Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: EXJj0oVAyJv9VUWPojFm8/KvCKNCgrOu93+yNmR09A8=
Subject key identifier: 2A:58:9D:36:A5:01:4E:E1:E0:66:A3:86:18:B0:65:58:44:B3:7A:61
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 0196753060B167CDDC0ACDDD293EDBF14158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 08FE
Signing time: Sun 27 Apr 2025 03:00:26 +0000
Manifest this update: Sun 27 Apr 2025 03:00:26 +0000
Manifest next update: Mon 28 Apr 2025 03:00:26 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: iVCzd6Fp8/ZcuABc4SSgOoXW4o13B1Fwa22ny+p5Qys=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:60:b1:67:cd:dc:0a:cd:dd:29:3e:db:f1:41:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Apr 27 03:00:26 2025 GMT
Not After : Apr 28 03:00:26 2025 GMT
Subject: CN=2a589d36a5014ee1e066a38618b0655844b37a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:73:fe:d4:91:03:68:8f:5d:ca:cf:66:3b:
9d:87:38:30:81:f0:01:da:1f:5a:1b:94:e1:72:97:
23:79:9e:d4:1f:60:db:d7:35:1e:c4:9e:78:f7:78:
45:bf:56:39:e2:cf:fd:5d:00:68:a1:64:6f:4d:c3:
a5:a0:d2:29:1c:95:16:ac:4e:93:e5:8e:87:29:ca:
11:cb:e1:20:34:08:8d:c0:25:1d:29:27:24:bf:25:
46:a4:fe:e7:ed:2f:c4:c7:62:97:64:f5:2a:9c:cd:
74:9e:35:02:9c:91:b1:01:4c:c5:4c:ce:dc:44:3c:
9c:27:24:4f:b0:35:b3:d1:f6:2a:71:c1:54:5a:65:
b3:e1:b6:16:a2:d7:01:39:b3:9a:21:bb:b5:a5:86:
ff:14:39:e8:d8:9d:d2:ab:d0:a5:68:8e:fe:d9:1e:
f4:e7:56:a0:22:6e:fe:2b:1f:86:a0:86:42:99:f7:
38:2e:99:82:2c:ed:b8:46:28:55:e3:a1:9d:f9:8c:
cc:de:4d:46:49:2b:f8:bc:38:e1:ad:3d:73:0a:8b:
8f:20:8c:00:ae:b5:f6:ee:13:7e:fe:46:cb:c5:20:
6d:b4:43:fe:a9:90:27:ab:26:62:8b:c4:22:51:f2:
d4:98:f4:31:d5:e7:fd:5f:3c:5e:5e:1c:e2:de:2f:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:9D:36:A5:01:4E:E1:E0:66:A3:86:18:B0:65:58:44:B3:7A:61
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:58:8d:6b:34:55:3f:c1:6a:48:67:0c:96:1c:29:9c:16:f3:
d7:f3:8e:76:b7:55:21:bc:a9:fc:3b:3e:a2:77:ed:74:8e:d6:
cb:f4:9c:4c:4a:67:82:89:a7:15:96:68:98:43:03:4f:64:29:
78:f3:26:fd:dd:39:4c:d2:88:fe:82:b6:f3:f3:11:d8:e2:db:
6f:cb:47:d1:4b:2d:0f:8c:f8:f1:1f:36:49:ef:13:5a:cd:b1:
71:e9:e2:83:53:f9:0f:0d:52:73:b8:50:bb:ce:8f:2b:59:7d:
c1:20:9d:5f:15:a9:06:a0:e7:70:f9:ec:6e:f9:ab:62:67:9a:
39:b3:33:e5:55:77:88:5d:1e:d5:19:81:8d:7b:57:80:a1:6d:
42:d1:1d:d5:82:13:60:d1:c3:0b:82:1d:ee:80:3f:f4:c7:f0:
89:c5:67:d0:a1:bf:0a:e3:19:24:22:72:da:fb:84:d0:1a:0e:
df:6f:fd:0d:9c:4b:65:a5:84:5b:ef:7c:aa:47:71:96:88:50:
da:80:a9:d3:8b:5f:2b:f6:72:05:b0:fb:6e:b3:bb:be:81:8e:
63:40:79:7c:29:24:4f:1f:24:f2:e0:ab:8c:f2:52:f8:76:0a:
5a:74:e0:0d:3a:e6:0c:c6:18:29:c9:9d:9f:9d:ab:ff:2c:58:
d8:24:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:31:25 2025 by rpki-client