Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: Eo3upPp7msHid8eWamxC/Iw5jLdmRa0h4v+4KdTsHpY=
Subject key identifier: B6:F8:EF:E9:45:82:81:15:F0:09:97:EB:0D:F2:C5:04:26:4F:E5:9B
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 01967BA068EE308544F5F027549712989DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 09:00:32 +0000
Manifest this update: Mon 28 Apr 2025 09:00:32 +0000
Manifest next update: Tue 29 Apr 2025 09:00:32 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: 1Qr+w2dF/3EpXvHnJo0zvNFsIfJGMzTiD9yePebYCao=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:68:ee:30:85:44:f5:f0:27:54:97:12:98:9d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Apr 28 09:00:32 2025 GMT
Not After : Apr 29 09:00:32 2025 GMT
Subject: CN=b6f8efe945828115f00997eb0df2c504264fe59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:6e:07:14:de:6e:78:da:f2:b5:67:2b:46:
3b:e3:f9:fd:42:c0:90:bb:fd:66:fa:55:a4:a6:0a:
0a:c8:5b:37:4a:a6:b7:3e:e9:cf:f6:ab:79:19:11:
a4:3d:a4:1b:a0:1c:a8:5c:74:f9:75:c8:2d:0c:18:
91:dc:39:3f:43:1f:2e:0d:cc:46:4e:9b:0e:bc:ab:
dc:7f:b3:50:e7:c2:39:64:9e:6d:8e:cd:7f:16:af:
13:23:e0:5b:9a:fa:1a:26:91:fa:18:50:25:84:bd:
4f:ba:2c:15:3c:25:9b:48:6e:20:10:ce:74:ab:11:
7e:04:ab:4e:9d:9d:ff:35:37:de:75:b0:80:db:b9:
68:89:a9:58:6e:63:9c:ef:19:f7:39:be:c0:70:83:
62:ce:a2:2b:8d:38:31:5b:05:64:d9:48:d4:d7:bb:
64:ee:16:36:f7:f4:d8:c8:09:77:a7:a9:82:c5:6f:
64:d6:74:fb:3c:d5:91:3b:90:cb:d1:89:c0:d8:e4:
7f:52:5b:96:63:7c:9e:16:20:01:57:12:75:6b:76:
36:b8:b8:82:b8:22:5e:0d:b1:db:95:e3:16:45:83:
52:7e:01:96:b0:c4:f4:d6:71:f9:57:a4:91:98:85:
6c:96:7d:d0:6c:2f:ba:42:aa:2c:ce:00:50:92:2f:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:EF:E9:45:82:81:15:F0:09:97:EB:0D:F2:C5:04:26:4F:E5:9B
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6a:ae:72:40:37:29:ce:f3:da:92:ac:3b:7b:8b:6b:43:7f:
ea:16:f4:10:79:52:88:02:75:a9:9f:f8:c6:9d:8e:9c:96:b0:
5f:ec:95:d0:8a:14:0e:8c:8a:12:f0:f2:81:74:14:ab:c9:eb:
0f:83:09:88:31:0a:be:aa:80:ff:63:79:08:3f:90:cf:e9:57:
f4:36:4a:3f:f0:fe:a7:8b:39:c3:31:b3:4d:4c:84:6f:b3:bf:
d6:57:dc:cb:60:e0:e9:df:75:a2:31:10:00:f7:b8:31:ad:8e:
5f:0b:d4:54:1b:36:8c:2e:b7:36:be:87:92:23:2b:61:78:84:
66:44:d8:fb:db:99:c1:8d:4c:d0:08:8f:10:90:49:5a:1c:d8:
24:47:45:a9:ca:65:e6:c1:c2:eb:ad:14:f2:2f:0f:4e:b9:48:
7d:58:d5:58:88:89:92:c7:2f:00:58:72:f1:8c:b3:0d:a5:e9:
ab:85:51:61:97:50:08:d5:4b:21:2f:66:1c:1f:87:5e:d3:ba:
65:c7:91:f6:2a:a4:06:00:6e:15:d7:fd:dc:55:9d:04:ce:22:
b4:52:2c:ff:3b:fd:40:4e:11:01:70:a1:25:b9:58:1c:cb:c6:
e6:fa:8e:a5:93:7f:e0:77:dd:9a:85:52:3b:de:fb:4f:14:e2:
52:e3:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:53 2025 by rpki-client