Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: tovsYKr8oELNEEMtLt3CsdNbXmSon7uH0gq9j/cN4bg=
Subject key identifier: 59:DA:F6:A6:69:82:1C:97:EE:97:A7:E6:72:E4:19:80:C2:5F:7C:7A
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 0196775633DF8E9142FD66B0742FBF36AC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 13:01:00 +0000
Manifest this update: Sun 27 Apr 2025 13:01:00 +0000
Manifest next update: Mon 28 Apr 2025 13:01:00 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: hPWWXH2lKrp2OyjZusPbA3ZVqsDIZO9cb4OF2jeboE4=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:33:df:8e:91:42:fd:66:b0:74:2f:bf:36:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Apr 27 13:01:00 2025 GMT
Not After : Apr 28 13:01:00 2025 GMT
Subject: CN=59daf6a669821c97ee97a7e672e41980c25f7c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:55:42:b8:9c:cf:df:2a:5f:51:7c:80:c4:
2d:27:27:52:8b:c3:cb:e3:d2:bf:09:19:fd:82:5b:
d8:6e:25:22:49:fd:31:50:8c:60:d2:13:c6:36:b8:
4a:96:74:cb:07:8e:aa:55:55:ee:6e:a3:aa:d7:4b:
65:46:16:ca:31:08:95:e9:ae:27:ee:42:8f:4d:61:
23:4b:08:9d:ee:86:ff:19:94:ef:dc:83:f4:64:cb:
84:18:7f:25:11:d0:67:78:3e:8d:b2:4b:7d:9c:37:
9c:cd:34:95:24:21:1e:14:10:d9:5f:70:8e:d2:9f:
8a:34:78:28:eb:59:d0:e7:5a:22:63:f9:35:14:ae:
c5:e6:fd:ed:82:f6:9c:c9:be:e7:95:c1:27:9f:a8:
33:a4:ec:a3:9e:13:6b:d7:88:d6:86:ea:37:d3:46:
64:00:06:78:69:d6:9e:6a:10:08:9b:26:1a:ca:24:
5b:2a:33:56:6a:0c:70:bf:f2:2c:c0:f3:9f:28:f1:
ca:e4:18:e3:8a:18:99:ce:21:72:90:3d:2c:bd:a6:
3c:c4:28:e8:6d:ac:94:98:bd:81:2e:2f:d6:18:b6:
7e:f4:64:8b:aa:28:c3:94:53:5e:8e:bf:d0:20:02:
96:89:80:06:a1:bd:f6:e6:fe:26:27:cb:3e:c6:df:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:F6:A6:69:82:1C:97:EE:97:A7:E6:72:E4:19:80:C2:5F:7C:7A
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:45:7a:80:92:61:72:08:da:ad:c7:49:e2:4c:65:6a:d1:df:
64:79:e1:4f:ec:3e:b1:af:03:bd:a5:f5:0a:cb:c1:54:33:2e:
09:e9:49:0a:08:25:74:81:8e:4d:20:a7:4c:24:19:86:90:c7:
2e:36:5e:26:8a:27:04:bc:81:5b:ec:be:bc:7c:92:a3:6f:eb:
df:74:4e:24:25:37:48:94:b6:ac:23:04:67:49:c5:d3:9b:5c:
3c:5d:6e:f0:b6:6f:09:8e:b8:f7:5c:9a:95:82:c6:10:ff:ee:
4a:98:f6:3a:38:f4:ec:73:f3:29:ee:83:80:06:f7:a4:48:8f:
64:0e:cf:5c:aa:ff:8f:b9:e8:5c:48:42:b1:a4:dd:9a:b2:e7:
5c:73:14:89:2c:56:52:b9:10:6f:92:c5:54:a5:fd:b6:87:45:
a0:bd:3b:fe:eb:71:a9:d1:66:63:46:2b:1c:9c:c9:41:07:b0:
ce:9d:a1:56:3b:07:19:b3:7a:da:51:7a:9e:05:29:c2:aa:09:
b0:f8:4c:b7:b9:b2:e7:22:b2:9f:9e:2e:c1:c0:09:04:fa:1b:
c5:e1:df:0d:d9:c4:e8:a9:08:25:74:94:5f:69:c8:11:61:6c:
ed:22:9d:c4:f3:e8:84:2d:91:b6:a9:52:62:48:16:38:cd:f4:
8f:db:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:06 2025 by rpki-client