Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: YOyRzDhvb1gcRUnccyfDIU2amkoIKOUF8nSlYxW+WRk=
Subject key identifier: A4:19:EE:5A:55:6C:EA:EB:82:75:89:A9:B9:0D:C6:40:30:7E:B9:7A
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 019679B1BDC0A513F3C2E066B7BD269B663F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 0F0B
Signing time: Mon 28 Apr 2025 00:00:13 +0000
Manifest this update: Mon 28 Apr 2025 00:00:13 +0000
Manifest next update: Tue 29 Apr 2025 00:00:13 +0000
Files and hashes: 1: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: 1SzoTvQ9rA0/ndItUHKow8nKz/wHaTPF7NnahSFzDi4=)
2: ebErOTcxF8x0HRmokQpD8A9P798.roa (hash: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:bd:c0:a5:13:f3:c2:e0:66:b7:bd:26:9b:66:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Apr 28 00:00:13 2025 GMT
Not After : Apr 29 00:00:13 2025 GMT
Subject: CN=a419ee5a556ceaeb827589a9b90dc640307eb97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:28:d9:cf:d8:d1:ca:af:2c:3b:b2:74:06:
56:da:7f:fd:fc:e1:d8:df:c0:bd:49:52:2a:25:f8:
08:db:7e:2d:78:db:95:96:c3:3b:0a:4f:a6:da:fe:
4e:7c:42:15:2c:10:73:a8:72:17:85:f1:f8:1f:3c:
2c:83:86:06:b1:dd:74:4c:13:02:44:1d:e0:20:43:
d5:10:72:b6:32:34:c8:58:b8:b6:3a:87:a0:41:17:
16:7b:cf:b9:92:3b:f9:d8:da:3a:27:d4:63:4b:e4:
0f:8e:53:ba:b9:bd:60:5e:2b:a1:48:35:07:03:77:
5c:fb:32:7d:36:49:6d:83:6f:dc:d8:5a:60:48:d8:
1f:64:34:8f:e0:96:0d:72:92:a8:25:d8:b1:4a:2d:
9b:ee:10:fa:2f:83:92:86:0f:84:c2:ed:9a:32:8f:
2d:bb:fb:83:24:94:62:58:f6:c2:cc:8e:19:be:3b:
bf:25:54:8e:56:d5:c6:ce:46:52:c7:3b:54:e7:9d:
ba:a0:ed:ec:e4:56:0b:2a:66:7c:6b:db:ca:31:37:
c2:2f:4d:fb:36:e3:5c:59:f9:85:84:dc:77:ac:eb:
5c:52:f9:08:38:73:c4:4d:88:6e:5c:c0:5b:9d:44:
e2:78:ea:44:3d:f6:3a:bf:82:a6:ff:f1:48:0a:c6:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:EE:5A:55:6C:EA:EB:82:75:89:A9:B9:0D:C6:40:30:7E:B9:7A
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1d:79:e5:22:f2:4b:f5:a3:8e:19:47:46:9a:1b:25:e2:5a:
c8:d8:13:60:d9:c5:ad:07:1b:be:28:1d:39:7b:89:74:2b:e2:
fd:0e:1e:81:da:81:1b:d8:c3:5a:dc:8f:78:6f:b7:52:58:81:
20:69:06:c3:af:9c:8b:79:05:d2:2e:59:8a:f4:f7:2e:1f:51:
57:ec:1b:e6:c5:ba:01:c7:5d:f6:d2:3b:42:97:16:c2:6e:06:
d8:81:05:f2:93:31:da:20:23:e2:7e:c0:c7:ae:0d:6f:b8:6e:
c6:9f:1d:ba:41:d5:c4:da:4e:fb:a9:81:40:6d:9b:91:94:e8:
df:a2:ae:75:e3:71:3a:3f:2f:cd:c9:aa:e8:31:ed:13:31:d5:
bd:8c:fa:a6:ce:80:11:8e:7e:b9:d5:c9:55:33:0e:f4:2f:23:
e4:97:04:ed:1a:ad:71:c2:68:a8:2c:41:0a:56:f5:54:a7:2d:
0b:fc:d4:6a:e9:ca:d5:4c:6e:36:29:b6:28:bf:6e:b3:2a:b0:
b7:67:77:4c:27:02:91:53:af:02:f7:eb:89:74:00:9a:36:34:
cd:ce:ea:03:bc:a8:09:91:2d:45:6b:e2:52:03:47:6b:4f:92:
83:43:8f:b2:29:dd:97:45:8e:ab:9c:f3:98:6b:de:54:9b:73:
6a:49:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:59 2025 by rpki-client