
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: BLhy/fAgC7J+nw9AlPoh73XljGT6mhNjYtttL3BQTZI=
Subject key identifier: 7E:34:21:02:84:79:AB:E9:35:26:28:6F:CA:B7:47:22:43:DB:4E:3C
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 0196748BB7A5A253DF469924E918E431200C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0939
Signing time: Sun 27 Apr 2025 00:00:35 +0000
Manifest this update: Sun 27 Apr 2025 00:00:35 +0000
Manifest next update: Mon 28 Apr 2025 00:00:35 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: Rlr2nnKRgsobyB9gst0nju2GqRuiuBGSAnmcekaCbPE=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:b7:a5:a2:53:df:46:99:24:e9:18:e4:31:20:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Apr 27 00:00:35 2025 GMT
Not After : Apr 28 00:00:35 2025 GMT
Subject: CN=7e3421028479abe93526286fcab7472243db4e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:a6:e7:c0:88:ac:87:83:b9:1d:01:2f:42:
8d:08:af:c7:d5:b1:d7:6d:dd:ce:9d:23:19:ed:24:
31:6c:13:af:1d:96:7d:a0:88:94:cc:7e:94:35:ea:
5e:eb:c4:bd:f8:46:65:99:58:4a:d5:6a:2d:f2:4e:
55:14:27:b0:11:08:ee:a2:99:aa:b8:27:92:e7:10:
48:02:11:b3:ae:89:06:fb:2a:51:3c:a7:fc:6e:f5:
4f:25:c0:2e:8d:8e:71:fc:e5:ea:4a:5b:b6:e1:7c:
b4:c3:c5:2e:50:34:f5:53:76:90:23:b9:0f:6c:e2:
75:75:56:57:e3:d7:76:12:18:04:15:cc:a1:e3:5e:
8d:2d:aa:69:7f:11:bc:c3:53:22:1c:05:37:21:77:
20:09:43:de:72:73:c1:24:1b:99:53:23:34:e7:66:
95:99:4d:f0:89:bb:20:5d:c0:ce:e4:30:15:74:b7:
44:e5:75:12:ee:d1:f2:82:52:ba:c8:cf:44:88:40:
67:1e:45:98:82:d4:a0:ac:88:80:f6:ce:6a:08:c2:
5d:6f:dc:40:84:2e:2d:f3:85:35:2e:7a:e8:d0:b4:
a8:40:e1:60:8f:3b:6f:04:e2:61:af:c2:37:38:03:
b1:1a:e8:5d:81:a9:4f:57:0b:21:ff:51:dc:84:f7:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:21:02:84:79:AB:E9:35:26:28:6F:CA:B7:47:22:43:DB:4E:3C
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a4:a3:c4:54:c0:70:56:e1:0d:52:5b:4a:0f:57:44:97:a3:
c5:97:2d:c8:15:1e:bc:91:71:f4:7a:34:76:97:ef:ec:4c:02:
fe:cb:c2:48:8e:97:e5:fd:4c:c7:4a:7c:04:1d:64:0a:e4:8c:
3b:71:16:e9:f9:bb:d1:84:dc:68:01:da:6e:bc:b9:36:ee:ed:
9a:d1:24:61:0b:f7:9e:d6:91:23:bd:df:97:61:16:d4:22:82:
57:1a:de:d2:90:28:15:90:08:96:db:36:e0:bd:8f:9d:8d:8d:
70:ec:4c:7f:47:55:99:70:a4:33:eb:aa:95:b8:af:9a:74:9a:
f6:c1:89:65:93:62:b0:0a:3e:82:03:91:c3:89:7c:5e:ea:cd:
c5:52:e3:83:a7:b9:44:9c:0d:a8:95:18:10:bd:17:f1:28:8a:
cb:73:5a:63:db:99:8b:8f:2e:e0:0c:8f:1c:e3:b0:70:7a:d3:
50:9b:be:2e:89:2f:5e:a0:14:6f:7d:a0:0c:a0:b4:63:1e:a7:
ba:ab:37:e1:11:b9:87:e0:ad:6a:f1:09:db:9b:83:70:b5:53:
ed:a3:ba:8a:29:b2:e7:88:38:6a:5d:c7:c3:b8:79:2a:b0:f6:
78:53:75:60:2e:a5:7e:20:62:ad:2f:ec:b7:c0:8a:22:ed:c0:
18:e7:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:07:22 2025 by rpki-client