Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: lojq5vAs5fgyRhTFKxikS7f0TZP989OdVCniCHl6Mww=
Subject key identifier: B3:25:74:00:FB:AC:5E:15:86:15:C1:05:A3:CD:39:B9:CB:D9:53:A3
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 0196A3531F6A778B1503AEE5DEED51C55D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 145A
Signing time: Tue 06 May 2025 02:00:55 +0000
Manifest this update: Tue 06 May 2025 02:00:55 +0000
Manifest next update: Wed 07 May 2025 02:00:55 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: IuDFYxZQt0wnyPxc5YVj/G6zdLim3LqRdHPC39ch7aQ=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:1f:6a:77:8b:15:03:ae:e5:de:ed:51:c5:5d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: May 6 02:00:55 2025 GMT
Not After : May 7 02:00:55 2025 GMT
Subject: CN=b3257400fbac5e158615c105a3cd39b9cbd953a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:78:47:ee:13:d4:64:ca:87:1f:f5:55:5a:
63:88:18:fc:37:6b:fd:f0:77:71:aa:0d:15:ba:b8:
ce:da:bc:40:9c:7b:43:2e:0c:40:47:de:de:7e:8a:
0a:2c:bd:1b:1e:56:a4:ea:3e:ac:ab:a8:40:e1:6c:
2a:87:22:40:dd:47:b0:57:99:c2:98:37:15:a4:d9:
3d:2d:3b:13:1a:a3:bd:fc:73:f1:4b:cd:69:20:fb:
99:5b:fe:3a:ed:fd:f4:53:92:3b:c4:29:dc:c1:4b:
b4:b9:b5:aa:92:6c:11:c4:e6:8a:9e:c3:41:36:3b:
5e:a9:99:92:a6:b9:e9:f0:cd:fb:e9:74:a8:43:1f:
59:36:13:94:8f:a5:64:4d:d4:ab:4a:01:cb:30:fc:
fc:f8:4f:c4:3e:2c:b1:bf:66:10:50:45:0f:9c:f0:
08:e1:cf:f2:4c:5a:7b:da:0a:f2:b5:2a:56:d6:cc:
fc:a8:dd:f4:7f:42:61:4a:8d:5a:ed:98:ff:5e:a2:
ba:15:68:69:61:96:da:ea:33:b1:7e:4f:88:d3:38:
2d:6f:1e:21:d4:d0:bf:ba:6f:58:61:b2:db:bb:fa:
27:39:c7:c2:19:69:09:f6:24:7d:d4:e2:21:ec:89:
58:e8:57:c2:6f:c8:ba:09:99:d1:5a:af:00:f8:16:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:74:00:FB:AC:5E:15:86:15:C1:05:A3:CD:39:B9:CB:D9:53:A3
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:16:08:11:d9:95:a9:f7:c4:30:9d:69:ef:da:99:3f:2c:cf:
47:44:1f:75:85:4c:68:0a:6e:3d:34:75:52:a9:73:d3:73:c8:
5c:3e:d7:e1:67:2d:e6:14:7a:1f:b0:96:6e:ba:c7:02:ea:87:
25:fd:7c:63:1f:b9:b0:51:f9:26:e2:e8:85:a5:78:f0:fc:96:
40:c1:13:30:d5:6e:89:e8:37:06:c2:89:ab:22:2f:f6:ec:31:
e2:1b:77:a8:b9:9b:1c:1b:1e:49:4f:09:bb:51:12:c1:d8:09:
4e:85:06:9c:41:9f:23:33:74:a4:9d:e8:8f:1d:c3:55:bb:01:
18:2d:97:58:0f:f6:4a:76:28:b2:01:2f:bf:ae:d5:c8:b8:b9:
5e:1e:77:2c:db:38:0c:c8:36:49:b9:e4:ba:35:35:7f:71:1c:
c5:b4:de:7c:95:6a:f5:9f:7f:3b:c2:ca:0f:a2:37:7a:0a:4d:
74:68:05:5e:b3:67:48:1b:22:a6:6d:60:90:c9:eb:c9:d6:63:
80:71:a0:e1:a6:c9:47:c6:99:59:92:20:c4:2b:87:23:ba:56:
09:34:c6:df:9b:68:a2:28:9f:9a:54:4a:4d:2e:e3:ee:ae:bc:
36:5f:b6:34:67:15:64:c5:50:57:a0:8e:e0:27:87:57:e4:9e:
ea:8c:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:28:51 2025 by rpki-client