Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: OxPFNVFtnPcajTJyObnUnAxCPW44bJjzAEeeRVTQvEg=
Subject key identifier: C4:F3:24:34:6B:03:3C:EF:BD:30:07:4A:99:A7:C1:95:59:C4:99:B6
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 0196789F1F1AF7762B5CD3182AA409EEAE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 0F37
Signing time: Sun 27 Apr 2025 19:00:16 +0000
Manifest this update: Sun 27 Apr 2025 19:00:16 +0000
Manifest next update: Mon 28 Apr 2025 19:00:16 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: BxMD/jVjDjI9EloPwgD+jHe3UQc9lao6O5dl4GvJUfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:1f:1a:f7:76:2b:5c:d3:18:2a:a4:09:ee:ae:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Apr 27 19:00:16 2025 GMT
Not After : Apr 28 19:00:16 2025 GMT
Subject: CN=c4f324346b033cefbd30074a99a7c19559c499b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:4a:68:ad:7a:13:67:ef:5c:2d:20:2b:01:
6c:23:1d:bc:b2:9f:ae:57:b9:ba:54:74:1b:2f:eb:
e2:43:a8:79:70:cf:0a:97:d0:0e:6c:06:f5:b1:ab:
14:10:cf:8d:1a:74:8a:22:b0:63:97:5a:15:d5:d8:
3e:a4:8c:c5:74:35:b3:b2:9e:14:1d:09:55:21:00:
76:d7:cf:26:1c:2a:06:39:55:cf:b0:4b:57:4d:99:
90:57:d5:b7:78:87:83:11:4e:b2:bd:18:cb:60:6e:
d3:44:5e:be:88:5a:8e:f4:32:0f:61:52:7c:d8:6d:
63:33:46:8a:68:48:b1:21:d4:1c:ee:c3:62:96:2c:
45:53:63:89:04:63:90:36:bf:53:e5:08:36:a7:0c:
3a:0e:81:d6:77:0f:39:c3:75:4a:f6:2e:a0:44:cc:
b5:ca:0d:c5:a0:cf:3c:23:12:61:a2:8f:30:84:d2:
70:4c:b0:9a:d8:6f:f8:cd:5f:fc:a6:24:af:06:68:
7f:0d:ef:38:26:3c:ca:6a:64:5c:0a:b4:6c:a9:5e:
9d:89:1c:f1:7d:a1:67:c5:9e:0c:db:97:06:a8:ee:
e4:df:76:a5:98:ef:1c:95:54:89:57:1d:c5:b6:72:
e3:5f:6f:0f:56:81:20:3d:69:73:3a:94:4b:12:ed:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:24:34:6B:03:3C:EF:BD:30:07:4A:99:A7:C1:95:59:C4:99:B6
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:30:1e:f2:bd:80:27:3b:5a:f4:ad:9b:7c:99:ef:ed:08:
50:cd:1d:79:e4:08:05:03:71:0c:2e:51:58:8e:bc:31:9a:33:
78:de:ba:75:8c:a1:02:e8:95:e5:36:5c:a5:83:5d:6f:98:58:
65:e7:02:db:bf:ab:9c:a4:9c:28:94:c0:0a:6a:28:fc:5a:75:
e5:a5:64:1c:fe:b5:d4:c0:47:2a:63:b6:ac:b8:09:b2:ae:4b:
47:c9:39:20:f4:ce:bd:5a:94:de:06:b5:50:f9:83:17:47:6c:
e7:18:24:0b:64:91:c9:d6:e4:a2:0d:d5:82:0f:1b:c4:b3:59:
69:63:19:f8:7f:f0:e8:35:65:cc:1f:e8:44:c4:5f:09:2d:c5:
76:ec:80:36:d3:df:ed:71:2e:8b:50:eb:58:38:c9:1f:3d:1f:
78:c9:64:d3:80:7c:20:9c:57:51:64:89:63:01:56:03:88:41:
02:4d:d4:f9:b0:47:d3:3b:dc:85:ae:5b:dd:48:04:23:92:71:
05:2b:fb:42:80:db:eb:13:de:37:de:b8:1e:53:83:0e:78:c8:
11:48:8e:12:a0:af:e5:de:53:fa:74:cc:5f:2d:c6:79:ec:5f:
35:83:22:05:fa:01:40:3a:22:84:40:9d:05:ce:14:e1:f1:e4:
db:e2:46:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4nx8a93YrXNMYKqQJ7q4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4
NGQ2NjAwHhcNMjUwNDI3MTkwMDE2WhcNMjUwNDI4MTkwMDE2WjAzMTEwLwYDVQQD
EyhjNGYzMjQzNDZiMDMzY2VmYmQzMDA3NGE5OWE3YzE5NTU5YzQ5OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvNKaK16E2fvXC0gKwFsIx28sp+u
V7m6VHQbL+viQ6h5cM8Kl9AObAb1sasUEM+NGnSKIrBjl1oV1dg+pIzFdDWzsp4U
HQlVIQB2188mHCoGOVXPsEtXTZmQV9W3eIeDEU6yvRjLYG7TRF6+iFqO9DIPYVJ8
2G1jM0aKaEixIdQc7sNilixFU2OJBGOQNr9T5Qg2pww6DoHWdw85w3VK9i6gRMy1
yg3FoM88IxJhoo8whNJwTLCa2G/4zV/8piSvBmh/De84JjzKamRcCrRsqV6diRzx
faFnxZ4M25cGqO7k33almO8clVSJVx3FtnLjX28PVoEgPWlzOpRLEu3qOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTzJDRrAzzvvTAHSpmnwZVZxJm2MB8GA1UdIwQY
MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct
YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0
LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYUwHvK9
gCc7WvStm3yZ7+0IUM0deeQIBQNxDC5RWI68MZozeN66dYyhAuiV5TZcpYNdb5hY
ZecC27+rnKScKJTACmoo/Fp15aVkHP611MBHKmO2rLgJsq5LR8k5IPTOvVqU3ga1
UPmDF0ds5xgkC2SRydbkog3Vgg8bxLNZaWMZ+H/w6DVlzB/oRMRfCS3FduyANtPf
7XEui1DrWDjJHz0feMlk04B8IJxXUWSJYwFWA4hBAk3U+bBH0zvcha5b3UgEI5Jx
BSv7QoDb6xPeN964HlODDnjIEUiOEqCv5d5T+nTMXy3GeexfNYMiBfoBQDoihECd
Bc4U4fHk2+JG2g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:06:28 2025 by rpki-client