Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: ZSGKfDybss/XaWl01mPZYaXC/WHe/Aoaf+WGIYiJhEg=
Subject key identifier: 6E:E9:36:33:90:48:15:21:2C:5C:A3:90:70:97:ED:10:F1:3C:A4:F9
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 01967755B863473C28574E0175B6D4E3E0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 11FB
Signing time: Sun 27 Apr 2025 13:00:28 +0000
Manifest this update: Sun 27 Apr 2025 13:00:28 +0000
Manifest next update: Mon 28 Apr 2025 13:00:28 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: Bge0Pc08g6LjllCHVheg8orV3OJf7f3DrIMEsTq0UdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:b8:63:47:3c:28:57:4e:01:75:b6:d4:e3:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Apr 27 13:00:28 2025 GMT
Not After : Apr 28 13:00:28 2025 GMT
Subject: CN=6ee93633904815212c5ca3907097ed10f13ca4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:c4:50:ca:6e:61:70:08:bd:b2:69:cc:2d:
36:4e:c4:fc:75:6c:89:94:bc:0f:7b:e1:a6:e1:4a:
4a:c8:0e:3c:68:a1:24:aa:ed:b5:af:80:14:6d:f0:
86:21:f4:5c:57:f6:56:8d:e1:e7:ad:ff:c3:49:ce:
a7:b5:79:ed:8c:45:5e:c3:8f:ea:35:e3:a2:9e:be:
a2:1a:26:c1:4d:ab:8f:f8:98:c7:0a:00:00:5c:4d:
4f:01:80:ce:c6:1c:c1:66:86:c1:1a:70:24:08:2d:
15:54:c3:72:9a:c0:fd:1e:17:11:de:95:42:09:c9:
78:f9:12:b0:11:fa:dd:15:df:02:b1:8e:67:b6:aa:
0e:e4:c1:bc:ec:a2:54:f1:85:39:2d:4c:73:a0:a6:
dd:50:88:02:36:a6:22:93:85:b0:f4:3f:d0:e9:ca:
ef:92:b4:1a:90:22:4b:48:21:13:ea:23:1a:90:3f:
e0:6a:03:97:eb:66:c1:02:38:d0:7c:78:9c:3a:1c:
c4:77:34:15:33:b8:ef:62:96:be:ed:16:35:ea:a9:
54:fd:5f:69:51:9a:48:8f:90:3f:5f:b5:02:60:ed:
32:fb:60:03:40:7e:67:0f:57:7a:69:0a:6e:44:64:
04:51:b0:39:58:09:93:51:0b:44:0f:90:8d:1d:ce:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:36:33:90:48:15:21:2C:5C:A3:90:70:97:ED:10:F1:3C:A4:F9
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:94:93:c7:a4:0d:db:2f:8e:64:64:0b:8d:fe:94:10:33:
c7:56:ab:7a:99:50:b9:a8:cd:31:70:55:f4:24:42:46:29:17:
3c:9a:22:a4:f4:0a:12:ee:8e:3d:ae:08:c1:6a:dc:3e:b5:3c:
d1:0a:15:1c:62:82:9d:ec:a0:5f:33:3b:71:28:98:d9:22:22:
e7:6a:cd:e5:4e:66:b3:04:08:8b:9e:67:12:a4:fe:15:3f:1f:
a0:84:58:99:12:a6:2d:9c:57:5a:5e:e8:39:22:89:95:cf:8f:
e3:4a:c0:59:1b:18:1e:ff:32:6a:e9:60:f5:41:d6:64:66:88:
dc:5e:c8:b8:24:d2:29:ab:b1:fe:33:22:bd:9b:e7:2c:da:03:
0d:cc:af:d9:1b:5f:22:3b:38:9a:d2:3c:d9:7b:07:ac:3a:65:
32:18:4c:54:7b:5f:4b:58:5e:0f:c1:5a:b3:cd:ee:66:fd:4d:
6d:6a:7b:97:9b:29:2f:bd:49:79:e5:73:98:9c:44:d2:5f:4d:
62:5d:fb:85:b5:f9:f8:63:4d:e6:51:bf:22:a1:c4:71:10:49:
1a:fb:08:dd:46:c6:88:80:af:c6:bd:e5:74:42:94:79:5b:c4:
ec:f2:22:05:17:ea:59:8d:ce:94:ee:00:94:2c:0a:95:54:7b:
5e:4c:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:13:26 2025 by rpki-client