Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File: TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier: 9s+YvHR44ZD240uNewqRRmMwA2bYQA9tZY3tOrdJ3sM=
Subject key identifier: E5:4E:52:F5:79:4F:C5:0A:7D:1E:AD:93:C3:B4:89:BB:15:DF:C3:93
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 0196797B52DCB5EDBFD2E9B4A9FC9901C48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 23:00:47 +0000
Manifest this update: Sun 27 Apr 2025 23:00:47 +0000
Manifest next update: Mon 28 Apr 2025 23:00:47 +0000
Files and hashes: 1: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (hash: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=)
2: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: IdRdqutEKvSxl/GsDOZVklILquGCsEAglZJPPKT781A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:52:dc:b5:ed:bf:d2:e9:b4:a9:fc:99:01:c4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: Apr 27 23:00:47 2025 GMT
Not After : Apr 28 23:00:47 2025 GMT
Subject: CN=e54e52f5794fc50a7d1ead93c3b489bb15dfc393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:be:0f:d4:07:a4:9f:d0:df:03:ea:c3:60:
97:14:e3:5a:a0:b4:c8:95:86:b6:0f:c9:a0:81:3d:
a1:48:86:ad:b6:a9:99:6e:96:eb:e0:8d:66:25:82:
da:5f:9e:67:57:04:20:4a:1d:9d:64:c2:50:77:48:
42:03:3a:c2:46:e1:f4:b3:7c:8e:03:f7:04:ba:00:
d5:4c:62:b5:b2:b2:c3:18:61:d8:91:59:52:d5:d0:
d8:93:b8:aa:6a:76:6b:35:97:b1:09:d1:9b:e7:3d:
7e:bd:c2:08:b3:cf:72:76:32:33:1d:fd:bc:60:d2:
cd:4c:c3:5c:cc:75:a0:f4:52:be:f1:90:cd:40:d9:
fc:17:ab:e9:1c:27:1d:35:8a:fd:43:0d:35:51:92:
ab:87:f0:eb:ac:54:7a:08:55:94:86:7a:29:6c:a8:
15:68:ac:ee:0d:1b:68:36:75:93:cb:8a:d6:ae:d2:
27:e1:a3:cc:3c:b9:25:70:e6:8f:04:8a:f8:64:fe:
f6:b9:0e:76:0e:c4:99:e9:aa:5d:55:e9:96:14:bf:
66:5e:95:f6:7e:47:ba:7d:63:bd:4f:74:a2:6b:ad:
4c:a0:6b:33:59:15:07:59:8e:b4:51:11:b6:07:23:
86:67:cc:b0:d7:25:9f:8f:b8:6b:f3:41:e6:40:bb:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:52:F5:79:4F:C5:0A:7D:1E:AD:93:C3:B4:89:BB:15:DF:C3:93
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:12:f0:43:e2:dd:ba:25:43:a6:d2:6e:ac:55:d2:71:f1:
59:cc:2e:34:09:6b:c6:f0:44:91:59:de:f3:38:e1:16:3a:64:
d5:2a:95:c0:c8:d9:ff:dc:8d:bd:87:f7:3a:bb:86:bc:8c:61:
7f:84:5b:45:dd:03:c1:3d:7f:16:1f:33:51:81:94:c3:80:6b:
8c:c8:d2:a5:92:71:a3:ea:aa:71:de:46:17:41:c9:33:aa:a0:
a1:8e:9b:1e:f0:c5:37:d2:15:c8:8e:e6:53:f9:d6:8e:ac:bd:
ce:c0:07:04:dd:c7:65:c6:9a:c5:55:e5:05:4d:53:a2:74:5b:
76:75:d2:dc:d5:28:a3:45:fb:fa:b6:11:73:0c:8e:bb:8c:e8:
ec:6f:bc:b4:c0:d3:c9:0d:ad:ca:d4:e1:d0:12:f8:0d:c3:b1:
d4:dd:ef:6e:9d:2e:97:e9:ce:dc:b9:82:de:16:56:b4:35:5d:
21:57:9b:45:de:8a:46:0c:3e:61:3d:b2:a4:2c:93:dd:c3:72:
bb:86:8b:3c:23:29:8f:da:4b:a6:c9:52:5f:5a:98:2c:2a:0f:
33:9f:e1:a3:44:06:5c:ed:c7:dd:a1:e4:85:72:41:5e:ec:4e:
b8:26:fc:20:f1:d1:d4:74:05:08:d8:34:b7:91:fc:90:a5:bc:
63:c4:fd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:01:15 2025 by rpki-client