Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: 845DHgE8W8/bFXEyl9d9KHdlsu+CQL+AQ89f0AM19ao=
Subject key identifier: 2B:D3:ED:74:11:88:13:B4:48:3C:1B:C3:DA:8B:F0:88:15:43:3B:C0
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019677FAEDC10E3BEA123BC0DBF127CF2E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 096B
Signing time: Sun 27 Apr 2025 16:00:55 +0000
Manifest this update: Sun 27 Apr 2025 16:00:55 +0000
Manifest next update: Mon 28 Apr 2025 16:00:55 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: iiyO+nwZdL8U2quD+AA/cjHxHSZQox5lLdS4p57vx2I=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:ed:c1:0e:3b:ea:12:3b:c0:db:f1:27:cf:2e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Apr 27 16:00:55 2025 GMT
Not After : Apr 28 16:00:55 2025 GMT
Subject: CN=2bd3ed74118813b4483c1bc3da8bf08815433bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:81:b0:23:8a:47:13:d8:80:b8:09:93:8c:
4e:27:5a:61:3d:f9:05:41:75:c5:50:31:de:8b:d4:
3e:11:e4:a2:31:84:fb:6f:97:0b:b7:87:49:93:f2:
95:43:bf:ee:41:2c:a0:71:cc:bc:8f:24:46:8f:00:
ae:a3:10:04:8c:b1:3b:7a:15:44:43:b0:fe:f6:63:
17:fc:0d:32:39:2e:67:82:03:7c:10:ab:de:2f:af:
a9:3a:f0:6c:0c:06:aa:b9:74:a4:81:d4:ab:21:78:
c0:ae:10:8d:0a:5f:66:37:d2:06:3b:57:9d:13:1e:
d7:97:81:b1:0e:24:7f:92:34:f9:77:44:21:4d:a1:
93:c2:1d:e8:c5:60:da:4c:0b:f9:4f:0e:12:8c:2c:
5f:e3:3c:49:ed:4c:18:ac:24:92:75:2f:d0:40:b2:
da:ff:c3:9b:c3:0d:71:c9:4d:67:77:2f:c0:70:d4:
14:0b:78:54:4b:8d:08:4c:79:b7:ff:6a:ea:28:4a:
68:f3:e5:e4:9c:c0:e9:4e:25:48:6f:f5:ba:4d:34:
8d:c8:ec:26:2e:b0:ad:39:43:90:fa:eb:d8:5e:4e:
a8:70:a5:de:a4:4b:43:2e:b1:8c:9f:b6:ea:d7:ce:
d3:62:f5:03:e7:73:28:ad:86:9b:e0:8b:52:02:45:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:ED:74:11:88:13:B4:48:3C:1B:C3:DA:8B:F0:88:15:43:3B:C0
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:48:e2:cf:ea:09:d1:c2:62:f8:f0:43:ce:27:14:24:38:
f5:ca:69:02:47:c4:81:e1:82:ed:88:44:65:11:84:55:e5:5b:
11:5f:f9:06:3f:42:a3:ca:05:d1:1d:97:4f:a2:d8:2c:8a:d4:
43:17:8e:02:ac:77:42:25:19:07:5d:b4:fb:57:89:5e:bb:c8:
c6:e5:7e:eb:8c:2b:71:e4:59:02:02:f3:7c:35:6d:a2:e0:42:
f0:9f:02:d2:41:3f:bd:b0:c3:34:68:aa:f4:61:cf:b7:24:df:
a1:cb:3e:c2:09:ed:90:54:94:9f:18:94:80:39:40:7e:80:8a:
71:28:94:22:c6:9b:42:07:d8:98:68:7b:36:f3:0a:a4:54:39:
91:57:78:b8:1e:03:3b:86:ba:b7:1f:27:6e:aa:61:74:e0:c7:
43:70:2e:fe:c3:4f:56:c5:58:2a:4e:54:d4:56:f7:5d:02:47:
28:72:75:39:f7:5b:ab:88:0c:eb:4d:09:de:30:c3:31:5d:c7:
d6:b3:b0:15:ba:7a:86:4e:8f:df:c5:1e:1e:3c:42:46:60:3c:
ec:4b:66:af:32:2e:c4:b0:ee:b0:35:da:b4:9e:8c:56:cd:bf:
ff:e9:25:cc:84:9b:99:1a:d9:a6:01:08:9b:58:11:11:73:3b:
80:06:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:55 2025 by rpki-client