Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier: SkbGlumuzRcQNGgPeUJYZJDSfT0r/UCXFTgPYi/lr1M=
Subject key identifier: 4E:45:E4:72:0F:36:42:41:2C:83:F6:10:E2:FE:29:A3:FA:B5:91:24
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 01967BD798C19066EAAC710450BDF9BF536C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 10:00:48 +0000
Manifest this update: Mon 28 Apr 2025 10:00:48 +0000
Manifest next update: Tue 29 Apr 2025 10:00:48 +0000
Files and hashes: 1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: WYEb/P7mHMO69ZER13b8cTgqHPFKNRzsHAF0S5NRxdk=)
2: Vn0PoWq91day6d--kuy39s7CP5U.roa (hash: daOIdL4b5N4GukWwie8JBBD3OBe/sdcGSiKd1pWKhtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:98:c1:90:66:ea:ac:71:04:50:bd:f9:bf:53:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: Apr 28 10:00:48 2025 GMT
Not After : Apr 29 10:00:48 2025 GMT
Subject: CN=4e45e4720f3642412c83f610e2fe29a3fab59124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:0e:4f:ba:ba:a4:f6:2b:8a:48:6b:4f:a6:
fd:f7:5f:ae:48:68:5c:4a:d3:84:0b:ca:be:4a:b3:
d6:1a:f3:50:f3:fb:82:3c:9a:00:24:32:1e:b4:9f:
98:a9:a6:a0:0a:e4:dd:75:1e:b2:e6:14:e2:10:50:
3a:b3:2c:10:13:26:c7:b6:88:e2:27:4a:22:cd:65:
fd:ee:5b:86:08:24:15:cd:36:3f:15:a7:56:92:d4:
69:44:e0:5b:33:ed:3c:11:4f:27:72:df:be:9f:5d:
e6:6b:9d:52:36:ea:23:12:d1:c7:d1:ca:f2:07:4b:
7a:a9:9a:45:04:ac:54:55:bd:c5:e2:04:3f:ff:e1:
7d:66:a0:1c:64:86:54:55:c8:d5:53:00:2a:02:28:
97:b2:ee:3e:c9:44:10:91:9c:72:02:41:ed:9e:f6:
00:56:f4:77:30:a4:84:1e:47:e1:95:62:75:3e:5d:
b0:78:98:cf:4d:40:e8:7f:ee:38:84:83:1a:16:09:
fb:36:ac:8c:c9:3a:2b:bf:1f:f5:df:2a:18:86:96:
56:d9:61:6d:f6:83:ee:fd:41:1c:4b:4c:29:67:e0:
ea:e9:eb:41:09:1b:8b:74:73:c4:8b:8d:7e:06:72:
f8:4e:65:97:a5:0c:96:38:b3:8b:02:65:f1:d7:e1:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:45:E4:72:0F:36:42:41:2C:83:F6:10:E2:FE:29:A3:FA:B5:91:24
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:5f:95:b0:f6:38:61:93:d9:1f:ad:4b:39:3d:70:cd:68:
3a:f3:db:6e:d0:ee:63:ac:69:4a:02:bf:8d:fe:a1:45:34:2c:
56:c9:fe:77:86:7f:6e:b6:b5:5f:e7:c5:98:6d:bd:18:b9:62:
65:02:0c:41:8a:cf:07:b3:98:b6:bd:da:ec:02:c7:e1:f8:a4:
91:86:60:4f:b4:ce:d9:92:c9:52:05:df:71:50:35:5b:6b:d9:
ee:ba:43:da:f4:f8:88:6b:44:ec:b8:2c:1b:56:1a:b3:3a:98:
dd:af:37:46:ae:da:22:54:13:fb:cd:f0:fa:54:1f:22:21:25:
9e:92:14:64:c7:fc:60:1c:79:b6:2f:e1:50:f4:05:29:8a:26:
e2:0d:64:a7:9e:ab:53:0a:ed:4c:d4:42:60:82:13:b6:84:41:
56:61:66:47:57:44:25:54:5a:40:e0:95:1a:e5:2b:d6:de:9a:
73:77:53:02:c7:c2:76:0c:97:06:75:ea:ab:e8:89:96:19:f0:
f8:96:28:e5:40:b9:8d:c1:27:16:cf:49:50:43:fa:f1:7b:30:
f0:36:b6:60:a9:d9:27:a0:3a:06:04:80:e1:e3:96:af:c6:2d:
57:2e:7c:60:e8:5b:d3:f0:a9:5a:5e:c6:5f:e2:e2:61:af:c8:
a1:53:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:58:24 2025 by rpki-client