
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
File: TeHTcc2fJqEftklGZ0wxl198Lt8.mft (raw, json)
Hash identifier: F87YdB7lQFZ+dWEUYzS1nniNQvcLNClsei3SSn2Ba/g=
Subject key identifier: 13:0B:5C:E5:BB:92:93:92:93:32:E2:6E:98:4F:BE:BB:11:73:C7:DC
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 019681D92B3023EAF5913C3116EB1519565B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 14:00:15 +0000
Manifest this update: Tue 29 Apr 2025 14:00:15 +0000
Manifest next update: Wed 30 Apr 2025 14:00:15 +0000
Files and hashes: 1: N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa (hash: IAepQRK7ijnLHmjIcS6HiPXZXeTO8dWbShOBaF70B2w=)
2: TeHTcc2fJqEftklGZ0wxl198Lt8.crl (hash: rehAloEVrTrLBQSgTNjZMLuKBJwopwTWPPMXrEsHuCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:2b:30:23:ea:f5:91:3c:31:16:eb:15:19:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Apr 29 14:00:15 2025 GMT
Not After : Apr 30 14:00:15 2025 GMT
Subject: CN=130b5ce5bb9293929332e26e984fbebb1173c7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:9d:5e:09:63:1d:47:40:cc:bb:db:55:28:
17:1f:6f:e4:92:af:8f:a0:cb:75:e4:9b:0b:cc:c7:
7a:60:bb:06:c1:b5:52:2a:92:5d:85:e3:0c:2d:f7:
b1:5b:80:6c:aa:54:1e:01:a5:50:e7:67:7f:42:43:
15:62:fb:a5:d3:ce:dc:14:16:c4:6b:88:0b:64:56:
db:0e:04:8f:03:a7:55:24:6a:4c:27:ff:1f:eb:5b:
e9:94:ee:65:8c:2f:76:eb:79:a3:84:a9:11:fc:7b:
90:99:ca:a8:fc:f5:bb:76:eb:92:b4:62:c4:d4:d1:
9c:c5:76:f6:11:d7:99:ca:e3:8f:97:68:a5:1a:5c:
e7:bb:d0:68:63:ab:f3:47:f1:37:48:9c:47:33:ea:
83:14:a9:16:24:4d:69:db:01:fa:4f:74:a8:be:95:
31:7f:c7:60:35:09:68:82:c3:0f:77:c9:cd:35:de:
e2:5e:bb:cd:e3:96:5d:de:32:a6:bd:dd:34:f4:d9:
a1:3a:1f:fd:3e:4d:1a:a8:10:f9:58:75:1d:ce:84:
2a:bf:dd:99:62:6c:2a:66:e1:4f:93:8e:2d:d8:11:
57:ea:8c:a9:ba:9d:6d:06:7a:b4:1c:51:07:82:6e:
0b:fc:48:fe:83:ff:bf:4b:ec:02:9b:5d:47:fd:02:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0B:5C:E5:BB:92:93:92:93:32:E2:6E:98:4F:BE:BB:11:73:C7:DC
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:93:78:10:eb:41:0c:11:18:c2:c3:a5:8c:71:63:c1:12:2c:
b4:7f:1f:20:72:98:ee:3a:b8:b4:48:70:12:97:af:d1:59:e2:
04:e3:17:22:7c:04:4c:b4:70:3e:53:bc:84:3a:1e:41:a4:eb:
6f:d5:0f:2f:7b:38:b4:4a:2a:9d:54:a0:02:c9:85:68:fb:9e:
33:41:7d:85:ce:22:56:76:69:36:c4:17:b0:91:25:ee:fe:92:
c1:56:16:31:e7:c4:ec:c7:d2:7b:26:78:53:60:47:8c:63:e6:
e4:21:59:81:38:33:9d:ee:29:d2:d3:67:7d:d2:48:db:c4:7d:
a2:a0:fb:35:61:37:5f:8f:52:dd:97:ed:7f:c3:84:bf:37:4f:
cd:b9:10:eb:c7:82:14:0f:ce:8b:cd:e7:11:79:b2:ff:b0:eb:
ec:92:68:c3:f9:30:78:50:f4:f0:b4:9a:0f:d5:2a:b2:ea:44:
15:14:64:99:37:76:2f:26:3b:ed:06:a4:f9:5f:4e:51:1e:af:
e8:40:f9:e2:25:cf:c1:8c:3c:2e:2b:54:c6:0f:cd:42:77:f8:
2f:fb:d6:ba:b0:6d:e3:4a:dd:ba:db:0c:20:fd:6c:50:82:af:
8d:be:2d:8a:14:e1:ed:22:1a:88:ec:41:c5:ed:33:e6:84:0e:
00:b7:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:19:17 2025 by rpki-client