Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: hYQL9/oPfe/ilC7Fvn0FpIwrMlvQRcfWsiqBYM9mVCE=
Subject key identifier: E2:5A:F9:E7:45:38:63:04:5B:86:D4:C9:AE:AC:E3:3F:E2:58:D8:74
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 01967A572528870F0643DEF067B05E7D8266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 083D
Signing time: Mon 28 Apr 2025 03:00:53 +0000
Manifest this update: Mon 28 Apr 2025 03:00:53 +0000
Manifest next update: Tue 29 Apr 2025 03:00:53 +0000
Files and hashes: 1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: 0QTdLoHAq4b4dRHFamWqaIjw4GgZBvU79if1nmHAhiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:25:28:87:0f:06:43:de:f0:67:b0:5e:7d:82:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Apr 28 03:00:53 2025 GMT
Not After : Apr 29 03:00:53 2025 GMT
Subject: CN=e25af9e7453863045b86d4c9aeace33fe258d874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:5d:76:3f:63:20:c1:4b:fd:47:29:86:d5:
ad:bd:84:08:18:e4:d7:cd:22:a0:1f:8f:6b:d6:c4:
03:5d:fb:5a:82:14:23:06:b9:41:0a:40:a9:08:e3:
c2:91:0e:46:77:d1:48:5c:17:6a:0d:bf:29:0a:b0:
1c:0a:b5:9a:8c:2f:3a:f5:ff:df:d1:4a:ad:24:84:
bd:9c:1a:2c:73:c1:42:3d:fb:eb:5d:44:b5:df:1a:
df:07:b4:49:bb:80:ec:5b:18:fc:9a:76:81:36:5b:
9f:6e:ba:9c:5c:65:43:4d:31:dc:e8:81:2c:d0:e9:
59:28:fe:f1:6a:e3:ab:c3:41:3e:83:cb:fc:87:32:
70:ae:62:b4:1a:4e:04:36:66:a2:3c:98:44:8b:66:
9c:77:d7:04:8f:84:cd:40:f0:58:b5:34:88:ce:12:
7f:f6:1f:cb:28:44:72:ca:47:04:52:ab:a9:6a:4b:
75:c4:35:08:a8:4f:db:e0:9f:81:83:52:83:03:f4:
b8:bd:54:68:a1:2f:50:f1:56:79:e8:ce:a4:86:82:
e9:72:d8:fe:42:63:64:d9:fb:35:ce:64:fa:cd:68:
17:cf:3a:23:f9:27:66:34:d7:c0:ca:ec:3a:8f:57:
6c:50:fb:56:1e:5b:9d:20:cb:b8:02:c7:69:ab:05:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:F9:E7:45:38:63:04:5B:86:D4:C9:AE:AC:E3:3F:E2:58:D8:74
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:a8:f2:8d:c7:fd:4d:1b:38:8d:02:17:e3:00:63:b5:aa:
92:90:d7:de:27:50:b2:ad:fd:a2:75:13:cb:38:d2:4e:46:1c:
61:ab:57:29:6d:05:ba:c6:28:de:60:dc:31:42:80:9f:f8:47:
08:db:89:6f:88:b8:11:0a:45:48:87:97:42:f9:a3:93:d2:1f:
7c:81:36:38:a0:a1:f6:fc:e5:3f:40:c7:3a:55:fe:87:9a:35:
87:4a:85:4c:a3:f4:df:d7:21:47:6e:ec:c8:2b:6a:5f:c5:77:
c1:97:1e:39:39:86:bf:5f:4f:cc:ce:88:0f:f7:5c:bd:7d:a0:
5c:16:c0:f3:52:2a:d3:ba:6a:74:b9:64:9f:ff:5f:9c:bc:d7:
4d:00:31:63:91:f6:77:64:53:f0:43:67:7e:4b:cb:a0:73:f4:
85:11:06:32:db:e2:88:20:59:06:88:7d:5e:16:21:4f:70:4e:
de:02:a7:6c:b1:2b:1b:0e:58:03:27:3d:85:15:08:1b:4a:b2:
74:aa:0b:dd:10:44:d1:d0:2c:2a:57:8d:e7:60:0f:4b:64:8e:
50:68:97:25:69:70:5c:50:a1:fa:d5:46:e1:45:25:dc:fb:2d:
fc:9d:b4:0d:d7:f5:ff:a2:35:aa:08:b2:f3:0d:0a:40:96:0c:
03:2c:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:53:29 2025 by rpki-client