Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: N+J+vpSctvjWOj4EhE/IClWIBlk0p00gkFyRzYUj8uQ=
Subject key identifier: F0:D5:00:A3:A4:DA:B5:1E:5B:D9:EB:49:ED:2F:CD:D9:33:56:E1:74
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0196816BD6E151281E0BCA6D3EAB32457E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0B8E
Signing time: Tue 29 Apr 2025 12:00:50 +0000
Manifest this update: Tue 29 Apr 2025 12:00:50 +0000
Manifest next update: Wed 30 Apr 2025 12:00:50 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: MprETwi3eitdhDlEtDu5TjpPxfY65LWHU7IN+fUAoVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:d6:e1:51:28:1e:0b:ca:6d:3e:ab:32:45:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Apr 29 12:00:50 2025 GMT
Not After : Apr 30 12:00:50 2025 GMT
Subject: CN=f0d500a3a4dab51e5bd9eb49ed2fcdd93356e174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:b3:5b:56:23:fc:db:e5:d7:ad:1f:9d:59:
c2:3f:65:5b:88:9e:7e:44:12:ef:b7:79:fd:c5:36:
dd:d1:4f:3e:31:21:16:7c:16:47:5a:42:2d:df:7e:
2f:06:59:fe:dc:ec:50:46:b8:21:88:a8:2c:11:fb:
13:6a:d5:32:83:e6:9f:37:85:a3:90:1c:23:0d:e1:
31:29:5e:81:24:0e:fa:78:51:94:09:22:98:f7:7b:
a6:13:fd:10:a0:f9:17:6a:33:f5:19:3e:82:a0:8d:
a2:41:e9:ed:35:25:6a:1f:87:3d:b4:ad:43:65:e3:
3a:6c:4b:6d:82:0c:f1:e9:83:3f:73:9d:21:a5:e8:
f2:61:01:64:79:2c:93:d7:1a:90:07:12:8b:86:ef:
aa:86:62:bd:f0:0d:ec:63:ec:32:61:d9:d6:95:08:
b8:19:32:b8:57:28:39:43:dc:31:1d:5e:cd:2b:11:
13:87:bb:cb:5a:2e:eb:7b:b6:81:12:75:8c:f4:fb:
25:38:99:44:d6:7a:ab:26:6f:00:6e:6a:2d:99:c1:
65:5d:37:b0:a7:f0:78:37:4e:25:6c:8c:e7:82:36:
23:a6:f9:ca:eb:97:b3:5f:53:39:af:50:95:fe:c7:
46:dc:36:f7:25:36:ce:8a:04:b1:1b:f9:1c:b5:b2:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:00:A3:A4:DA:B5:1E:5B:D9:EB:49:ED:2F:CD:D9:33:56:E1:74
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:b0:ea:ac:40:ec:a3:71:19:c7:82:8a:a0:dd:5a:42:00:05:
97:8c:36:5f:9b:4a:19:3e:57:80:90:05:c6:26:dc:7f:83:a9:
da:80:d5:cd:e2:f5:28:11:95:9f:01:fa:bb:67:44:00:50:59:
9b:89:0f:b5:7d:05:0f:92:96:86:eb:28:5a:60:f2:83:3d:28:
be:4e:bc:91:20:f1:4c:9d:a0:de:10:8c:74:78:e0:91:63:d0:
68:1d:05:51:04:ee:86:a6:30:5b:eb:13:b4:fb:c8:8d:4e:3c:
65:2e:ee:bb:b4:ab:43:fb:d0:90:bb:ec:fd:ba:6a:16:f9:b1:
78:6a:fc:2e:d1:f2:1f:97:03:ef:05:e1:65:75:3e:6b:c3:84:
ae:74:ea:63:c2:69:58:ad:3a:bb:8c:c4:e3:a7:0e:35:aa:7b:
01:c7:37:36:a2:10:9c:a5:25:67:4a:47:ea:ea:7b:72:fc:69:
83:75:dd:ed:c6:a0:84:10:24:c9:ab:e0:57:6f:e5:a7:03:25:
be:a4:f2:32:4d:07:bc:6f:f7:eb:b3:88:ff:ae:f3:88:bc:23:
f7:f9:c3:d6:16:66:d9:3f:f5:5c:2f:8f:5f:46:86:89:09:3e:
47:82:1d:11:f5:6d:53:52:1e:b7:20:ac:64:3a:8e:71:8b:42:
ba:d2:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:33:14 2025 by rpki-client