Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: +9A9Xx29E4y22ALxFBKgFP4c6t9Vo2Fzu8m/9G+zj0k=
Subject key identifier: 4C:30:5C:73:AE:CF:8D:F0:0B:89:31:98:78:4E:7F:61:45:51:73:9B
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 01967868F0526CAC805AC171C6CC2F0BD0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 18:01:05 +0000
Manifest this update: Sun 27 Apr 2025 18:01:05 +0000
Manifest next update: Mon 28 Apr 2025 18:01:05 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: OZJjeb0xsIEBEJZYuGFIOdE/U0RygqB7NaNd8xC/S0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:f0:52:6c:ac:80:5a:c1:71:c6:cc:2f:0b:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Apr 27 18:01:05 2025 GMT
Not After : Apr 28 18:01:05 2025 GMT
Subject: CN=4c305c73aecf8df00b893198784e7f614551739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:61:4a:da:7e:58:95:ce:84:dc:be:df:9f:
6d:bc:ef:2a:97:8b:21:55:ce:3d:cb:7b:13:e7:49:
93:10:6b:28:b4:56:a3:51:eb:f9:30:46:fc:66:9d:
ba:81:ce:c8:bc:a5:a7:b8:b0:54:5e:a5:23:bc:ba:
d5:a9:72:13:d3:b2:2c:12:40:cf:cb:ed:86:47:fd:
0e:35:c2:84:69:17:47:96:14:16:7d:b9:17:df:f4:
32:7b:a6:54:9f:f0:3a:47:6b:93:9a:c2:0b:18:6a:
2f:77:e6:0f:71:5a:a0:dd:0f:15:58:58:9d:a7:e3:
43:77:8f:e2:58:1e:93:1e:73:0e:fb:dc:57:b0:e4:
aa:09:af:b0:09:2f:18:bc:0a:eb:4d:6a:7d:31:9c:
c4:02:70:59:c9:7b:1a:83:10:a2:ea:28:34:ca:02:
bc:b1:71:f3:ee:12:d7:b0:46:4e:31:a5:95:3e:e4:
2e:59:cb:22:1c:03:dc:4f:67:22:d1:76:f0:e0:e1:
25:25:45:c2:6d:68:d2:f0:d5:d8:9a:65:40:5f:a6:
e6:8d:b4:00:14:5b:17:82:4b:c2:26:7c:b8:14:42:
5c:34:ff:9b:58:c1:9d:e7:06:f5:57:62:bb:da:1b:
19:ce:0a:91:51:be:6d:fb:78:22:b2:da:1c:e2:61:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:30:5C:73:AE:CF:8D:F0:0B:89:31:98:78:4E:7F:61:45:51:73:9B
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cb:31:a0:65:2a:53:d3:2a:19:c9:4d:d9:a7:64:99:28:8a:
38:f5:d7:c1:44:0b:64:d5:e7:1e:0f:2f:0f:74:e4:dd:03:80:
6a:a3:63:72:5b:09:84:6f:27:4c:62:f1:88:60:f1:e1:ff:6f:
7b:c6:52:92:dc:f3:cf:c4:90:ea:fe:29:9b:94:f5:a1:f6:a4:
e3:be:c9:15:8d:2c:a4:2e:04:fe:ec:8b:6c:49:af:33:22:80:
f6:59:df:7f:1f:c6:43:12:0a:8b:8f:02:7b:65:36:31:ff:7a:
b8:23:c3:90:72:b9:77:19:fd:b0:d2:e8:5f:47:85:63:50:11:
50:28:cb:5c:9c:b2:c1:88:ae:38:d4:fa:a0:a8:b9:e9:88:9f:
88:8d:25:4d:62:f1:66:46:1e:2d:d8:42:d7:6e:1f:f6:f6:1f:
e3:cd:33:1e:e1:f5:10:97:cf:a3:2c:cb:d8:1f:39:f8:8d:18:
a0:96:fb:9a:c9:8a:e0:b8:28:e2:2b:f6:90:4a:1c:6e:01:e3:
7c:89:5a:35:e6:e8:b4:ff:12:e3:23:19:51:84:02:eb:eb:f9:
4f:29:33:f3:85:73:17:b1:8f:ff:83:ac:50:5c:bc:55:af:61:
b5:a6:69:3a:69:18:3f:a8:b6:5c:42:60:3f:c5:16:27:e9:83:
08:36:c0:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aPBSbKyAWsFxxswvC9DfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZmNjN2UwMTdjMmM5Zjc2MzJkYTcyOTM0NzZiYjdlNGEz
MDM2NWEwHhcNMjUwNDI3MTgwMTA1WhcNMjUwNDI4MTgwMTA1WjAzMTEwLwYDVQQD
Eyg0YzMwNWM3M2FlY2Y4ZGYwMGI4OTMxOTg3ODRlN2Y2MTQ1NTE3MzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthFhStp+WJXOhNy+359tvO8ql4sh
Vc49y3sT50mTEGsotFajUev5MEb8Zp26gc7IvKWnuLBUXqUjvLrVqXIT07IsEkDP
y+2GR/0ONcKEaRdHlhQWfbkX3/Qye6ZUn/A6R2uTmsILGGovd+YPcVqg3Q8VWFid
p+NDd4/iWB6THnMO+9xXsOSqCa+wCS8YvArrTWp9MZzEAnBZyXsagxCi6ig0ygK8
sXHz7hLXsEZOMaWVPuQuWcsiHAPcT2ci0Xbw4OElJUXCbWjS8NXYmmVAX6bmjbQA
FFsXgkvCJny4FEJcNP+bWMGd5wb1V2K72hsZzgqRUb5t+3gistoc4mFVqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwwXHOuz43wC4kxmHhOf2FFUXObMB8GA1UdIwQY
MBaAFEz8x+AXwsn3Yy2nKTR2u35KMDZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2Mt
M2FkZjliNjEzNDdkLzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2MtM2FkZjliNjEzNDdk
LzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8sxoGUq
U9MqGclN2adkmSiKOPXXwUQLZNXnHg8vD3Tk3QOAaqNjclsJhG8nTGLxiGDx4f9v
e8ZSktzzz8SQ6v4pm5T1ofak477JFY0spC4E/uyLbEmvMyKA9lnffx/GQxIKi48C
e2U2Mf96uCPDkHK5dxn9sNLoX0eFY1ARUCjLXJyywYiuONT6oKi56YifiI0lTWLx
ZkYeLdhC124f9vYf480zHuH1EJfPoyzL2B85+I0YoJb7msmK4Lgo4iv2kEocbgHj
fIlaNebotP8S4yMZUYQC6+v5Tykz84VzF7GP/4OsUFy8Va9htaZpOmkYP6i2XEJg
P8UWJ+mDCDbAgQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:20 2025 by rpki-client