Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
File: TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json)
Hash identifier: 46oNg0xwzIAGNcrDMd4ZKV9c9x3da8lGra5nS1Ml374=
Subject key identifier: 41:05:15:27:A1:48:71:BE:2D:E0:FC:0F:28:82:5D:C6:B9:DF:A9:12
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 01968DA753CBAF6235BCC9ED60E63A175885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
Manifest number: 0B16
Signing time: Thu 01 May 2025 21:01:15 +0000
Manifest this update: Thu 01 May 2025 21:01:15 +0000
Manifest next update: Fri 02 May 2025 21:01:15 +0000
Files and hashes: 1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=)
2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: MCx8WvIDp9H/vvlToEw9QKtI6Xt0IltIhkfBOZt2pC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a7:53:cb:af:62:35:bc:c9:ed:60:e6:3a:17:58:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: May 1 21:01:15 2025 GMT
Not After : May 2 21:01:15 2025 GMT
Subject: CN=41051527a14871be2de0fc0f28825dc6b9dfa912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:02:3b:2e:40:e4:e9:58:c3:a3:14:b0:65:
12:5d:45:01:5f:f3:8d:f6:12:ae:ca:62:b7:f7:1e:
cd:cd:33:05:5d:1e:5f:58:c0:4b:ce:dd:45:5e:e4:
d2:07:b5:4b:f5:66:71:a1:b6:e6:dd:e1:2e:06:48:
2f:c8:bf:03:66:8b:ee:f4:2a:b3:8b:6b:86:e4:6b:
01:b4:3c:17:e1:cb:54:b6:8d:20:8f:c2:91:a6:e5:
a1:90:c1:28:b1:6e:55:27:89:4d:21:cd:46:cf:69:
22:6d:9f:35:82:b9:7e:81:f5:62:21:99:c8:f5:65:
ef:d7:e4:8d:4e:23:d0:40:eb:8f:88:8f:6d:fe:08:
85:d0:01:42:2a:46:ae:b7:f9:98:6f:32:a8:c3:76:
a6:c4:93:10:69:7e:a5:5c:ba:83:94:69:74:6f:6c:
fa:ad:39:0e:04:c9:de:cc:9a:43:c3:d8:6a:6d:41:
6f:64:ab:43:47:9d:a3:47:ac:54:d5:2c:a9:8f:c1:
7d:22:ed:fa:6a:4b:33:c7:fb:d2:2c:46:90:b9:68:
23:fb:9f:37:5f:e4:50:2a:cf:4a:8f:04:65:2b:d3:
fa:44:60:c6:d6:dc:70:2c:ba:81:8a:91:17:f9:2e:
fc:32:f9:47:a5:1b:5c:3e:a7:45:fd:1f:99:f4:da:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:15:27:A1:48:71:BE:2D:E0:FC:0F:28:82:5D:C6:B9:DF:A9:12
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:0e:43:59:a3:5b:07:9d:3f:eb:a0:73:ea:00:dc:fb:f6:
95:5e:03:4c:63:58:af:97:71:ca:94:49:6d:3f:f5:12:b3:40:
5c:86:63:40:ed:d5:e8:d6:7b:e6:fd:b5:64:9c:94:38:0b:d3:
eb:2d:44:6a:a3:21:2b:54:03:d3:a0:29:f0:57:1a:72:0b:cc:
dd:39:db:6e:47:41:cb:3f:3b:86:9c:13:85:e7:f5:7f:c5:af:
60:ad:a6:e4:a9:b9:79:8b:38:18:8f:f5:4e:b0:04:48:03:6c:
26:82:60:1d:8e:c5:87:09:a2:01:79:eb:47:8d:17:c2:3c:ab:
39:98:07:c6:82:b4:85:4a:54:74:c0:d5:24:e8:5a:48:e0:b7:
a3:3d:ff:6d:73:59:a3:7b:b6:89:89:17:24:9c:d0:1b:a8:4a:
99:b4:de:5a:4b:95:ee:1d:21:d3:07:c2:08:f1:3b:52:fe:69:
3b:c4:0b:48:5f:44:5c:c9:48:45:00:db:e5:5e:09:1e:e9:50:
b9:bf:4e:8e:50:c3:ab:17:2c:19:9b:2c:dd:e8:2d:3b:3d:d1:
2d:fe:61:0e:a7:ef:32:6f:48:21:a0:b9:39:c3:92:ea:1b:e8:
2a:33:26:35:4c:0e:90:06:d0:78:4d:3b:57:c4:0e:c5:2d:d0:
94:96:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:12:17 2025 by rpki-client