Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: ZZUvSLk389XL0lBH1AMgTlvqgoKuFX6iYXfzu1loBFk=
Subject key identifier: 5E:8F:D8:D0:EE:38:FE:3F:D5:46:1E:F4:A0:8B:D7:1B:47:1C:F3:55
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019671C1B4759691034DD0820051B2E9ED73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 05A1
Signing time: Sat 26 Apr 2025 11:00:42 +0000
Manifest this update: Sat 26 Apr 2025 11:00:42 +0000
Manifest next update: Sun 27 Apr 2025 11:00:42 +0000
Files and hashes: 1: SILoOgzFVVKXYr4BeO1iAtaShUA.roa (hash: dPpD4jLPayYBOVInoYbVqKqufem4sI8eQUfot03I5EY=)
2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: RVCnNOc3SQTQZKUP8wYXUG7/deYvJi7tEkxzxNwsnQ0=)
3: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:b4:75:96:91:03:4d:d0:82:00:51:b2:e9:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Apr 26 11:00:42 2025 GMT
Not After : Apr 27 11:00:42 2025 GMT
Subject: CN=5e8fd8d0ee38fe3fd5461ef4a08bd71b471cf355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:7f:23:3c:32:3c:e3:61:78:98:b5:ba:6a:
1a:ce:8b:65:be:4e:7a:2c:0f:b5:ce:f7:cf:ac:1e:
92:1d:c5:43:ba:87:ff:25:8b:8f:31:9f:f9:f9:c2:
e9:8a:15:3b:a6:73:c3:32:dc:dd:c3:24:d5:ed:e2:
20:55:fe:87:4b:40:79:a8:98:6c:7d:5a:7b:a5:69:
3c:c7:c8:c9:35:7c:91:01:b7:12:aa:8a:f2:16:2a:
3b:7d:19:3c:59:4d:06:08:39:2e:1f:14:fc:34:62:
85:64:70:5e:9c:6e:70:92:a2:67:7c:7c:29:f5:2a:
87:30:e6:53:4f:01:f5:02:c6:28:80:5a:da:e7:ce:
cf:5e:c3:a8:0e:68:90:ef:ce:86:d8:a7:d9:fb:a1:
d8:ae:c3:59:bf:12:7a:c9:34:00:7a:70:d3:85:2b:
a1:2d:a0:eb:70:25:32:4c:24:48:ab:ad:57:ed:f3:
10:d0:ab:54:1f:b4:91:bf:8b:5f:ab:ab:07:60:95:
be:35:bc:89:4a:12:3e:6d:28:51:1a:ba:70:d6:59:
2c:9b:47:44:61:b3:a0:a0:67:40:30:94:ed:cb:39:
9e:eb:ef:67:d5:a1:47:d3:db:49:43:f0:1f:bf:8e:
06:50:e2:56:d7:6c:d5:f8:14:11:85:33:1b:72:29:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8F:D8:D0:EE:38:FE:3F:D5:46:1E:F4:A0:8B:D7:1B:47:1C:F3:55
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:68:22:d7:0d:08:6b:23:f6:b8:16:c0:65:b4:05:f6:fa:
c6:b3:d7:f6:60:79:e5:b2:39:82:04:02:51:98:f1:3f:d1:b2:
e9:25:7c:dc:e2:3e:fe:de:91:61:5f:d8:33:75:cc:37:8f:ce:
ee:db:7c:3f:f3:47:53:5c:6e:35:ff:ab:11:49:9e:a0:62:b8:
dd:ef:24:5a:8c:4c:4b:60:2b:0e:a8:0b:51:8a:4e:ee:87:02:
23:2d:ed:6e:c4:36:84:75:8d:a2:33:89:d4:51:40:db:81:a0:
9b:d9:82:c4:37:51:9d:f5:8c:33:a7:2e:bb:e6:97:c0:a1:d8:
94:55:17:88:a2:9b:94:2d:3f:57:71:a9:94:d6:c0:5e:f6:fb:
7e:e9:e8:b1:00:6d:e3:7f:39:34:95:73:ae:d9:08:53:82:62:
6d:b5:3c:45:ff:80:29:d6:11:d9:ea:7a:fd:ec:7d:0a:b0:25:
65:ff:95:1f:a7:d1:73:d0:e8:eb:cc:75:39:ec:78:3b:e5:61:
c6:99:85:f6:4b:ab:a4:42:ee:f9:21:fd:6e:88:6a:f6:e3:2c:
03:51:b3:6d:b1:be:8d:27:b3:5f:21:c5:1e:70:36:9f:04:8f:
69:50:57:9b:1c:1d:f4:33:2b:e9:bd:4a:cd:91:85:62:93:9f:
a2:47:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:15:13 2025 by rpki-client