Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier: zQAo9PoHivY+EzTa06/FEWzjc5IL0pmcFCzsQ/4h/BM=
Subject key identifier: 86:73:BE:CC:72:69:4A:0F:FC:4F:69:BB:FB:33:08:70:4C:71:FD:A6
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial: 0196846C9CF7AEDBB6ED4A631805403F35D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 02:00:32 +0000
Manifest this update: Wed 30 Apr 2025 02:00:32 +0000
Manifest next update: Thu 01 May 2025 02:00:32 +0000
Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: Bi0WFNHw3mML/pPtsyosnmfgSN/tnFHK6b+CGcjATPk=)
2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:9c:f7:ae:db:b6:ed:4a:63:18:05:40:3f:35:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
Validity
Not Before: Apr 30 02:00:32 2025 GMT
Not After : May 1 02:00:32 2025 GMT
Subject: CN=8673becc72694a0ffc4f69bbfb3308704c71fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:8a:8a:b5:b3:31:3b:df:c9:8b:3e:89:b3:
0e:6b:05:81:ab:10:32:d6:44:22:f4:2e:dc:28:85:
49:5e:2e:7b:b7:8f:c9:fb:e7:ff:f8:c1:11:88:94:
c4:ce:95:45:43:6c:36:67:38:a8:cc:6f:2b:da:57:
4b:7b:41:51:23:c6:b9:af:20:e1:37:39:6c:81:ff:
0e:d4:fa:d7:d9:0d:4f:ef:7b:d1:2a:9d:f2:8b:45:
c3:6c:14:53:54:79:a1:ec:bb:0b:dc:3f:63:f0:9b:
34:85:ec:4c:45:2c:6e:81:7f:54:5a:a9:95:83:65:
df:0f:f0:96:2a:db:71:da:08:3b:23:97:00:59:8e:
26:97:6f:9f:c6:41:99:7b:1c:46:b8:8e:a7:15:ff:
0a:65:7c:86:93:7c:71:47:a9:03:09:a4:d6:18:a1:
01:68:24:1a:da:6f:38:3a:67:d9:92:b0:70:70:b1:
59:01:ac:1c:03:50:15:9c:9a:46:41:5f:0b:d7:76:
1f:ca:4d:0f:87:fe:c3:2b:f8:6c:03:6c:6e:f7:b6:
0a:d2:08:f5:74:09:16:22:c5:f2:fc:9e:67:59:cf:
6b:fd:70:65:72:95:aa:00:b4:73:2f:43:78:0a:bb:
1a:fb:26:b8:35:97:62:41:d6:e2:85:02:1b:b4:bf:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:73:BE:CC:72:69:4A:0F:FC:4F:69:BB:FB:33:08:70:4C:71:FD:A6
X509v3 Authority Key Identifier:
keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2f:ef:16:94:f8:d4:17:1e:20:a7:90:f9:a2:78:b5:a5:18:
78:5c:9c:84:c0:d1:6c:d8:e8:67:a4:c0:38:45:12:38:09:cf:
e7:5c:c2:ce:e4:be:4c:4e:50:60:38:54:ca:8c:14:5b:da:0d:
85:03:07:f9:d6:cb:f7:85:22:1b:71:f1:ee:32:7e:fb:bd:d7:
46:83:32:24:8e:c3:db:15:d8:5e:23:6f:6a:bb:23:e3:a7:c7:
3d:a7:0b:f0:36:46:f2:9f:35:00:da:e3:8e:a9:d8:dc:e2:25:
97:47:45:d9:58:af:bb:e7:95:39:74:26:dd:62:f5:04:ab:93:
9d:01:40:3c:d4:5c:b4:0b:b3:0d:f7:36:1b:1c:97:76:83:75:
2e:f5:0b:e4:41:87:0b:e5:e7:c0:cd:e7:0a:5d:cd:89:a9:2b:
9f:d6:a9:d7:34:e2:9a:5f:05:aa:a3:67:8b:53:23:61:68:8b:
93:f3:1a:66:97:4f:14:a2:25:34:17:ad:d7:66:1c:49:6b:ea:
57:5e:53:f4:0f:4b:32:19:fd:42:6d:6d:fc:07:e6:9d:67:b2:
13:b1:fa:24:08:af:0f:16:73:1b:21:34:9d:65:91:7b:15:96:
1b:63:59:2c:5c:a3:10:b1:eb:da:76:37:9c:94:b0:0b:e2:a4:
e3:64:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:51:06 2025 by rpki-client