Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
File: Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft (raw, json)
Hash identifier: G8uQp0HJieYUwi5gISD8WVIK+znyEcZ72y7TRFrL//A=
Subject key identifier: 7C:8C:D8:BA:7C:EA:E5:47:73:91:20:EA:BC:DE:5C:C8:0C:9C:E1:6A
Authority key identifier: 4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
Certificate issuer: /CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Certificate serial: 01968134AA7D11F6DAE80DBE04C61C12DA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
Manifest number: 0439
Signing time: Tue 29 Apr 2025 11:00:34 +0000
Manifest this update: Tue 29 Apr 2025 11:00:34 +0000
Manifest next update: Wed 30 Apr 2025 11:00:34 +0000
Files and hashes: 1: Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl (hash: VG6aOQmaEdHLAml/Wxy4e29pCqn5a9f/EgmrSgP/8S0=)
2: VWcJP68R1iCD75ssSwFn6hz8CZY.roa (hash: 9It7diBDuI5/L54Ro2RJcj4yvJavFWDdkkIXSsptI6U=)
3: aSHknzRfo3ut4IdP4sDFiOtG6lo.roa (hash: P3VJRH2gCdGbd9jiYKekQElrMo005p0FNDq0qs/ZIaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:aa:7d:11:f6:da:e8:0d:be:04:c6:1c:12:da:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Validity
Not Before: Apr 29 11:00:34 2025 GMT
Not After : Apr 30 11:00:34 2025 GMT
Subject: CN=7c8cd8ba7ceae547739120eabcde5cc80c9ce16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:5b:71:cc:bf:f2:34:1a:fa:35:7e:dd:6b:
88:96:b8:35:ab:0e:b3:04:23:0e:40:27:01:ce:4e:
ad:65:24:d2:0f:44:a3:5a:3c:c3:3d:13:da:22:60:
47:d4:ba:e3:7b:17:97:0e:09:b0:36:d7:c7:dc:d5:
d0:0d:d5:5a:81:97:e7:86:41:d9:ac:b4:aa:74:c6:
31:85:11:97:f7:98:c0:a2:bc:e6:4f:ce:0b:7e:f2:
ad:b1:96:0b:b3:50:ff:51:5d:ca:b1:32:8b:7a:3a:
f1:de:b4:e5:41:bd:94:2a:7f:3f:5e:2a:45:ce:84:
e9:62:3b:13:80:6f:63:3d:45:6e:35:99:a0:b0:f0:
e6:63:f7:84:78:d4:18:83:d0:99:29:5f:a3:8e:23:
a4:d0:a2:a4:6c:3a:c1:a1:6f:0e:cd:83:91:3b:26:
16:1e:e9:3e:53:81:57:46:c7:d8:97:f8:ed:10:af:
75:0c:67:89:b2:11:0e:35:7b:ed:d0:f0:ee:25:cc:
e0:4c:62:ea:57:72:d4:1e:76:c1:c9:2f:58:9b:05:
44:ce:cd:95:e0:3a:98:66:28:4b:d6:6e:67:c8:d8:
17:9b:bc:2e:f3:62:39:0a:62:b7:fb:7f:0e:0a:e7:
73:9d:01:63:df:b2:0c:5d:f1:ef:65:a6:77:f1:12:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:D8:BA:7C:EA:E5:47:73:91:20:EA:BC:DE:5C:C8:0C:9C:E1:6A
X509v3 Authority Key Identifier:
keyid:4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5e:66:24:eb:5e:c0:c9:b4:b2:39:dc:17:1b:05:31:3b:8c:
c9:25:ef:ef:69:59:4e:6b:99:79:bb:76:61:ea:8b:02:c4:b6:
39:3b:17:f2:c3:fa:6b:63:d6:74:7d:81:c0:28:22:bf:34:27:
d5:58:f3:ab:5a:55:7b:90:67:13:a2:62:e5:6e:91:9f:68:72:
b2:65:aa:88:5a:42:72:43:8a:81:ab:12:54:97:04:28:4f:f6:
05:40:34:4b:2a:3f:dc:a8:9c:2f:c6:8f:13:76:ec:5a:a8:b8:
b3:af:f0:ac:91:27:d2:b9:84:b2:dd:69:0c:8e:ea:bb:f1:7d:
76:2a:a7:91:70:8c:6a:ef:4b:ba:99:8b:9f:16:8c:2f:b9:23:
8f:12:25:89:35:23:4c:d8:f6:4d:09:62:0c:f1:c7:82:e5:ca:
a7:b1:cf:1e:ed:92:45:43:a1:49:46:65:b2:cc:db:5d:9d:d7:
f7:7c:92:fb:8c:57:fa:03:dd:cf:7b:4b:83:ea:2f:47:90:9e:
3b:0f:ae:72:a1:d6:e7:4e:4e:25:de:26:44:30:56:cb:5c:df:
e8:4a:07:37:e5:c3:71:73:ef:a6:f1:01:51:2a:f9:23:13:38:
e6:90:18:75:bd:52:c9:a1:c5:18:8a:b8:2d:9f:ae:68:f9:cc:
66:88:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:24:29 2025 by rpki-client