Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: TPJaXT6a8pBuYklkmPk2jMcy3G1B552EG6ocljurE10=
Subject key identifier: 82:87:74:15:F9:13:4B:46:48:1D:18:4F:A8:91:CF:E6:EA:97:1A:95
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019679E963E9E3E248422D447F78BA433449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0B9E
Signing time: Mon 28 Apr 2025 01:01:00 +0000
Manifest this update: Mon 28 Apr 2025 01:01:00 +0000
Manifest next update: Tue 29 Apr 2025 01:01:00 +0000
Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=)
2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: m/dMGOrbqgEjHL1w05keqZK0J2wdZab88VEY9yRUZZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:63:e9:e3:e2:48:42:2d:44:7f:78:ba:43:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Apr 28 01:01:00 2025 GMT
Not After : Apr 29 01:01:00 2025 GMT
Subject: CN=82877415f9134b46481d184fa891cfe6ea971a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:8f:1c:d3:ca:e1:ae:72:bb:f4:67:8a:4f:
d7:7f:7e:5a:f7:89:cf:8c:be:c2:8e:f6:34:61:81:
f6:3d:b7:7c:e2:4b:01:8d:aa:80:82:f5:a5:e8:48:
c1:d4:0e:4b:c9:bc:c1:f1:eb:31:86:6a:cd:1a:a0:
53:dd:22:ab:8e:3f:3c:13:2c:16:1d:e4:ec:b2:d0:
61:75:b4:aa:6f:5a:7f:19:0f:d7:eb:9a:24:af:1b:
52:e7:f9:09:51:8f:6b:ea:72:32:84:61:32:00:ad:
03:38:92:4d:c1:21:c1:a8:db:f4:13:45:6f:15:83:
31:e4:e2:ab:26:6c:30:e8:5b:1a:79:a6:dc:d2:0a:
eb:13:ac:ef:90:2c:7f:25:92:d5:19:9a:f8:52:21:
89:10:c0:12:75:95:07:6c:40:c9:d3:c9:aa:e9:9d:
b6:f7:e3:c1:57:ca:c8:65:64:81:9b:49:5c:51:46:
01:87:ea:17:b1:94:7b:44:34:48:a7:56:79:bf:7c:
ac:7f:62:cb:bf:0f:22:4f:ee:f5:24:93:22:a4:28:
0c:54:8f:f5:5e:05:c0:c6:34:eb:78:ba:f1:b1:52:
db:66:be:28:62:91:83:75:89:19:e7:95:86:9a:e3:
5a:f9:8b:7b:5b:08:12:dd:a2:56:69:ca:0b:31:b9:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:74:15:F9:13:4B:46:48:1D:18:4F:A8:91:CF:E6:EA:97:1A:95
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:52:9f:c4:2a:84:67:a8:d5:15:d9:73:8a:45:9d:e7:39:8e:
d7:c8:5c:ca:a4:93:6d:b4:9e:eb:20:91:b1:ac:a3:05:da:76:
56:9b:eb:c8:82:39:ba:8a:38:22:6e:13:a8:82:4f:d2:d9:fc:
85:a4:ba:e0:17:af:8e:18:7f:9c:d9:13:06:f1:11:10:e2:79:
6a:16:cb:90:26:b8:8a:7c:9d:38:ea:91:3a:44:07:f3:a4:7a:
34:9b:54:38:42:48:7e:b1:5a:45:72:71:0b:39:a7:f7:0a:1b:
d8:28:52:e1:88:57:01:f6:bc:ae:58:9c:e7:1a:a5:e9:de:6b:
30:3d:dd:ba:fa:fe:bd:34:e0:34:94:ef:53:7a:52:13:3e:9b:
73:9e:38:4a:c1:4d:20:39:0c:f4:ee:b4:64:d6:f4:01:f3:bc:
1f:11:d0:9a:ab:ef:92:b7:88:d8:ff:93:4e:fb:05:e7:52:14:
02:06:d9:92:0a:8a:aa:d6:83:69:9b:bb:09:24:ae:e1:f1:ab:
72:d3:e3:03:30:8a:3b:50:7d:b6:0e:d5:fe:a6:13:7b:70:4d:
91:34:3d:12:17:53:44:ae:3f:be:fa:e8:e4:b9:6c:44:c1:86:
de:96:43:1d:2c:aa:63:11:04:33:6b:56:a4:f6:08:10:b0:3a:
fb:49:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:09:08 2025 by rpki-client