Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier: riunBLc/x9K0GU30PDLQdd6aL7L0my2+TPf4L6Za3jM=
Subject key identifier: E2:7E:9B:73:FF:74:0A:42:56:89:4D:BF:36:B9:5A:C8:E2:8D:44:11
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 0196729D43F2D4E7718FD74287226E55AAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number: 1522
Signing time: Sat 26 Apr 2025 15:00:31 +0000
Manifest this update: Sat 26 Apr 2025 15:00:31 +0000
Manifest next update: Sun 27 Apr 2025 15:00:31 +0000
Files and hashes: 1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: u+AJvqKKsY27Tzep08MFxuWa2BEnmSZWREqfmy4AGuo=)
4: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
5: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=)
6: _EI-DCtehkQJuSEZGP7N7ioX6Zg.roa (hash: uPXDlP3jf6C/noTaAyluTTWys0GZfmXGo9pUC5iBPfs=)
7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
8: tIGmW-EI2nrWk4qC7j5FTTvEcKw.roa (hash: KGRsrUvfWuNnw7M6OrT2LhIDhaEzLkzjBqoyrd5RfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:43:f2:d4:e7:71:8f:d7:42:87:22:6e:55:aa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Apr 26 15:00:31 2025 GMT
Not After : Apr 27 15:00:31 2025 GMT
Subject: CN=e27e9b73ff740a4256894dbf36b95ac8e28d4411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:02:22:00:aa:ec:8d:36:e4:71:5a:34:59:
54:44:9b:92:f4:be:18:f8:d2:67:2c:91:4c:b1:bf:
a6:e8:47:bc:8e:61:15:f1:05:f4:38:01:fd:cd:61:
7c:4f:3e:7f:49:7e:0e:6a:30:3e:05:63:c3:0f:c2:
a1:52:28:b4:5b:f4:25:a8:af:83:45:55:ca:ce:b5:
91:3a:40:81:9e:ff:ad:f6:51:ff:ab:a9:a3:bc:4e:
e0:ed:2e:24:3d:d2:e0:bb:bf:8f:b1:df:1e:d3:ec:
f4:a9:0d:25:27:08:5d:79:b2:38:81:a5:92:c9:87:
2d:20:81:94:3f:e5:eb:c9:95:37:26:f4:2b:53:b3:
76:93:15:b9:ab:91:98:96:73:cc:30:1e:70:ba:db:
42:5f:3d:93:f8:bc:fc:5f:68:df:d2:bb:83:b3:03:
52:28:d1:ea:46:8c:05:62:20:26:da:3d:33:9a:61:
0b:20:3b:ef:3f:33:0b:f9:b2:31:90:b7:05:30:57:
b3:a3:7a:ef:2b:e3:45:0b:2d:1e:97:df:ef:d9:6b:
ef:e8:59:3d:0c:68:48:8f:85:61:e2:f2:05:79:56:
60:5e:0a:e3:ad:1b:a3:03:ad:c0:6c:d5:a6:dc:37:
38:24:7a:61:94:5a:1a:c2:46:69:c9:ac:61:1a:5a:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:9B:73:FF:74:0A:42:56:89:4D:BF:36:B9:5A:C8:E2:8D:44:11
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:57:5f:4f:e1:0c:ae:d4:4f:7a:59:dc:8a:85:c5:33:45:ad:
a8:f1:1d:2a:36:e7:76:14:32:42:34:cf:c3:4c:ef:6e:51:27:
51:be:d8:45:24:a3:9d:c5:a1:7e:58:31:f1:60:e0:90:ba:bb:
1d:c3:22:66:70:11:04:8d:9f:d5:ac:05:b1:94:ac:42:39:b9:
fc:8d:60:ff:f0:44:18:47:3f:a8:cf:33:52:f1:96:8b:28:7f:
e9:8e:24:5c:26:e0:cf:ad:f4:33:08:60:c0:bf:ca:25:ea:1f:
7a:08:3c:1b:90:4a:39:b4:fb:c3:f3:d8:f5:95:17:ec:3f:f1:
84:1c:77:1a:c9:c8:78:02:fd:a8:1f:f5:e1:50:a7:64:72:c2:
ab:ef:75:0f:7a:50:c5:91:1b:a1:0e:2b:d0:8c:ec:ca:44:ad:
ad:91:80:ea:d0:22:c4:ae:ba:87:32:09:dc:7c:14:c2:9e:c1:
3f:ed:2e:33:93:1e:9a:cb:5f:1c:30:67:81:8e:c6:97:43:62:
fb:73:d0:f3:f2:69:20:f1:45:f3:b7:9b:21:5b:4d:d3:7f:7c:
4e:c1:82:f3:4c:0d:45:a4:41:9a:92:93:c8:4d:9a:84:7f:af:
f3:97:7c:12:28:7f:aa:b8:52:39:fb:cb:8a:6f:f5:c3:88:3e:
3d:40:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:56 2025 by rpki-client