Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: kW6OJ2wOihemgx5+yvbwx331CTfjC6H6O/9nIFSX1BQ=
Subject key identifier: 78:8F:40:10:4F:F7:33:55:CE:3D:48:83:A1:7B:28:97:B4:C0:24:95
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019678D6584499CAAE1D90E21F0F1941AE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 05A2
Signing time: Sun 27 Apr 2025 20:00:35 +0000
Manifest this update: Sun 27 Apr 2025 20:00:35 +0000
Manifest next update: Mon 28 Apr 2025 20:00:35 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: X1i0VI4kJoIZaGOdbbg0zhcIQQfChywdXbzLqZWA6mU=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:58:44:99:ca:ae:1d:90:e2:1f:0f:19:41:ae:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Apr 27 20:00:35 2025 GMT
Not After : Apr 28 20:00:35 2025 GMT
Subject: CN=788f40104ff73355ce3d4883a17b2897b4c02495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:7f:a8:36:5c:d9:d0:79:2d:02:bb:fb:4a:
7b:7c:b2:e8:37:82:93:ba:aa:4b:99:d4:2b:9f:ce:
bb:63:9d:e8:92:a6:13:3f:01:25:84:65:b3:16:8e:
d2:a2:ef:b3:b4:0c:c2:2e:52:8a:eb:2c:88:6a:cf:
fe:ae:17:f9:0e:11:32:be:26:2e:47:76:e2:80:ab:
8f:ab:a3:4e:2f:0d:be:f1:e2:c6:96:1e:6b:4b:f7:
25:fb:99:29:16:5d:ac:f2:fb:a1:2e:b3:d1:07:e0:
a4:2b:29:c7:3f:ae:10:c8:14:a4:10:b5:e9:2e:24:
87:3e:52:e8:5c:42:74:69:91:25:13:82:e4:2e:da:
2c:99:c0:e5:9e:17:66:ea:8d:af:a3:b7:1c:0e:a3:
38:56:3a:0d:f1:61:50:ba:48:cb:3a:b2:8e:59:01:
d5:32:4d:c5:a9:ac:14:7a:62:ab:9a:85:01:6d:c9:
7d:04:02:12:60:c6:26:e5:80:1d:64:1e:de:1f:1c:
9a:0c:60:9f:47:a7:84:76:29:7b:ba:27:e9:79:26:
64:0e:4a:15:a6:d0:1a:18:7a:bf:8d:0e:bf:2d:10:
db:7d:be:15:52:b8:93:e1:d3:23:e3:16:db:dc:59:
b9:d1:8b:76:63:ff:eb:97:0e:e8:0e:83:d4:bf:c2:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:40:10:4F:F7:33:55:CE:3D:48:83:A1:7B:28:97:B4:C0:24:95
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1b:07:1e:5e:be:7c:38:7f:72:01:97:7b:1a:15:6c:f3:45:
d7:b5:b4:f0:4f:8f:1e:36:6d:d6:c3:3c:5c:2e:ab:20:fc:77:
aa:c7:8c:92:8c:cb:84:c1:06:43:ad:78:03:bb:e9:6b:0e:cf:
79:9a:1d:08:33:9a:5c:90:af:94:02:17:74:66:38:f3:cf:b2:
82:84:fd:d8:09:c4:0d:55:7a:43:00:70:87:8c:8d:e2:cd:ac:
33:b8:cb:d1:36:40:72:57:78:b9:c4:7d:4c:73:85:9b:a1:c9:
b2:7f:c9:00:e2:45:ad:21:d1:11:ac:c5:21:90:59:8f:6c:d0:
4f:66:98:f3:2a:f7:6e:44:40:ce:72:fa:a2:0a:e1:f7:2b:5c:
ff:9e:75:a0:ff:94:21:d1:0a:e6:f4:6e:e3:99:1e:0d:6d:a5:
de:d1:f2:7d:bc:f4:65:a9:2e:e2:7c:2d:56:bd:4c:b5:a0:73:
8b:3c:1e:99:d0:ef:cc:2c:ed:85:60:af:a6:cc:cc:48:b1:84:
e7:70:fa:2b:ee:4e:00:2c:96:7f:a2:16:98:c0:bf:70:c5:46:
4d:b7:32:9b:87:eb:f7:47:8a:48:eb:62:c3:8d:12:27:fc:2e:
49:c3:70:2c:7d:99:84:e4:b5:d5:7d:a9:3d:a6:f8:47:b6:da:
7e:26:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:10 2025 by rpki-client