Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: T07K5Bq84Mllmts4ScZ11Tpcy1H+lYyxMvtVKnez5Ww=
Subject key identifier: A2:DC:93:A1:CE:04:A5:DD:17:A2:09:BF:8A:0A:BC:5A:2C:BB:51:C4
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019678691529BA840F8533C30FD95DE59BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1121
Signing time: Sun 27 Apr 2025 18:01:14 +0000
Manifest this update: Sun 27 Apr 2025 18:01:14 +0000
Manifest next update: Mon 28 Apr 2025 18:01:14 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: snN/ipfLVKhQWgIpwsuZgg2rXyq5QQkdjS+CmUpod7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:15:29:ba:84:0f:85:33:c3:0f:d9:5d:e5:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Apr 27 18:01:14 2025 GMT
Not After : Apr 28 18:01:14 2025 GMT
Subject: CN=a2dc93a1ce04a5dd17a209bf8a0abc5a2cbb51c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:9f:d0:e2:da:62:63:2d:3c:f1:05:f2:49:
65:ad:a6:3a:5f:03:bb:cd:15:b9:b5:fe:ec:e6:60:
de:24:48:08:2f:95:cb:97:8e:32:ad:93:af:15:09:
1a:9d:73:2c:18:75:c5:ca:b4:21:14:6c:a8:39:11:
44:a8:95:54:8d:66:9d:42:a8:eb:d7:ea:ac:ca:b6:
a7:f2:d2:15:c0:7e:1d:12:c9:3a:73:8e:b1:9e:f5:
4a:90:8e:de:bb:57:63:b2:d9:60:28:65:c1:02:c3:
a9:4f:11:78:34:8e:e5:a5:db:b9:2d:3e:f3:77:ce:
48:f5:f4:c3:6c:10:ae:f3:04:2c:1d:4f:8e:b8:60:
49:3d:5a:e0:8a:e1:c7:e3:32:19:9d:f7:07:f2:92:
47:ef:3c:03:51:bf:09:7a:c4:52:42:fc:80:63:1c:
71:ca:57:7c:23:9c:12:4d:70:e4:f7:1b:25:61:69:
9c:6f:74:04:9f:21:6c:41:6d:9b:89:dc:a1:32:fb:
2f:a0:a1:97:6e:38:b8:67:15:96:f1:3f:ff:28:c7:
7a:3b:87:51:c8:3d:06:58:72:d9:f4:99:67:81:31:
6c:b4:e3:8c:70:91:ba:55:8a:e6:32:0b:ac:c5:73:
38:42:25:79:a9:77:ac:71:fd:24:58:33:26:61:b5:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DC:93:A1:CE:04:A5:DD:17:A2:09:BF:8A:0A:BC:5A:2C:BB:51:C4
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:86:d4:f3:9f:2e:34:da:7d:59:d7:80:d5:32:bd:9f:03:d9:
5d:ca:4a:25:ae:0e:e1:82:b9:3e:21:6a:7d:11:63:88:03:c6:
de:f2:dd:40:2f:c7:7c:41:7c:91:0e:03:e4:7c:de:88:ca:a3:
1c:dc:41:57:96:73:4e:99:d1:8d:89:30:dc:99:a8:1a:57:ff:
87:78:77:48:70:01:b2:b7:a4:37:6e:30:aa:b3:0f:f9:04:79:
f3:82:e1:07:a1:d1:84:34:d0:13:b8:bf:44:84:1d:07:42:7d:
c4:9d:15:08:3c:11:fe:ad:6e:53:bc:97:f4:bd:8b:ca:d4:45:
71:83:a0:91:35:e8:e8:81:55:69:f4:a8:67:80:d9:b9:11:cf:
9a:6c:7c:f9:d2:6b:98:48:1b:44:c6:f1:ec:50:f5:3f:60:bf:
c8:04:38:28:7c:1d:a8:cf:f4:19:97:33:9b:a5:62:b7:ea:85:
ac:a1:5d:33:3b:10:dc:59:be:a7:b0:da:b6:f3:13:0c:53:97:
68:c4:ce:38:d0:e8:e7:55:3e:9f:1c:e8:99:d6:2d:81:e6:0d:
cf:9f:83:9c:d5:d8:12:05:b2:27:cb:1c:6e:49:27:54:43:f1:
d5:f8:fe:30:38:15:1b:e7:6d:96:26:ba:62:66:f8:47:dc:b7:
41:86:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:05:28 2025 by rpki-client