Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: 6BG5GRB+9xx3jp7MjCCtMqb3XkYvRF5To+MLHfrY51A=
Subject key identifier: D1:44:F8:42:5E:7A:41:F6:8F:8B:A5:61:EC:CD:2B:0F:3D:4F:8F:84
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 01967755F2CF973299E6BC6BC504FD140739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 13:00:43 +0000
Manifest this update: Sun 27 Apr 2025 13:00:43 +0000
Manifest next update: Mon 28 Apr 2025 13:00:43 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: 3zDVog4SPYe08xsfhtOQTSjDZ9LWY2Rvre20jo6O3ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:f2:cf:97:32:99:e6:bc:6b:c5:04:fd:14:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Apr 27 13:00:43 2025 GMT
Not After : Apr 28 13:00:43 2025 GMT
Subject: CN=d144f8425e7a41f68f8ba561eccd2b0f3d4f8f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:0c:a7:88:12:1e:c0:f5:90:ec:14:aa:11:
8f:91:be:19:13:0f:4d:2f:fd:04:de:15:00:eb:bc:
53:36:fa:b4:e1:c0:b5:ea:93:27:8d:3c:7f:b3:72:
2e:ba:9d:a9:54:09:91:06:98:fe:f9:0a:88:8f:06:
1f:44:bd:3a:20:a1:ba:39:66:33:7a:2a:84:6d:12:
72:00:ad:48:f4:3f:e0:84:36:6d:b0:90:65:59:8a:
18:82:24:f9:ce:08:9d:fa:8d:36:a9:be:98:fd:b7:
e4:cf:70:ad:93:a4:4e:e9:b6:53:cd:bb:19:5d:cc:
32:fa:e1:dd:e4:7e:f1:1c:07:cd:5f:8c:98:4a:1d:
25:bf:fc:50:90:1d:87:1e:c4:36:ba:32:d5:5f:15:
19:89:87:70:16:d1:f2:b3:59:01:9c:01:44:5e:4a:
5f:4d:9f:45:e4:93:6c:04:d1:47:13:a1:87:f5:44:
99:e0:cd:9f:ce:95:89:9a:1d:f6:52:ea:72:98:d8:
63:88:55:d7:4c:4a:d6:be:13:8b:1d:56:af:25:35:
bb:39:82:70:cd:46:39:4f:48:b5:b7:bb:2f:e4:c4:
a4:56:73:d6:c9:04:53:c8:7d:77:e3:f6:d1:de:d9:
a3:80:75:01:17:c4:37:0a:0b:82:09:3e:62:29:e6:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:F8:42:5E:7A:41:F6:8F:8B:A5:61:EC:CD:2B:0F:3D:4F:8F:84
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cd:e3:1c:05:71:d6:80:92:c0:7a:ea:42:c0:70:7e:6b:61:
9e:75:ce:8a:4a:4b:da:55:c5:73:de:d3:29:16:e5:22:39:ce:
b3:d3:59:18:b9:5b:a8:82:25:08:cc:42:7b:1d:a2:20:33:97:
56:25:41:20:77:99:ce:4b:3e:04:6a:90:41:23:98:b1:99:14:
d6:dc:8b:89:f9:31:09:99:6d:75:4b:0f:97:73:4c:7a:a5:e9:
d7:00:80:6e:e4:84:53:b4:3c:ee:94:79:14:c5:5d:d8:eb:b6:
a3:e7:42:24:ee:6f:d6:25:89:0e:69:43:bd:8d:10:91:b5:37:
9b:37:09:91:5f:93:96:cc:be:11:73:a9:5c:bc:32:0c:65:e3:
af:fe:00:32:93:e5:54:58:52:d7:b6:4a:12:bb:46:aa:00:0a:
24:e2:03:d7:90:9f:8d:d6:1c:1f:b5:7e:44:1d:12:1d:96:d2:
53:bb:41:5c:2b:f9:f2:68:6c:de:40:f5:3a:fd:88:73:db:c2:
2c:77:62:2c:eb:99:c8:6b:f0:93:54:3d:e9:9d:49:0c:f0:22:
13:14:3c:20:7b:21:4a:d8:52:62:34:96:dc:0c:6b:3c:80:83:
b1:33:d0:05:8a:79:9e:9c:9f:bd:61:bd:27:d8:ab:3f:fa:ba:
57:7b:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:33 2025 by rpki-client