Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File: TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier: p4yETMqZFrFgaJf1zpm0oiLBoeoyFR6IFIAOySksEFA=
Subject key identifier: F0:15:3D:73:F1:EC:E2:EE:8E:78:83:3A:8E:8D:85:C1:E2:44:20:B4
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer: /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial: 0196839135E1164E2F89F8D26005894D59F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 22:00:53 +0000
Manifest this update: Tue 29 Apr 2025 22:00:53 +0000
Manifest next update: Wed 30 Apr 2025 22:00:53 +0000
Files and hashes: 1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: +SgKMP2XaWyihCxyGyJaNZCvnJyYUx3its1rS0S/40Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:35:e1:16:4e:2f:89:f8:d2:60:05:89:4d:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Validity
Not Before: Apr 29 22:00:53 2025 GMT
Not After : Apr 30 22:00:53 2025 GMT
Subject: CN=f0153d73f1ece2ee8e78833a8e8d85c1e24420b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:2d:74:82:32:26:6e:c7:a8:d9:92:be:79:
62:fe:37:24:b6:d2:bc:8c:86:e9:0b:15:38:47:9e:
2d:98:27:14:d9:39:f1:d8:f5:82:d5:f7:77:ec:29:
57:cb:73:24:b5:fe:06:d9:b1:cc:68:7f:9e:56:02:
53:9c:75:bc:6d:f8:f9:1c:19:ca:1f:67:c3:56:09:
35:7c:46:e0:f5:ba:0b:0c:8e:75:30:1e:37:92:97:
ab:42:63:98:87:97:6b:2c:ff:8f:75:70:31:c6:0e:
95:e0:75:cb:31:77:69:1b:61:8f:47:5e:76:24:a8:
38:3b:ae:ef:be:33:5f:d1:e7:79:5f:ae:e9:a2:69:
4b:a8:52:64:8c:78:1e:db:77:16:78:3f:e8:b0:ae:
84:e4:e4:54:04:8a:9e:b0:bb:6d:3c:df:06:26:79:
7e:24:74:66:6c:c0:40:bc:cf:a9:c0:b6:fd:92:e8:
78:16:8c:f8:51:a5:f8:9f:8b:bf:6c:71:9d:00:f5:
54:74:f7:a3:44:0c:7e:98:60:c2:c8:e4:61:02:c2:
da:c5:58:cf:ee:33:f5:ca:75:a0:0e:e3:4f:87:26:
1d:f1:aa:2c:8c:37:b2:33:88:8c:70:72:d1:9a:50:
ba:aa:e9:9a:05:e8:83:bd:65:98:36:9c:37:50:e6:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:3D:73:F1:EC:E2:EE:8E:78:83:3A:8E:8D:85:C1:E2:44:20:B4
X509v3 Authority Key Identifier:
keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b7:ce:c3:76:e9:d5:a1:b7:f5:8d:f5:72:d1:f9:b6:b8:4d:
b9:e8:f1:a0:0d:2f:3b:c8:2c:58:9d:02:19:c4:f5:2b:6f:c7:
25:20:72:80:1a:14:de:29:43:30:b4:c0:b7:89:71:7f:18:3e:
6e:30:19:72:ab:dc:72:c7:01:92:d9:32:82:81:1f:d6:16:eb:
bf:30:8c:0c:d0:c0:7c:c8:39:b0:0f:83:38:f9:63:00:ab:e8:
de:5d:87:2c:4f:8f:6d:94:24:40:c2:17:94:20:34:a1:1e:7b:
d1:ef:f4:14:d5:41:20:2d:7f:e6:83:06:c6:ad:48:81:b4:02:
d5:66:1d:cf:e7:fa:46:49:a2:c2:c3:5e:50:cc:52:32:6a:b9:
84:56:a7:e9:2f:ec:a3:9e:c6:0e:57:43:af:35:31:54:5a:a0:
2f:0c:50:74:87:f0:9f:93:3e:71:38:ba:f2:dd:5e:c5:b0:fb:
0e:81:20:c9:e1:32:6d:72:7b:9f:99:25:66:01:71:93:3b:da:
b7:8c:6b:f7:37:55:39:f0:40:e1:95:6f:ef:fa:65:ab:52:4b:
6a:b0:27:7f:8e:e3:2f:66:fa:66:b3:76:c0:f1:f6:63:4f:7d:
e1:a7:1c:28:b4:43:87:a2:e6:04:0e:60:df:63:b0:fe:dc:82:
f3:5d:8f:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkTXhFk4vifjSYAWJTVnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZjYwZmZkMTBiYmY3N2VjZTk4YTc4MTYzNTk4NDQ0Mjc3
ZGJmYTQwHhcNMjUwNDI5MjIwMDUzWhcNMjUwNDMwMjIwMDUzWjAzMTEwLwYDVQQD
EyhmMDE1M2Q3M2YxZWNlMmVlOGU3ODgzM2E4ZThkODVjMWUyNDQyMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPEtdIIyJm7HqNmSvnli/jckttK8
jIbpCxU4R54tmCcU2Tnx2PWC1fd37ClXy3Mktf4G2bHMaH+eVgJTnHW8bfj5HBnK
H2fDVgk1fEbg9boLDI51MB43kperQmOYh5drLP+PdXAxxg6V4HXLMXdpG2GPR152
JKg4O67vvjNf0ed5X67pomlLqFJkjHge23cWeD/osK6E5ORUBIqesLttPN8GJnl+
JHRmbMBAvM+pwLb9kuh4Foz4UaX4n4u/bHGdAPVUdPejRAx+mGDCyORhAsLaxVjP
7jP1ynWgDuNPhyYd8aosjDeyM4iMcHLRmlC6qumaBeiDvWWYNpw3UOZc6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAVPXPx7OLujniDOo6NhcHiRCC0MB8GA1UdIwQY
MBaAFE72D/0Qu/d+zpingWNZhEQnfb+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYt
NTJmNTc1M2ZjM2JlLzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYtNTJmNTc1M2ZjM2Jl
LzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLfOw3bp
1aG39Y31ctH5trhNuejxoA0vO8gsWJ0CGcT1K2/HJSBygBoU3ilDMLTAt4lxfxg+
bjAZcqvccscBktkygoEf1hbrvzCMDNDAfMg5sA+DOPljAKvo3l2HLE+PbZQkQMIX
lCA0oR570e/0FNVBIC1/5oMGxq1IgbQC1WYdz+f6RkmiwsNeUMxSMmq5hFan6S/s
o57GDldDrzUxVFqgLwxQdIfwn5M+cTi68t1exbD7DoEgyeEybXJ7n5klZgFxkzva
t4xr9zdVOfBA4ZVv7/plq1JLarAnf47jL2b6ZrN2wPH2Y0994accKLRDh6LmBA5g
32Ow/tyC812PYg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:40:47 2025 by rpki-client