Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: oAAMAm74OzoOMer3H4cIzuDCy4mbvrJg896QqxjMo6g=
Subject key identifier: D3:99:1A:6F:51:1E:65:5E:EB:D2:B2:10:32:63:0F:B6:22:72:90:13
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 01967D8EB1230389FB4B2466A7AE8688D330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 0491
Signing time: Mon 28 Apr 2025 18:00:25 +0000
Manifest this update: Mon 28 Apr 2025 18:00:25 +0000
Manifest next update: Tue 29 Apr 2025 18:00:25 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: nzdjxAb7ZYbRU7bHq7gXkz/JwDdf4VyZq1jHkN4AhqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:b1:23:03:89:fb:4b:24:66:a7:ae:86:88:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Apr 28 18:00:25 2025 GMT
Not After : Apr 29 18:00:25 2025 GMT
Subject: CN=d3991a6f511e655eebd2b21032630fb622729013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:38:a7:fe:52:5c:ce:af:af:5f:d4:b4:35:
a0:71:8e:99:bf:0c:7d:a5:83:7b:a8:1e:6d:86:11:
b9:ad:ea:7e:31:09:d4:4b:ee:15:14:67:22:b1:42:
85:f6:9d:e1:80:ff:0b:a5:07:4a:ce:27:34:63:70:
6e:a5:5a:83:8c:40:a6:6e:d0:8a:93:4e:c5:e7:d8:
1d:4c:ae:7e:ad:43:bd:25:05:ac:ab:91:d6:7c:92:
d1:09:81:ff:d3:f3:59:97:9f:d7:51:9c:5c:7f:25:
a8:90:11:91:e0:37:2d:72:92:7d:bf:60:60:60:d8:
e4:e4:9c:c2:94:a9:c5:88:71:e0:39:41:e7:f2:9c:
ca:47:73:05:60:23:94:d9:8a:d0:cb:d6:88:33:8b:
9a:41:25:0a:20:29:56:bd:2e:f7:e5:bb:89:07:41:
3a:ed:52:a4:3f:b1:33:b5:f6:7e:6d:b7:99:f1:92:
71:a4:41:41:88:63:d9:b6:e2:1f:3f:3f:07:fb:86:
5a:f1:11:46:37:25:dc:1a:0d:02:f9:fe:22:f7:7f:
e4:91:5a:26:ee:97:b7:de:f8:47:d2:c9:19:7c:d3:
9d:1f:31:2b:df:e7:0c:d1:e1:7f:5e:48:90:93:70:
71:15:3a:c8:b9:f3:4a:0e:8f:99:61:60:95:23:2a:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:1A:6F:51:1E:65:5E:EB:D2:B2:10:32:63:0F:B6:22:72:90:13
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:72:de:8b:86:65:a5:e9:2d:02:2c:aa:94:6f:29:62:b0:e2:
a8:0f:52:d3:3b:53:fe:6f:18:1a:c3:93:12:9a:4e:a0:00:84:
4b:93:34:13:16:d2:2c:29:ab:49:21:80:ef:cf:ef:f3:da:53:
3c:41:9e:ef:88:37:12:08:c1:a1:63:d7:b2:23:8f:dc:3f:35:
a4:74:3e:d8:e2:23:5b:a4:0a:a1:b1:20:76:58:c4:5e:ed:fc:
1b:43:b9:de:54:78:96:fa:40:c5:9e:95:42:2c:23:87:bd:cc:
ae:ac:53:c5:28:f6:70:44:df:4d:06:a2:99:71:67:8a:6d:a5:
39:d6:d7:62:4e:07:8d:97:c9:63:89:78:b9:e9:a8:32:24:9d:
34:4e:80:f8:d8:6d:c0:9e:62:16:6c:e5:6f:a1:bb:14:a9:73:
db:f7:18:30:2a:7a:2f:d5:d2:27:df:70:38:77:4c:ef:2c:21:
d1:03:b2:68:46:8c:c9:c6:fd:7f:da:20:d7:17:09:02:a3:2a:
2d:59:67:61:19:62:9c:33:5d:c7:f6:b1:dc:74:df:17:c9:11:
25:d4:eb:33:6d:0c:7b:16:65:de:18:f1:3a:3f:fc:09:e1:7e:
87:84:fe:49:f2:b6:6a:a8:76:7c:e5:d5:1c:73:37:d8:e3:50:
67:9d:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:43:00 2025 by rpki-client