Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: HVTTVEN5qgVRnL76xH/U8azVTzoPzD/BeefFre8Twlo=
Subject key identifier: 2C:F3:08:C6:EE:1A:86:D1:9D:62:CC:98:6C:C4:63:8A:51:70:AE:C0
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 0196722FBDBEF72EA37CEE4105CDDF594BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 13:00:53 +0000
Manifest this update: Sat 26 Apr 2025 13:00:53 +0000
Manifest next update: Sun 27 Apr 2025 13:00:53 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: AJAWtGynz1Tvtzm++eT28RKQEtMLG8ib+BciJvTIyGA=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:bd:be:f7:2e:a3:7c:ee:41:05:cd:df:59:4b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Apr 26 13:00:53 2025 GMT
Not After : Apr 27 13:00:53 2025 GMT
Subject: CN=2cf308c6ee1a86d19d62cc986cc4638a5170aec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:21:ba:0c:a2:a4:09:75:c0:3f:bc:81:d4:
d0:d2:84:40:fc:14:4d:ad:40:32:ca:98:62:48:d7:
98:ee:ce:e9:71:64:fa:80:6d:2e:54:43:b3:df:f3:
6c:cc:fd:62:75:91:9e:9e:d9:b9:8d:aa:55:1d:cb:
d9:e2:ce:cb:ef:24:ed:3b:d8:90:c2:f9:88:9c:30:
a7:bd:71:f7:07:5c:35:34:d4:a2:df:e2:85:5e:fe:
67:06:d5:c1:65:7b:b8:96:8d:30:a2:4b:ed:fd:c4:
ef:4a:26:6c:89:c1:77:f4:12:fb:79:38:42:f4:8d:
51:ba:83:4c:b0:48:00:21:cf:0d:91:ba:4e:9a:7d:
d4:34:3f:8b:37:48:62:0e:5b:62:4b:66:c5:46:36:
32:b4:e9:41:ed:c3:59:a4:4a:2d:bf:f8:c9:3b:83:
a6:d1:e5:f9:5d:0d:9d:e0:7e:70:c6:21:65:28:16:
c4:2e:29:dd:3f:66:a9:e9:0f:ac:c7:21:f2:a6:a8:
77:d1:31:b4:f7:61:74:03:97:51:07:c5:49:4e:74:
64:40:91:6b:c7:7b:bc:09:5d:e8:2d:13:80:cf:ed:
98:f5:3c:26:26:44:fe:48:de:de:78:28:04:b9:e0:
08:92:fc:5b:01:c8:10:10:9a:f9:35:f0:9e:34:dc:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:08:C6:EE:1A:86:D1:9D:62:CC:98:6C:C4:63:8A:51:70:AE:C0
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:5a:9e:08:ce:91:e1:cb:58:d8:cb:ff:f9:7e:e8:86:5f:
04:55:06:f3:a7:6b:e0:07:f6:09:3c:0e:b9:dd:c5:76:a7:53:
d3:90:7a:94:15:ce:6b:c1:b6:5d:4d:fd:c3:6b:94:a4:62:38:
70:00:27:7f:0f:cb:36:d5:02:eb:ac:31:b7:73:7b:ce:ad:5e:
d0:2a:e2:84:7f:8a:46:fb:1c:cd:6c:17:2e:bd:f7:ce:f0:86:
17:3d:cd:94:9f:aa:2a:e2:22:3f:46:33:7f:b3:95:78:3e:ca:
a7:fa:d1:eb:3b:a6:df:f4:84:bf:0c:b1:ae:e3:14:84:bb:4a:
0d:14:54:6d:3d:97:57:50:fb:05:76:ee:d1:7f:6d:18:94:2a:
96:a6:49:9d:6e:dc:15:4d:ef:63:43:8c:ae:7e:2a:06:77:67:
c2:03:71:ac:24:d3:22:28:a4:30:a9:e3:9b:10:9c:4b:1a:09:
e4:d6:18:e5:e9:91:bf:3f:f8:3f:29:64:56:c6:57:ed:1f:e3:
5e:64:2a:e6:d9:f7:7c:66:0a:dc:c7:60:65:cc:b5:7c:a5:74:
63:26:f6:74:f3:39:87:8a:60:d0:5e:28:c7:42:42:9d:ee:3a:
ad:46:12:17:08:10:d4:af:df:ff:31:e8:1a:d5:47:6f:0c:80:
c4:bf:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:32 2025 by rpki-client