Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: PIPe6oBuDvWZTSp+eS9zbbzBCW+X1lAB4HqGAHEJ7GY=
Subject key identifier: C7:41:64:9C:43:78:BB:CD:95:D7:E3:16:54:66:83:76:6A:F6:25:07
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019683FF7808967B65ECFD06C9FC454DCDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 0E73
Signing time: Wed 30 Apr 2025 00:01:19 +0000
Manifest this update: Wed 30 Apr 2025 00:01:19 +0000
Manifest next update: Thu 01 May 2025 00:01:19 +0000
Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=)
2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=)
3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: B5FvNlKNgv+fPAQ+Gjc83lu4IMj9xqBtmdpCe/F5640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:78:08:96:7b:65:ec:fd:06:c9:fc:45:4d:cd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Apr 30 00:01:19 2025 GMT
Not After : May 1 00:01:19 2025 GMT
Subject: CN=c741649c4378bbcd95d7e316546683766af62507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:c9:73:f2:3e:90:a4:39:6f:e2:bb:6c:17:
96:23:b1:f3:38:5e:42:2e:92:fc:c3:bf:6e:9c:72:
63:52:65:e3:62:28:7e:03:2e:e1:1f:18:f7:b3:86:
f3:67:1b:3e:fa:40:ae:1d:32:d4:04:2e:fc:d1:81:
1a:66:46:9b:da:64:7b:ac:03:97:42:fd:0a:8a:58:
38:f2:2f:e0:d1:ae:7c:5c:dd:aa:bc:5e:a5:f4:9f:
72:04:bb:3f:cd:bd:de:a7:5d:99:16:36:61:84:d5:
29:04:4e:57:2f:39:68:87:46:ff:0f:bb:89:f3:82:
c1:ed:87:a8:69:76:8f:bc:db:98:c0:85:e5:d7:2e:
2b:93:f2:af:82:54:be:3d:db:f5:42:f5:72:d0:7c:
df:b3:76:cb:6c:07:85:9a:8a:64:dc:b7:a6:5d:f0:
a1:d7:70:65:4c:b6:ee:3e:4c:a0:44:6b:d1:23:f6:
c5:d7:94:77:91:4a:a7:49:41:f2:f9:f1:8a:fc:76:
c9:9a:b3:bb:81:11:59:57:89:64:f3:95:79:e8:c8:
7e:f5:fa:05:7a:f8:16:e8:87:54:0e:50:97:5d:c1:
7d:fc:5d:66:11:21:57:e2:a9:5a:8d:d7:20:5a:45:
ac:89:fb:da:0d:4b:bf:4f:bd:13:0c:2b:ee:60:fa:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:64:9C:43:78:BB:CD:95:D7:E3:16:54:66:83:76:6A:F6:25:07
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:84:da:b2:5b:fc:57:e5:37:86:9f:84:bc:09:94:0e:c8:88:
98:e7:bf:e7:49:3d:91:2c:1c:e4:59:8c:f9:a5:72:92:5c:a1:
9f:e4:b4:69:c4:f3:5e:fe:b1:2a:79:c7:b5:68:1b:f4:93:36:
ee:35:29:4f:13:3e:38:9c:91:19:1d:c0:58:0e:84:d9:fc:4c:
c5:ef:f6:09:a0:a6:09:5b:6a:80:05:27:43:db:b7:a2:c9:3b:
3d:57:08:b8:6e:b2:79:a7:4e:36:db:a3:f1:7b:7b:e1:7c:2c:
ba:1d:04:8b:6d:33:1d:be:ee:f5:80:c1:5a:d1:1c:40:de:67:
87:f9:96:3b:c9:7e:f4:ac:8e:bd:6d:9f:41:89:47:b4:c9:e3:
c7:8f:25:ed:18:df:7a:de:bc:d2:98:bb:49:bf:57:f4:3f:ec:
a7:33:d0:42:08:82:27:47:a5:a1:fd:6d:22:19:71:ac:1b:0a:
fa:94:76:90:83:27:c7:51:6b:4b:42:57:c8:46:05:53:27:b1:
ae:06:14:a2:1b:29:74:9d:29:e2:25:9b:c3:14:92:5d:69:1a:
29:0d:9c:50:fc:cd:27:16:c7:9e:fc:45:ee:79:0e:68:c0:bc:
9a:c8:64:70:57:3c:03:22:95:ea:fd:50:cf:24:1d:78:d8:a5:
fc:6e:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:35 2025 by rpki-client