlZol6g7ioVxL+ugJTrsVwInHJ8eC5z5zvlkUqUek/PHoV3x7NaOa6d
eXRdnyPnmYQ5FXkdJ5Ilt305iMZLrK+ZLLJHtslMG+4NcA+kq88kzJRCRwhENqaP
s3tKkeUdoFsd1HqBnFnvTTCnW5U7+XFRBwr9ukLJxPvUJxtZjClyt6utdD0uVUsC
nWDOKZBk2BhuAX4uTGl/M6npB1ENlO38JZLLo9ggroh5cwme9R/3KK2P4ZYWZlyp
UOvBYZ+tDziEWPvvQjb8tasvuIInVwoeL//Ly2qmuzAQ0AvIFK9WpcDGOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZ1awgW70Bjd+r9TDxAFB7CJL1/MB8GA1UdIwQY
MBaAFLcgvptXslse2j+BCS4AtFOL6LKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEt
YTEwNTZmNTg5MzU0LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEtYTEwNTZmNTg5MzU0
LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+Bl+cXS
6fWSkQxsYPkuh4wIfuhZCu2vlhNoERM2VZneKfyq4AjTEyUXFsUkR5PdnU/AJyR9
nJ1SOPty0DB3MLVkLu00jOGBO+lWEguBJHhLGTZuyYppKqGbeE39NyzuknKq2s4i
MnaLtaxJpx1qTuFkfVVMBetjhbXIpa8Dtiyh7ar7CLfTnqaP6lIgKhgJHOuV0qRk
sgupkU/iUFFyuBs6rGMHY0kzqLjs+FYqVgQ7gYZQp25Y2TUclTUnMlXWdzRzNqIM
J1yZC6j6Y3MwDvVgIuxsWYG9pPiDQQJ32xp6YKxsjcxWxQNc9lwmulYzscfRIKZe
XM+Q57Y30LnSiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:56:09 2025 by rpki-client