Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: xoDT00Xh+b9Tmq2yhM0zs5t8Tv2TwTxaFVThvW80CTY=
Subject key identifier: A7:7C:55:78:2B:C1:1E:AE:9B:96:3A:77:6C:9B:69:0A:24:12:F6:0B
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 01967642CAD2C4BE019D61E3C2F2CD3DB8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 08:00:10 +0000
Manifest this update: Sun 27 Apr 2025 08:00:10 +0000
Manifest next update: Mon 28 Apr 2025 08:00:10 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 0ac5KdfXAkYpWpDawWZ55ypmGSAzRQluDzsF9It1eU8=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:ca:d2:c4:be:01:9d:61:e3:c2:f2:cd:3d:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Apr 27 08:00:10 2025 GMT
Not After : Apr 28 08:00:10 2025 GMT
Subject: CN=a77c55782bc11eae9b963a776c9b690a2412f60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:c6:b3:bc:0b:64:94:4e:66:6a:2a:ad:c6:
69:e7:93:40:ec:54:33:c1:88:2f:7f:9c:43:21:63:
ea:47:0e:70:82:9f:7a:62:5b:bd:60:d6:76:0a:8c:
ce:21:e1:1b:bc:34:3f:01:ef:09:c0:b7:a9:1f:cc:
dd:49:7c:18:49:fe:5e:3a:8c:d8:5b:8e:02:6e:25:
4c:99:08:22:d6:77:25:b8:ed:ad:fb:bd:46:f0:c6:
81:b3:31:db:d0:37:d0:7d:4c:7b:3d:0a:42:52:15:
a4:9f:74:01:d0:03:16:b3:7e:ac:3c:33:84:20:63:
5b:97:83:3c:d0:fc:4c:c0:03:3f:70:1c:ee:f0:fd:
3a:1a:6f:7b:4b:a8:52:62:2c:65:dd:af:fc:43:e7:
94:9a:a8:17:1a:48:db:e7:f2:fc:8d:98:da:2e:2d:
cb:db:75:8b:e8:23:89:b0:bf:06:d5:61:0b:6b:39:
55:8f:27:fb:a4:56:a1:a9:28:7d:27:33:df:9b:b4:
0e:1c:5b:64:00:2e:fb:83:be:26:a8:97:02:88:b1:
27:e2:7b:0a:c2:6e:26:20:d7:85:61:74:6b:c8:0a:
72:07:0e:8f:dc:b2:65:15:db:fa:3e:9f:4b:03:7e:
1d:b8:e5:85:3d:c9:c8:ab:df:83:5f:09:10:23:6b:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:55:78:2B:C1:1E:AE:9B:96:3A:77:6C:9B:69:0A:24:12:F6:0B
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:20:b9:f2:ec:4b:f4:b0:e0:1d:62:d6:ba:b8:26:d3:9c:ff:
28:fa:00:23:7a:2d:66:7e:44:77:1d:b1:e3:21:f3:b5:d9:d2:
05:63:2a:02:12:f8:a7:50:81:5b:88:59:6c:4e:14:22:f9:80:
8a:70:b4:06:e7:b1:1c:17:eb:b4:2f:91:a9:b3:b0:82:b9:33:
3c:ed:d1:80:be:c6:dd:a5:cb:67:a6:54:e9:e5:92:45:6e:74:
35:e2:f1:bf:31:12:ad:f9:4c:0f:e0:6e:e1:83:99:6c:76:e9:
93:2e:27:79:b7:76:55:ab:bf:44:4d:6f:ff:ea:e5:1a:31:cc:
70:80:3b:70:b7:f9:ba:b8:57:a9:25:ca:0f:52:4d:03:c5:3a:
29:62:1d:90:a5:2f:52:38:69:e6:2f:4e:ae:0a:2b:c3:14:ee:
c5:cb:1c:c3:00:9c:17:94:b3:0c:b8:67:e2:f3:f0:09:a8:bd:
26:ea:ca:57:96:38:36:68:4a:73:2c:a2:1e:59:c2:0a:d8:03:
4f:7a:81:89:4d:9e:cd:cd:88:73:19:a1:d0:f8:67:64:ad:a4:
22:7b:fd:19:c4:ac:5f:a6:4c:f8:9b:9c:d9:15:11:3d:69:69:
12:d1:5c:e1:fe:19:54:af:a9:42:9b:74:b3:4a:d4:2f:55:ee:
9b:f4:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:45 2025 by rpki-client