Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: ev6g6B0SXa6+zPsOzS544NyJsWfJtpDnLqi9fjn1ZMc=
Subject key identifier: 19:3A:78:34:37:5C:F6:17:92:1F:B1:7F:00:AD:97:41:CE:41:66:CA
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019687DB7131C2AB1243B3A39CD14D4E2B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 03D5
Signing time: Wed 30 Apr 2025 18:00:27 +0000
Manifest this update: Wed 30 Apr 2025 18:00:27 +0000
Manifest next update: Thu 01 May 2025 18:00:27 +0000
Files and hashes: 1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: oFl4Ecx6uWPjUkVoD9uoNXdlHj1gELWEfWNkBjnlPuk=)
3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:71:31:c2:ab:12:43:b3:a3:9c:d1:4d:4e:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Apr 30 18:00:27 2025 GMT
Not After : May 1 18:00:27 2025 GMT
Subject: CN=193a7834375cf617921fb17f00ad9741ce4166ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:1f:e7:99:b8:70:50:9c:cb:85:4a:ee:17:
f2:3b:ab:00:1b:c8:09:ee:ab:85:48:6b:c6:c4:34:
8a:6e:a8:63:45:a4:6c:e1:79:db:f6:9e:d3:61:cc:
a1:a1:cd:5d:b3:00:3f:25:3b:f0:96:36:82:62:27:
ee:75:5e:4b:2b:b0:5a:bb:4f:83:30:43:e4:c8:69:
52:b8:e7:15:5d:b0:dd:88:bb:00:13:e1:91:72:90:
51:73:ef:cd:aa:cc:72:8c:dc:d8:f7:e3:35:02:ac:
b4:5b:6a:4b:58:83:32:71:8c:6b:91:af:68:f4:e9:
5b:69:57:7b:81:a2:26:2d:e2:e2:2c:14:4c:48:99:
b4:4b:67:81:cf:ea:21:7e:7f:c3:b1:a4:10:69:d1:
06:d4:37:e7:25:66:85:39:49:3b:37:0c:91:e2:9e:
22:19:79:31:38:7e:0f:f8:bd:52:57:fe:d9:eb:23:
32:1d:6f:68:4b:9d:47:85:12:86:36:7d:02:30:33:
80:20:c5:bb:b4:3a:fb:ee:59:aa:bc:89:5b:c3:bd:
67:6e:1b:35:44:b0:89:47:4e:84:f4:32:57:df:27:
7d:3f:47:e6:4d:f9:1b:83:61:44:47:22:17:aa:ee:
84:38:1d:ae:99:27:b5:20:ea:35:e0:5d:cd:86:97:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:78:34:37:5C:F6:17:92:1F:B1:7F:00:AD:97:41:CE:41:66:CA
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:44:29:0d:80:08:e3:cc:73:c2:a1:4f:cc:4b:e8:0a:95:39:
04:90:7c:49:97:94:8d:8f:0a:9a:7f:25:cd:00:05:41:15:d2:
1e:21:89:b7:14:4d:b6:84:e1:4e:75:51:07:2d:53:dd:4c:03:
a9:c0:bc:55:ef:a3:73:b8:d1:54:d3:c7:4b:09:bd:82:bf:43:
23:ac:d9:c0:72:20:73:a3:fe:20:60:53:33:04:0a:ba:28:74:
d7:ee:db:3b:d2:e8:04:72:f8:25:14:4f:30:9f:a3:66:45:a3:
40:3d:a0:50:c3:47:7d:98:e1:a7:69:51:d5:5b:8b:3d:4a:a2:
3f:70:f7:9b:b2:42:71:f1:14:76:b3:5b:67:63:a0:83:ce:81:
ad:9a:a2:dc:6b:f7:44:6a:0b:67:ae:2c:9b:2a:cc:8f:73:9d:
e8:3a:35:78:c5:85:82:7a:c1:42:ce:e1:94:69:dc:e0:db:a3:
20:53:21:94:17:7d:d8:ea:bb:f2:c1:67:e6:c0:6f:15:16:c7:
f1:cb:f6:cf:c8:73:40:8b:47:bd:5e:f3:7a:06:36:72:35:eb:
15:7d:cc:53:45:9a:93:20:f8:27:dd:58:ea:d0:e1:80:30:fb:
42:7a:95:4e:fd:b3:5f:30:e7:19:14:9e:7f:cc:63:82:a4:9b:
43:db:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:47:49 2025 by rpki-client