Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: O2vm/oNBS6vcDAmXQhtomvQqA0x06Ik8Woijxx8nuNc=
Subject key identifier: 3B:AB:ED:DF:11:11:CE:D0:EF:35:1D:CB:9F:3C:98:F4:D9:22:95:55
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 0196767A0792E6A708F63CE3A5DFEDD40AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0C04
Signing time: Sun 27 Apr 2025 09:00:30 +0000
Manifest this update: Sun 27 Apr 2025 09:00:30 +0000
Manifest next update: Mon 28 Apr 2025 09:00:30 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: DB8KtfvInzUaGeLgTubeRRCAs+UHFig/1TJ+nD0WATM=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:07:92:e6:a7:08:f6:3c:e3:a5:df:ed:d4:0a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Apr 27 09:00:30 2025 GMT
Not After : Apr 28 09:00:30 2025 GMT
Subject: CN=3babeddf1111ced0ef351dcb9f3c98f4d9229555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:b8:97:67:fd:ba:6e:05:2b:c8:99:75:11:
1f:c7:6a:d0:94:0d:58:1c:f9:6b:23:37:65:17:66:
9c:61:05:44:fb:a2:55:2e:19:0f:90:be:12:f5:c0:
d2:93:19:c9:3e:0c:df:80:a1:38:32:a2:30:7f:5b:
c0:d7:12:aa:86:af:6f:42:1a:74:3f:c2:7d:2e:96:
13:2a:07:72:ad:a6:51:fa:34:16:fd:ac:58:64:40:
61:38:d4:8c:8d:d1:6a:73:ee:2b:a6:81:e4:6e:11:
4d:33:a4:00:18:2e:6b:4d:6b:ca:b5:eb:ed:f6:53:
69:51:72:1b:9e:e0:4a:fe:7d:dc:39:4a:02:a2:00:
4d:e6:90:00:5d:45:fe:2c:42:cb:03:a8:ba:f5:12:
57:79:86:b4:de:35:6e:86:be:cf:56:84:cd:8b:ae:
5b:f4:ee:94:92:ac:11:f0:08:68:c9:9a:d3:69:3f:
4d:68:0c:d3:1c:3c:94:ca:b9:57:12:f5:44:74:4f:
a9:f6:db:5d:9b:54:b3:e6:ec:0a:29:9b:bb:dc:c7:
b6:d9:07:bf:27:20:64:57:fb:55:58:c5:a6:df:42:
70:7c:24:2e:31:68:fa:0b:26:53:f4:a2:97:84:77:
82:3f:e5:86:72:b1:68:bd:14:7e:20:db:03:7c:d3:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:ED:DF:11:11:CE:D0:EF:35:1D:CB:9F:3C:98:F4:D9:22:95:55
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e5:59:54:16:b8:dc:65:77:db:70:27:9b:24:43:37:cc:18:
ab:30:0d:9a:43:b5:a8:12:09:1d:ad:3f:92:48:d2:6e:36:df:
6b:0d:f6:f2:d1:c3:c6:6e:3e:70:3f:19:77:ee:32:29:2e:4e:
41:38:bc:2c:7b:8f:4a:e3:ff:37:08:62:ae:50:11:54:aa:3c:
d7:3f:c2:d6:6d:b6:9e:f6:a9:8d:24:d0:55:23:82:4a:33:02:
1f:95:ad:dc:67:77:1a:54:38:65:45:7b:c5:34:13:ae:b5:12:
38:41:7c:bb:75:0e:b4:22:ef:48:eb:54:8a:8b:2a:fb:f8:fa:
cc:e7:3d:de:61:2f:d0:87:0e:a9:a4:08:cd:64:94:30:1c:39:
5a:2a:9d:9d:4e:6d:3d:28:83:5b:3e:43:31:12:75:c1:b6:59:
bf:80:17:8c:01:7c:f5:5b:52:cb:36:e3:e7:57:27:e0:61:1e:
3d:0c:99:d0:1e:40:a8:68:d0:65:4f:03:f5:14:b2:3c:8a:8c:
58:ab:ac:23:e4:b4:a3:4a:b7:97:ad:dc:20:e2:7c:c4:05:00:
05:57:aa:29:ac:54:5f:22:b8:f1:61:18:9e:75:88:a5:4e:81:
0c:af:88:07:46:6a:83:a2:2b:90:75:46:67:51:05:1c:c3:4a:
93:f7:00:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2egeS5qcI9jzjpd/t1AquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDQ3YjhiOGFhOWZiY2NjZmYzZDUwNzgxNGZjNzQ0NjRh
MmFiZjAwHhcNMjUwNDI3MDkwMDMwWhcNMjUwNDI4MDkwMDMwWjAzMTEwLwYDVQQD
EygzYmFiZWRkZjExMTFjZWQwZWYzNTFkY2I5ZjNjOThmNGQ5MjI5NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOG4l2f9um4FK8iZdREfx2rQlA1Y
HPlrIzdlF2acYQVE+6JVLhkPkL4S9cDSkxnJPgzfgKE4MqIwf1vA1xKqhq9vQhp0
P8J9LpYTKgdyraZR+jQW/axYZEBhONSMjdFqc+4rpoHkbhFNM6QAGC5rTWvKtevt
9lNpUXIbnuBK/n3cOUoCogBN5pAAXUX+LELLA6i69RJXeYa03jVuhr7PVoTNi65b
9O6UkqwR8AhoyZrTaT9NaAzTHDyUyrlXEvVEdE+p9ttdm1Sz5uwKKZu73Me22Qe/
JyBkV/tVWMWm30JwfCQuMWj6CyZT9KKXhHeCP+WGcrFovRR+INsDfNMvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDur7d8REc7Q7zUdy588mPTZIpVVMB8GA1UdIwQY
MBaAFEzUe4uKqfvMz/PVB4FPx0RkoqvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5Yzct
YmM0OGI0MWY0OThiLzEvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5YzctYmM0OGI0MWY0OThi
LzEvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+VZVBa4
3GV323AnmyRDN8wYqzANmkO1qBIJHa0/kkjSbjbfaw328tHDxm4+cD8Zd+4yKS5O
QTi8LHuPSuP/NwhirlARVKo81z/C1m22nvapjSTQVSOCSjMCH5Wt3Gd3GlQ4ZUV7
xTQTrrUSOEF8u3UOtCLvSOtUiosq+/j6zOc93mEv0IcOqaQIzWSUMBw5WiqdnU5t
PSiDWz5DMRJ1wbZZv4AXjAF89VtSyzbj51cn4GEePQyZ0B5AqGjQZU8D9RSyPIqM
WKusI+S0o0q3l63cIOJ8xAUABVeqKaxUXyK48WEYnnWIpU6BDK+IB0Zqg6IrkHVG
Z1EFHMNKk/cAgQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:12 2025 by rpki-client