Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: HvpuKlChrRhvrck8wy55ypw/K1zIj+ZddsTzJw4r3XE=
Subject key identifier: BC:47:3A:C7:A0:40:E8:16:3C:23:A9:0D:BA:5B:B0:BD:82:85:5C:C4
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 0196839120633FC85A06B678BCD828165D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 22:00:48 +0000
Manifest this update: Tue 29 Apr 2025 22:00:48 +0000
Manifest next update: Wed 30 Apr 2025 22:00:48 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: 3SjiJnm+d+34ETJLxiu38QHIOe54bYFyO1xcwt0ib6o=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:20:63:3f:c8:5a:06:b6:78:bc:d8:28:16:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Apr 29 22:00:48 2025 GMT
Not After : Apr 30 22:00:48 2025 GMT
Subject: CN=bc473ac7a040e8163c23a90dba5bb0bd82855cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:34:27:ef:96:48:ae:18:ee:ec:c4:ab:51:
a8:54:d9:52:aa:98:f9:1a:10:e4:0b:44:d5:0d:ad:
60:6b:ab:4a:30:65:9e:ea:f3:8e:2a:86:6e:8e:8c:
9c:65:3e:a3:c1:60:2e:b7:a8:2b:0a:22:cf:1c:85:
4e:d1:2c:59:12:31:bb:6e:76:34:8b:50:be:48:c7:
70:cb:1a:c9:27:28:d3:e3:8e:dc:19:4f:7d:0b:ff:
f4:fa:56:8b:3f:8b:70:9e:5f:e3:10:48:f5:41:0f:
58:20:e2:6d:f5:be:c4:ce:c1:d5:bf:0a:7e:9b:15:
4d:8c:4e:cd:0f:c0:18:56:c0:cf:9f:2a:d7:aa:89:
53:95:ec:b4:ea:f2:e3:62:4e:3e:d3:9b:5b:99:dc:
77:49:7f:e3:69:e6:05:4f:bd:37:27:0c:39:99:81:
2a:0e:80:c5:fb:d5:ad:fd:f5:1d:50:00:c3:db:69:
61:d7:9f:1c:5c:d2:ba:44:dc:2b:f5:66:27:d0:23:
66:0b:a0:50:e1:99:b7:b7:f5:5f:33:c8:a7:45:51:
82:18:5b:80:48:d3:bb:18:49:05:e9:14:0a:a0:ad:
a6:c1:4f:4c:b0:ff:ba:19:4b:02:39:9b:8d:ba:56:
54:db:c8:32:ea:1c:0a:2f:a5:47:d3:a4:a9:6c:e2:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:47:3A:C7:A0:40:E8:16:3C:23:A9:0D:BA:5B:B0:BD:82:85:5C:C4
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:95:04:88:d8:ba:30:ce:3b:0e:9f:a9:b8:72:53:e5:b9:
f3:41:7b:e1:73:27:51:36:ec:5a:35:60:39:23:e6:a2:c4:98:
6d:ba:73:80:22:9d:29:c8:c2:87:48:56:0f:92:55:cc:c7:67:
34:aa:24:57:ef:17:38:76:ad:d9:d4:10:7c:3e:92:a9:f0:e6:
aa:12:bb:71:c4:42:6c:f6:66:2b:74:4e:e1:b7:15:91:f5:e8:
aa:0f:c8:a8:1e:6f:9b:90:08:fc:93:70:49:bb:bb:1c:3a:fd:
db:6a:b8:1a:17:88:11:9e:1e:03:88:4a:bb:7f:5f:c2:b7:1c:
dc:2a:77:54:fd:2b:9d:fe:13:d4:92:3c:bb:57:95:c5:80:ff:
00:0e:3e:17:3c:38:38:49:c9:4f:b7:5b:97:69:39:2f:93:c6:
d5:fe:0c:36:a4:e9:56:24:9a:16:f5:db:4a:be:42:0e:36:03:
07:32:16:0f:4e:23:ea:47:3d:72:ad:90:ff:14:8d:cf:81:43:
c2:f0:e5:f7:eb:32:31:d5:5a:e3:aa:b0:26:dc:05:05:19:5c:
59:9d:23:ac:97:bc:ce:12:62:84:23:45:2a:4c:11:99:93:6d:
cd:cb:c0:85:8c:17:74:6f:e4:5a:fc:51:7e:ad:ff:f9:cd:d2:
61:5c:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:42:43 2025 by rpki-client