Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: F3/TmmljIp5IXrr19STz0/RJoRzwH5TSd1IfnWB8Uvk=
Subject key identifier: C8:F6:52:0B:D3:2C:E1:7A:7E:8E:89:D3:F1:88:56:19:34:2A:57:F2
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 01967D8EA01649E2DE07D6E765CBE5777E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 18:00:21 +0000
Manifest this update: Mon 28 Apr 2025 18:00:21 +0000
Manifest next update: Tue 29 Apr 2025 18:00:21 +0000
Files and hashes: 1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=)
2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: EwfF8QI1se+qpPzcYD6HwrWF77CAxeGgidsT/Eihioo=)
4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:a0:16:49:e2:de:07:d6:e7:65:cb:e5:77:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Apr 28 18:00:21 2025 GMT
Not After : Apr 29 18:00:21 2025 GMT
Subject: CN=c8f6520bd32ce17a7e8e89d3f1885619342a57f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:d1:40:f4:e4:f0:27:54:15:ea:bf:ef:3f:
b4:a0:b6:5e:09:2d:5e:e0:f6:a7:45:ab:ec:3e:9c:
af:a0:d8:d3:c1:ab:49:5a:2c:67:61:ed:49:00:4c:
c3:ae:66:a5:48:a1:f0:52:7c:33:dc:71:3a:5b:e0:
c4:8f:32:81:5e:90:ec:58:d9:35:96:a9:13:0a:d6:
4b:f3:24:e3:9d:4f:98:ec:a5:39:1f:63:04:be:85:
ba:d8:84:28:f7:6a:f5:8f:80:8b:b6:49:e9:05:9f:
64:1b:17:9a:67:f6:76:fe:ca:c6:30:43:43:10:fe:
d8:d6:d3:7c:82:74:b1:ee:2c:4b:b3:55:e7:d0:80:
2b:a8:0c:ff:a6:38:31:ab:40:d3:e9:05:bd:fd:d7:
c3:6f:d2:a1:49:b4:c6:c6:bb:43:85:0c:b6:b7:f6:
e3:b0:0d:27:cc:bf:d2:f8:24:d5:95:04:c3:d7:21:
00:88:b8:fe:41:ab:34:ca:02:1c:0e:66:89:9a:75:
46:f3:b4:33:61:fe:bd:4a:d4:42:c2:54:e3:8b:04:
ce:87:6f:1d:18:44:14:4a:9d:d1:c9:e3:16:2b:ba:
40:df:11:3e:46:dd:fc:ec:31:94:68:30:83:f6:a9:
45:a0:b1:7f:1d:27:32:6c:0f:04:38:f7:e3:34:4a:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:52:0B:D3:2C:E1:7A:7E:8E:89:D3:F1:88:56:19:34:2A:57:F2
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:00:3c:c0:54:3f:b0:1f:92:52:f7:c8:9b:7f:77:e7:c3:
65:ff:ad:bf:02:86:77:79:a5:9a:64:fc:aa:d3:90:ec:2e:bd:
62:e8:ae:c7:b0:ce:ca:f0:d9:79:21:ce:fa:83:da:50:82:b8:
dc:f5:72:a2:4f:6c:10:36:15:80:67:ab:10:17:bd:55:a5:03:
29:02:73:e7:d6:cf:48:2f:7e:0b:0e:05:d1:64:5c:1c:24:91:
2e:76:29:3a:6f:cb:bd:9e:b4:cc:99:19:5e:7c:5b:db:e9:93:
6f:1e:9b:75:e4:09:c2:66:bb:b3:6d:3f:8d:9d:9f:e0:61:0b:
1c:81:f3:8a:63:52:e5:d7:3f:02:03:60:f8:ae:da:fd:06:cb:
a9:f4:20:39:c7:ff:ad:95:7c:0c:ab:11:6d:80:15:ad:db:22:
a0:83:b7:cf:ed:f2:b8:63:ba:e8:8d:ed:a2:e8:0a:24:89:46:
a7:d1:4c:24:95:89:50:17:75:d7:ff:69:ab:0b:a3:52:04:eb:
b0:49:64:ed:2f:00:4a:ca:d2:ff:7d:06:92:ef:54:1b:f0:d3:
bd:9a:0f:4d:a7:1d:c9:e8:a7:48:5b:35:50:8d:72:87:f9:96:
0b:26:9b:c4:ed:f3:0d:f7:1b:a7:35:c3:0e:c3:a5:02:1d:aa:
5e:df:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:25 2025 by rpki-client