Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: kZK+Qa5r84djlPd98+2OQcprlBZT0b/EKBCA/D6NH/Y=
Subject key identifier: 19:F4:08:D0:0A:80:0A:F5:22:90:82:77:A2:09:F0:5F:F9:8D:B2:62
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 01967A577D653FF4A2CCE2EB70A7E3A3E87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 0606
Signing time: Mon 28 Apr 2025 03:01:15 +0000
Manifest this update: Mon 28 Apr 2025 03:01:15 +0000
Manifest next update: Tue 29 Apr 2025 03:01:15 +0000
Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: 0zA46qRzGi+FfcKDTVDsd0ljQYcdA0TDSG9im+1hk6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:7d:65:3f:f4:a2:cc:e2:eb:70:a7:e3:a3:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Apr 28 03:01:15 2025 GMT
Not After : Apr 29 03:01:15 2025 GMT
Subject: CN=19f408d00a800af522908277a209f05ff98db262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:60:5e:3d:da:92:36:ce:7c:a0:ed:2a:96:fd:
cd:39:c9:31:4c:e2:96:e7:b8:04:d2:a8:db:fd:9b:
90:c1:2d:07:28:14:05:04:63:02:65:40:b9:77:dd:
16:c7:b8:44:75:cb:68:5a:63:ff:2b:ca:32:a2:7e:
bf:78:c1:5f:2a:e6:60:71:cd:7b:97:10:97:b1:ac:
86:dd:0c:48:2b:40:f1:c1:fa:2c:4a:6a:f2:80:13:
32:85:00:c5:a0:84:02:27:dc:95:0a:ad:ac:a2:ea:
36:b9:49:d2:df:03:c6:9d:87:b4:c2:a4:c7:f2:3c:
67:0e:cc:2e:b9:a8:c7:64:60:16:98:fe:51:ca:5c:
48:9c:0c:49:dc:cd:c9:b4:ed:da:e6:37:82:81:9e:
59:49:5f:84:c5:fe:82:39:eb:72:36:9b:72:5f:fc:
3c:4b:a2:e3:4e:e2:86:99:18:b4:a8:8b:fa:5f:46:
dc:d3:70:de:d8:54:81:cb:d5:9d:32:a2:e1:ab:79:
ea:c3:d2:01:a5:7a:b1:80:34:93:7e:eb:c6:68:2d:
44:6b:89:c9:8b:e7:cb:86:ea:37:4b:7f:34:52:bd:
75:c3:3b:d2:3e:dc:bd:26:ee:37:c3:1e:d9:9f:d0:
98:9f:06:97:61:a9:f8:a8:b7:3c:5a:30:2e:d6:3c:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F4:08:D0:0A:80:0A:F5:22:90:82:77:A2:09:F0:5F:F9:8D:B2:62
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:ca:d6:46:90:5e:22:bd:d8:3e:a8:1f:14:a4:6b:b1:6c:
84:8b:92:fe:a6:48:0f:ee:87:2a:32:9f:81:79:f2:8e:1d:79:
ef:f3:7a:ef:e5:35:f2:1e:b6:50:af:53:de:99:bb:54:17:e7:
e7:3b:b6:1c:8f:a4:2b:48:2c:08:84:f4:b0:8b:5e:c8:58:41:
48:0f:96:5e:cc:39:c1:a5:29:f5:ef:da:e4:d2:c7:e7:ea:5e:
31:fc:07:ae:df:73:aa:84:8f:a0:6c:ed:c2:e1:21:44:cd:06:
4f:c6:ab:42:5e:f3:c7:26:40:98:9e:fb:cc:82:94:a0:7c:a4:
de:d9:ad:23:fb:e1:16:e0:ee:fc:6b:5a:b1:72:58:fa:8f:01:
f4:e3:03:0e:62:90:28:2a:78:fd:e2:ae:14:83:62:c8:a0:3e:
12:83:26:9d:87:27:f5:4f:6a:29:ba:a7:22:6e:16:8d:4b:14:
34:f7:be:54:c8:9b:f1:3e:45:64:af:31:9a:e8:fd:09:d0:56:
56:9e:a4:b0:24:d0:8c:36:d9:15:56:8a:9f:87:17:aa:05:6a:
6e:64:b3:24:06:b5:2e:95:74:00:ca:5b:2b:23:c6:96:ee:a6:
f7:54:9e:cb:e7:e4:f2:b0:96:5e:8d:28:b0:7a:92:5f:79:06:
24:81:2b:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6V31lP/SizOLrcKfjo+h8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm
NjcxNGYwHhcNMjUwNDI4MDMwMTE1WhcNMjUwNDI5MDMwMTE1WjAzMTEwLwYDVQQD
EygxOWY0MDhkMDBhODAwYWY1MjI5MDgyNzdhMjA5ZjA1ZmY5OGRiMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GBePdqSNs58oO0qlv3NOckxTOKW
57gE0qjb/ZuQwS0HKBQFBGMCZUC5d90Wx7hEdctoWmP/K8oyon6/eMFfKuZgcc17
lxCXsayG3QxIK0DxwfosSmrygBMyhQDFoIQCJ9yVCq2souo2uUnS3wPGnYe0wqTH
8jxnDswuuajHZGAWmP5RylxInAxJ3M3JtO3a5jeCgZ5ZSV+Exf6COetyNptyX/w8
S6LjTuKGmRi0qIv6X0bc03De2FSBy9WdMqLhq3nqw9IBpXqxgDSTfuvGaC1Ea4nJ
i+fLhuo3S380Ur11wzvSPty9Ju43wx7Zn9CYnwaXYan4qLc8WjAu1jwEHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn0CNAKgAr1IpCCd6IJ8F/5jbJiMB8GA1UdIwQY
MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt
ZDE5ODM5MjA2Y2U2LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2
LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAzK1kaQ
XiK92D6oHxSka7FshIuS/qZID+6HKjKfgXnyjh157/N67+U18h62UK9T3pm7VBfn
5zu2HI+kK0gsCIT0sIteyFhBSA+WXsw5waUp9e/a5NLH5+peMfwHrt9zqoSPoGzt
wuEhRM0GT8arQl7zxyZAmJ77zIKUoHyk3tmtI/vhFuDu/GtasXJY+o8B9OMDDmKQ
KCp4/eKuFINiyKA+EoMmnYcn9U9qKbqnIm4WjUsUNPe+VMib8T5FZK8xmuj9CdBW
Vp6ksCTQjDbZFVaKn4cXqgVqbmSzJAa1LpV0AMpbKyPGlu6m91Sey+fk8rCWXo0o
sHqSX3kGJIErNQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:09 2025 by rpki-client