Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: vaXa205Mr+GV/YC8hwrB2okjtr4SxH1b6XAXmMWA0QA=
Subject key identifier: 85:2D:FD:1B:3A:09:B8:DD:30:5C:C4:07:13:A0:9E:C5:54:24:14:38
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019679E92D17E1CA7DD097ED9DB04FB6951F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0771
Signing time: Mon 28 Apr 2025 01:00:46 +0000
Manifest this update: Mon 28 Apr 2025 01:00:46 +0000
Manifest next update: Tue 29 Apr 2025 01:00:46 +0000
Files and hashes: 1: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: ejb3hua15b0ehq46VniPK/wWgrQZUQPisReekOXKsrY=)
2: bMiFWbEVmjXACwoqhdLryOI7ecM.roa (hash: y4qa2SV/D4+dXjdntmc66BpYAvlL021xKDW12tsJ7Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:2d:17:e1:ca:7d:d0:97:ed:9d:b0:4f:b6:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Apr 28 01:00:46 2025 GMT
Not After : Apr 29 01:00:46 2025 GMT
Subject: CN=852dfd1b3a09b8dd305cc40713a09ec554241438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:6f:25:c2:f7:ea:22:38:ab:1a:e2:e1:49:
ba:6e:0f:58:a7:29:1d:9e:62:76:f8:f7:c0:f4:3b:
37:32:6c:72:97:ec:2b:b0:15:5e:9c:21:56:01:4d:
f2:d3:51:92:7f:48:48:3c:c0:c5:26:46:34:31:d8:
7a:37:a4:4e:d5:5b:0b:df:7a:90:bb:70:3d:54:57:
e6:3f:d0:50:30:88:73:5d:19:51:8b:8a:c3:0a:23:
49:df:83:92:47:5f:2a:29:48:ae:f8:97:a5:e0:e8:
ba:b5:64:bc:79:f5:9b:22:94:68:5c:14:9c:c3:11:
7d:92:60:02:4b:38:93:8e:64:21:71:6c:9e:14:c5:
85:2d:ea:fc:b5:9e:96:b1:6b:7b:ae:e2:bf:ad:13:
48:82:1a:0b:86:23:e6:ea:c9:75:63:23:9d:fa:51:
31:20:00:c6:27:ec:a3:fd:25:1e:0f:ab:4e:65:28:
05:ef:13:e4:af:1b:9b:a5:8b:c6:91:ee:ff:ab:44:
dc:be:9b:55:19:a4:b5:66:cc:e0:27:05:44:fd:a0:
a7:b5:10:71:d2:7c:59:a8:62:cb:e9:c0:94:97:0a:
e2:f4:05:de:79:af:d7:ca:f8:b9:5e:c6:a0:bb:ef:
df:c9:06:7a:eb:ff:b6:43:6f:a5:a0:cb:71:a4:67:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:FD:1B:3A:09:B8:DD:30:5C:C4:07:13:A0:9E:C5:54:24:14:38
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ea:62:72:7d:2d:c8:2b:e7:c4:b6:b8:d3:86:44:68:e2:1e:
2b:75:39:00:bb:c0:f3:55:e5:e7:58:d3:fc:e7:9d:2b:aa:5d:
b1:c6:82:8e:20:53:fc:11:cd:91:d8:87:58:4e:fd:3e:b2:fb:
c8:ff:df:56:a2:92:65:75:26:16:64:03:2d:9b:98:82:0e:19:
6b:53:c7:38:ff:fd:c8:f2:4c:eb:95:83:58:2d:4e:dd:f4:d3:
96:46:73:ff:3d:b6:5c:aa:2d:47:e4:e6:6e:aa:81:4e:38:b2:
f0:b1:27:bb:3f:d8:6c:36:e3:c0:2c:00:9c:c2:31:f4:d0:c8:
ed:aa:5b:bf:33:81:92:b6:90:7a:a1:55:9f:5f:65:d1:bf:ce:
e1:b8:49:0b:e8:99:b9:9f:46:85:db:79:4c:e5:cf:50:91:30:
17:b1:b6:5b:df:aa:b2:e8:89:20:46:63:ba:89:bf:1f:1f:0a:
00:d4:69:93:1b:7d:50:9d:f6:eb:ba:cf:ca:21:ff:db:41:d0:
ff:33:93:39:af:c3:92:fd:3f:38:43:22:5f:5e:c3:74:b4:0c:
58:f8:aa:ac:be:b2:48:95:a0:c2:65:a4:6b:7b:b0:78:f0:76:
e4:7a:59:fc:c6:82:26:cf:4c:a3:b6:29:c9:d9:68:98:7c:e3:
6e:75:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:30:18 2025 by rpki-client