Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: eeVE86YXSEjyZu8zmIqnjL0Z0WvTO9YE3StinzLNTUM=
Subject key identifier: BD:76:80:9C:FE:21:CE:2D:DE:94:90:85:24:CC:19:F9:1C:07:DE:6A
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 019679E9057B0C879D4B174F9C58340B4B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 084F
Signing time: Mon 28 Apr 2025 01:00:36 +0000
Manifest this update: Mon 28 Apr 2025 01:00:36 +0000
Manifest next update: Tue 29 Apr 2025 01:00:36 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: AyzOWpRU6doy6VJ7Vd+ZdUEi53Nj4N4s/psxUdhwCAo=)
2: o1pkGMrhjFIHajUuas6hn3OkprM.roa (hash: vhDUewSi85hdhWxPSoEhr0a9lvOVAXD09OTRvqe5guU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:05:7b:0c:87:9d:4b:17:4f:9c:58:34:0b:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Apr 28 01:00:36 2025 GMT
Not After : Apr 29 01:00:36 2025 GMT
Subject: CN=bd76809cfe21ce2dde94908524cc19f91c07de6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:2c:20:cc:8f:41:8a:c5:02:bb:e8:b6:26:
d6:49:55:5c:84:86:7b:17:f1:5c:5a:6b:b8:ab:0b:
e5:c3:8d:c5:b9:93:f9:6c:21:ea:d6:82:db:9c:53:
aa:74:b2:16:6d:30:5b:24:78:aa:a8:30:9b:69:d4:
e3:11:11:e0:25:1a:03:c2:b1:d7:8f:16:12:10:85:
bd:78:ac:b5:9d:50:58:3e:90:10:8f:d5:4f:dc:41:
b0:ad:80:39:9a:e3:ca:43:41:64:f6:67:ce:87:10:
4d:3f:3e:94:04:68:5b:7d:88:0e:5c:06:a6:b3:97:
cd:5d:35:61:d8:1f:3d:44:11:0b:d4:38:82:8d:dd:
79:68:19:55:41:94:85:1f:d3:fb:2b:fc:ca:fb:e8:
15:22:cc:1c:9e:d6:dd:cf:07:99:38:d2:92:d4:87:
e8:57:cc:db:63:89:57:c1:db:02:5b:ea:96:f9:e2:
15:92:01:c3:64:89:a9:f0:84:ae:2d:a1:75:f5:30:
e1:05:1c:c3:07:73:c8:4e:b9:ee:0c:30:98:d8:b1:
94:03:e8:86:e9:52:b5:df:61:de:a8:43:0d:28:c4:
23:08:9f:50:c4:72:86:e1:57:d3:24:88:fc:9b:65:
fd:95:98:e9:ca:c9:a5:57:6f:4a:f7:2c:9c:cd:08:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:80:9C:FE:21:CE:2D:DE:94:90:85:24:CC:19:F9:1C:07:DE:6A
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:d7:06:35:eb:c4:a9:81:57:68:9e:93:ba:9b:76:c9:32:
1e:a5:28:68:39:49:cd:72:f2:5c:6f:b4:6c:eb:cb:0c:23:45:
49:81:80:36:30:fb:42:6b:8c:ba:06:0e:d5:ce:4d:8e:d4:91:
ec:46:aa:91:f4:96:81:80:44:b5:78:c4:3f:ee:39:f2:b7:7a:
39:57:4e:04:0b:20:ab:d8:0d:0d:6c:03:9b:a1:5f:eb:2f:78:
d4:0c:1a:24:9b:6b:34:d6:14:e5:84:58:c8:3b:81:aa:8c:f8:
72:03:fa:49:34:e8:70:e9:04:71:1e:78:aa:8b:23:f2:8f:67:
74:ac:e6:19:53:73:b3:4e:c6:d1:73:fa:01:9c:b1:3f:ae:58:
24:b8:de:bf:f5:05:fd:7f:90:99:f4:4a:8a:a1:c1:d0:dd:de:
a2:5a:4e:d4:e2:10:1c:94:42:14:8a:df:f5:71:d9:df:31:e2:
50:19:b4:38:32:01:ff:9d:35:27:8d:9a:73:3b:00:42:27:3a:
9a:ea:5c:92:be:41:bd:ec:24:2f:90:85:17:25:21:4f:c1:29:
dd:36:62:72:d4:0a:e3:83:4d:86:5c:76:6c:29:29:cc:b6:29:
52:ce:ae:5e:96:58:40:8e:b7:9d:d2:91:38:51:d5:9d:08:2c:
60:09:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:02:57 2025 by rpki-client