Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: nAyM3Uq/8ABBubNg8ZeKV3qTJCQWDaIGIY0PXMbTngo=
Subject key identifier: C0:43:C2:CF:B3:D5:A0:2C:DF:B5:6E:82:9D:34:7A:D0:63:2B:33:9C
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 01967C4583B20D4F92A45B044FA97AA03590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0C57
Signing time: Mon 28 Apr 2025 12:00:52 +0000
Manifest this update: Mon 28 Apr 2025 12:00:52 +0000
Manifest next update: Tue 29 Apr 2025 12:00:52 +0000
Files and hashes: 1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: N+fXV9C7xVTPXXpu+imSL/DIr5ZAU+5GHMXvpbWx3wM=)
2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:83:b2:0d:4f:92:a4:5b:04:4f:a9:7a:a0:35:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Apr 28 12:00:52 2025 GMT
Not After : Apr 29 12:00:52 2025 GMT
Subject: CN=c043c2cfb3d5a02cdfb56e829d347ad0632b339c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:a0:9f:c2:6e:b1:58:40:87:97:fe:b5:14:
3c:2e:43:8f:97:78:a7:1e:7f:d9:c3:52:3e:40:0f:
18:89:9b:ad:30:a8:ad:61:6a:d9:7b:fd:34:0d:61:
a0:89:fc:ae:51:c8:8b:df:f3:3f:4a:31:d6:39:d0:
70:f2:69:2a:88:26:6f:16:f3:be:f0:a7:b9:4a:03:
c0:c9:7a:2d:cf:c0:20:52:e1:33:69:5d:e9:38:fc:
90:7b:69:b5:b6:ed:05:3c:0f:cc:d1:0c:64:a5:41:
a5:2a:06:87:85:06:37:fb:18:b8:13:f1:94:82:d8:
5e:b8:17:dd:2b:80:40:80:36:5d:a1:68:78:8f:f0:
ab:1a:d6:e3:c3:0c:66:41:da:36:e1:5a:4e:c6:8a:
8e:1b:5b:7e:ed:a5:f8:59:a9:2d:57:70:e5:cb:85:
a3:6a:f9:6f:58:f7:ec:e4:f5:66:7e:7d:9f:e2:1b:
86:4a:69:d6:43:ec:05:20:5f:ba:f7:83:5f:d5:9b:
10:b7:b1:49:cb:49:d7:04:1a:ba:d6:44:d5:42:5c:
01:18:ce:06:f6:b9:ee:50:c9:57:c7:30:9d:1c:4b:
31:59:3f:31:52:ad:d6:d4:fc:fa:10:88:d9:df:00:
11:9c:12:26:a0:ad:48:e6:f8:27:5e:76:72:cb:59:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:C2:CF:B3:D5:A0:2C:DF:B5:6E:82:9D:34:7A:D0:63:2B:33:9C
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c7:ad:78:48:4a:bb:a9:f0:a0:40:e3:61:a3:c6:f4:2c:8d:
da:02:c2:1a:ab:f2:2a:c3:2b:9b:2b:f2:8c:87:37:33:24:9e:
b4:61:69:04:37:cc:c5:4c:55:af:96:b2:d9:43:ea:24:0c:37:
61:90:9f:a1:9e:ed:c2:6b:16:dc:80:e5:fe:6f:fc:ca:73:f2:
f0:6a:96:6e:57:92:19:77:a8:cf:99:46:1d:20:af:3f:e3:93:
64:ff:d5:ed:43:53:68:73:42:f3:06:08:c5:21:43:0c:5c:04:
f3:e7:7b:a2:53:1b:e1:3e:13:9b:a7:b5:26:a9:9d:52:7a:c0:
43:bf:a3:c8:cf:3c:7a:13:1d:6f:99:9a:e2:88:6b:77:b8:c8:
f0:38:3a:0d:a8:4c:e8:f9:d8:2c:7d:5f:27:d9:e3:66:b7:5e:
e4:66:ed:c6:a0:83:bb:80:78:47:9b:d4:79:60:a6:3d:78:3e:
2d:60:60:a1:23:f5:a1:15:0f:a0:ea:07:14:fe:3e:cb:d6:c8:
7e:01:42:7f:f8:5b:32:31:9c:b3:2c:13:06:e4:5e:f2:3e:dd:
ee:93:35:cc:9a:54:2e:3c:2a:c2:1b:25:95:1c:ed:56:60:a3:
0e:01:05:1b:33:12:f2:f6:6e:b0:e2:ae:f6:c7:dc:76:be:be:
11:61:49:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RYOyDU+SpFsET6l6oDWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzNjMGUxNGQ1N2VhYmMzYjY1ZTM4YTc3MzZiZWJlNDkw
OTJlOWUwHhcNMjUwNDI4MTIwMDUyWhcNMjUwNDI5MTIwMDUyWjAzMTEwLwYDVQQD
EyhjMDQzYzJjZmIzZDVhMDJjZGZiNTZlODI5ZDM0N2FkMDYzMmIzMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHOgn8JusVhAh5f+tRQ8LkOPl3in
Hn/Zw1I+QA8YiZutMKitYWrZe/00DWGgifyuUciL3/M/SjHWOdBw8mkqiCZvFvO+
8Ke5SgPAyXotz8AgUuEzaV3pOPyQe2m1tu0FPA/M0QxkpUGlKgaHhQY3+xi4E/GU
gtheuBfdK4BAgDZdoWh4j/CrGtbjwwxmQdo24VpOxoqOG1t+7aX4WaktV3Dly4Wj
avlvWPfs5PVmfn2f4huGSmnWQ+wFIF+694Nf1ZsQt7FJy0nXBBq61kTVQlwBGM4G
9rnuUMlXxzCdHEsxWT8xUq3W1Pz6EIjZ3wARnBImoK1I5vgnXnZyy1mjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBDws+z1aAs37Vugp00etBjKzOcMB8GA1UdIwQY
MBaAFEwzwOFNV+q8O2Xjinc2vr5JCS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYt
YzFmZjA1NmZjNzZmLzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYtYzFmZjA1NmZjNzZm
LzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8eteEhK
u6nwoEDjYaPG9CyN2gLCGqvyKsMrmyvyjIc3MySetGFpBDfMxUxVr5ay2UPqJAw3
YZCfoZ7twmsW3IDl/m/8ynPy8GqWbleSGXeoz5lGHSCvP+OTZP/V7UNTaHNC8wYI
xSFDDFwE8+d7olMb4T4Tm6e1JqmdUnrAQ7+jyM88ehMdb5ma4ohrd7jI8Dg6DahM
6PnYLH1fJ9njZrde5GbtxqCDu4B4R5vUeWCmPXg+LWBgoSP1oRUPoOoHFP4+y9bI
fgFCf/hbMjGcsywTBuRe8j7d7pM1zJpULjwqwhsllRztVmCjDgEFGzMS8vZusOKu
9sfcdr6+EWFJ+A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:16:26 2025 by rpki-client