Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: /T4W/dhv2O80fZaxh0+xB9q9om7X65rFPqe+cdxgHbo=
Subject key identifier: 00:0F:3C:50:0D:A5:56:5A:CB:54:26:91:D2:62:92:36:E7:C8:E0:19
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 0196857F987D65A7954A1D63493893056D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 07E8
Signing time: Wed 30 Apr 2025 07:00:53 +0000
Manifest this update: Wed 30 Apr 2025 07:00:53 +0000
Manifest next update: Thu 01 May 2025 07:00:53 +0000
Files and hashes: 1: SUUG2kKjexSvWz7hisQBB7MKXJ4.roa (hash: bTiVKxnx7l7XrKQSBNs5e26ay+4FQ9U506Q1Nlisl1M=)
2: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: GB4EHTxlyaQvb+aSncN7cGNOyrqJ3LFLdgiqptf/1Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:98:7d:65:a7:95:4a:1d:63:49:38:93:05:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Apr 30 07:00:53 2025 GMT
Not After : May 1 07:00:53 2025 GMT
Subject: CN=000f3c500da5565acb542691d2629236e7c8e019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:71:00:8e:72:e0:25:6d:96:f8:21:a1:3b:5c:
24:db:d7:15:d0:b5:55:95:90:01:36:35:1c:7e:2b:
2a:45:52:f6:2b:7b:cb:2f:19:2a:d8:ca:a4:86:c4:
c8:41:a4:88:a1:eb:7c:64:e1:56:87:c2:d5:54:1e:
3f:c7:e2:c4:0a:c1:5f:c9:9c:fa:47:37:37:f3:dd:
4e:7f:38:dd:bd:6a:90:09:2a:11:24:79:48:6a:c6:
b4:28:2b:af:da:6d:e5:7f:43:78:99:f8:55:a8:75:
3a:e4:85:82:de:c7:14:49:ea:7a:5e:70:f8:c2:db:
a6:d1:fd:a2:e6:75:b1:dc:02:be:db:b8:06:c0:c8:
c7:dd:95:22:9a:d8:1d:20:63:54:30:a2:c2:d6:2e:
d9:ce:f7:3c:c0:76:10:de:5d:b5:bd:ae:24:52:d0:
b2:4c:ae:30:e7:49:43:99:f4:96:be:f2:40:61:6b:
ee:c3:4f:42:29:84:df:74:99:17:76:df:32:ce:5b:
89:1e:e0:b3:d9:92:14:72:e9:b7:af:16:3e:9c:4f:
12:1e:39:b6:59:cc:3c:66:f8:4d:8d:7a:4c:6e:c0:
73:f8:83:21:50:d8:02:ce:49:13:ca:ff:f9:c1:78:
fd:6f:ca:7f:62:35:ec:05:f9:b1:91:0e:ed:2c:41:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:3C:50:0D:A5:56:5A:CB:54:26:91:D2:62:92:36:E7:C8:E0:19
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:f9:22:34:84:ae:55:fa:5e:c3:7c:33:53:27:a2:b3:39:
88:7e:49:46:9c:99:f4:cd:cb:88:02:48:32:ef:ee:a1:62:78:
1a:99:89:0e:42:ec:2f:35:71:c4:92:38:b2:85:47:57:6b:e6:
91:0f:27:7c:79:3c:22:6a:9e:51:0d:fe:02:55:fd:3e:80:65:
f3:e5:79:83:21:a2:0f:c1:0d:8b:a9:68:44:80:90:ad:51:16:
dd:54:12:fb:70:b6:93:52:2a:69:16:81:57:11:36:a0:08:17:
e0:d2:1e:bb:fb:dd:9d:dd:e5:34:0f:ff:e8:a0:33:1d:1e:3d:
8b:b1:f9:34:3c:72:7b:d4:bc:51:fc:d3:a6:00:f9:68:5e:36:
fd:0d:81:dc:e5:04:7a:b0:5b:47:e0:b2:a8:64:fa:ce:cf:72:
55:ca:52:c1:dd:26:5f:14:11:51:44:5b:95:a2:9a:61:0d:b5:
19:0c:73:4c:e1:93:9d:e1:f3:39:56:8e:93:d3:58:b5:35:97:
62:0c:6b:74:b4:83:40:39:33:f3:98:8c:8b:2a:12:3e:94:74:
1f:22:16:9d:c6:7b:ad:2e:4e:38:70:a6:0a:e5:6c:44:5d:9b:
54:2d:7c:f3:95:55:f7:c7:97:5a:7b:21:4a:29:3b:44:41:1d:
d7:f1:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:57:51 2025 by rpki-client