Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: Ru7X9y8CeHP62Whdm8R1D9V87NUr8vfc3yXDNoKsTGk=
Subject key identifier: 0A:B2:88:F6:0D:6E:5C:D6:E0:A5:5D:21:62:CF:01:8A:50:33:AC:BE
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 01968924DBAD52AC2572A4CE83E3F2E5F7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0312
Signing time: Thu 01 May 2025 00:00:16 +0000
Manifest this update: Thu 01 May 2025 00:00:16 +0000
Manifest next update: Fri 02 May 2025 00:00:16 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: ld920FXBA4KkSe4Yg0s/fm4F9niyEu0vPOyUFAr+b+Y=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:24:db:ad:52:ac:25:72:a4:ce:83:e3:f2:e5:f7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: May 1 00:00:16 2025 GMT
Not After : May 2 00:00:16 2025 GMT
Subject: CN=0ab288f60d6e5cd6e0a55d2162cf018a5033acbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:9c:74:ae:6f:1d:7a:c5:97:93:c0:c9:a3:
44:fe:a5:6e:d9:6d:77:26:46:c9:cd:2e:01:24:e0:
f1:6a:e3:6a:19:02:7e:f0:ee:7a:50:aa:35:1d:c3:
6b:1a:2e:d0:43:c9:7f:2f:a7:ce:d2:79:a5:8e:8f:
b0:d6:40:35:69:35:7e:39:41:09:9e:1d:3f:70:6b:
7f:a6:17:b5:b3:cb:36:d3:c9:27:06:32:ec:a5:a5:
a8:18:47:91:d5:91:47:6d:de:61:4c:f9:e5:16:c1:
01:2f:32:b3:65:c6:2d:f1:79:a5:7f:24:59:d5:f0:
3e:0c:27:e8:6d:eb:03:2e:3d:ec:0c:0c:3d:e6:38:
4b:30:91:6f:8d:76:7b:a0:fd:ea:15:0e:58:f4:08:
a7:03:1b:00:6d:1e:e3:ba:5b:ed:38:3b:78:c8:07:
ac:d1:85:7c:e2:63:5e:03:60:8e:53:bc:70:3f:86:
c0:27:51:ea:c9:c1:96:3d:e7:76:b0:69:07:c1:15:
c1:c7:2c:c5:29:0a:52:a2:71:31:a7:2e:c1:27:26:
8e:35:26:4c:46:7d:c2:9b:be:f3:11:e8:10:2c:94:
dc:43:54:91:80:29:63:d3:8d:9e:72:0e:36:1e:6e:
ad:83:1d:35:b4:a2:5d:e0:14:8f:bd:0e:1b:4e:00:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:88:F6:0D:6E:5C:D6:E0:A5:5D:21:62:CF:01:8A:50:33:AC:BE
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:08:44:73:a1:29:8e:ee:c7:9a:02:4f:9f:4b:59:20:9d:85:
30:b5:c3:dd:d0:0c:f0:07:d7:cd:7e:1e:92:33:41:d8:ef:08:
5b:1d:51:9e:4f:71:4f:b5:67:95:04:75:04:78:52:76:f2:37:
e1:1f:6d:50:07:04:d5:2f:3d:cc:c7:e5:97:e0:5a:85:42:bc:
46:26:5e:fb:23:ac:6b:fa:8f:2f:77:64:d9:52:41:35:de:6f:
e4:7a:36:4a:c3:27:04:01:97:a3:17:0f:63:1f:4d:50:d6:66:
cc:c8:5b:17:49:3a:db:40:3d:14:d2:7c:7a:e3:75:b8:ce:9f:
9e:a7:2a:14:ce:b8:73:30:52:51:13:35:d9:99:d3:3d:ea:90:
81:5b:3e:35:e7:eb:2e:9b:fb:ed:4e:25:ed:fe:c8:33:1a:d6:
d4:83:8d:8d:48:0b:6f:92:ea:a7:04:0a:fc:5d:19:28:9a:ae:
30:33:c3:9c:54:d2:df:a5:57:e6:0b:6b:0a:1e:08:fb:99:13:
d5:41:6f:19:94:92:e0:87:d6:57:52:8c:0e:dc:3e:ba:ca:a1:
92:78:4a:0e:a9:7a:94:74:ad:86:c2:72:af:d7:ed:0e:8c:6f:
e1:81:fe:5b:21:68:ab:fa:d0:c5:0b:ad:56:e3:5e:1a:27:85:
29:68:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:32:32 2025 by rpki-client