Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: hemT7VUYx5H7yuRnNEKGI8z/qj5F8vza79LIrfCr7w4=
Subject key identifier: A9:E4:48:27:68:1B:B4:34:FB:06:56:AF:3C:36:B9:61:5D:FA:1C:4F
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 0196ABB126ACF5C05553CB4472DAA5C731A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 152F
Signing time: Wed 07 May 2025 17:00:35 +0000
Manifest this update: Wed 07 May 2025 17:00:35 +0000
Manifest next update: Thu 08 May 2025 17:00:35 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: U6/qIUQrCvyGS0cRU1UMJHQ3fa0ezzetKgc0JGcKIw0=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:26:ac:f5:c0:55:53:cb:44:72:da:a5:c7:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: May 7 17:00:35 2025 GMT
Not After : May 8 17:00:35 2025 GMT
Subject: CN=a9e44827681bb434fb0656af3c36b9615dfa1c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:c0:e3:fb:9b:8f:cd:6e:67:eb:f6:83:ec:
c6:a7:89:da:82:f5:d4:ee:b0:1e:2a:b8:f5:77:33:
cd:1c:f7:bd:a6:a1:c4:cc:dc:99:d9:4b:a8:2c:20:
c4:03:c3:fb:d6:65:cb:a4:e4:84:9a:0e:17:ec:67:
ee:18:3f:f5:ce:0e:54:0e:1c:ba:79:a7:f8:2c:d1:
4c:92:b8:75:fa:b4:79:95:97:7e:b4:99:86:84:97:
1d:26:62:e9:0c:45:ec:87:44:84:9f:65:ff:70:c5:
2c:68:fd:b5:b5:22:99:65:61:e5:79:67:df:bf:50:
c2:5a:28:a9:17:0c:65:53:47:7d:9b:ad:f5:48:bd:
86:1b:bb:ba:07:bd:4b:00:82:06:34:c9:c8:ab:be:
ad:1d:1b:d7:12:08:ee:16:8e:a2:7f:16:d4:97:2b:
3b:e3:68:dc:a1:6c:55:01:49:7f:89:8e:e9:b1:2f:
3b:67:0e:77:de:70:0f:97:70:9f:ee:6a:8f:61:5b:
da:82:66:71:69:ae:5e:b6:ed:11:b2:ec:5c:f0:f7:
2a:e7:bd:51:2f:16:7d:cb:ac:d4:b8:42:b0:8a:70:
5d:0d:24:e3:ce:1c:99:62:00:db:4e:26:ef:c3:7b:
37:03:2e:97:c0:68:86:a9:37:87:fe:e2:94:b6:79:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:48:27:68:1B:B4:34:FB:06:56:AF:3C:36:B9:61:5D:FA:1C:4F
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:30:73:ac:aa:73:3f:63:c1:ed:26:7e:bc:ff:19:89:31:
68:26:4b:61:89:49:f0:37:c0:86:89:0b:2b:24:0c:e8:d8:94:
2b:41:55:cb:0d:90:c4:97:c3:ba:fa:d2:9e:c2:c1:f0:7e:6d:
17:ee:bf:bd:dc:49:58:9e:c1:f1:94:f2:f0:fa:c1:09:4c:44:
1a:7c:c6:0c:8d:7a:3e:83:5c:5d:e5:dd:3e:66:73:46:aa:2e:
60:19:c4:01:c6:2e:a7:a9:43:77:63:5b:42:2e:c6:db:ba:a6:
06:3a:38:84:e1:74:4c:51:fa:e6:ee:73:c9:f2:7b:a5:0b:10:
5a:21:88:67:b9:14:ba:ad:2b:b4:18:0a:1f:c8:ca:c1:eb:04:
0b:b1:b7:df:69:11:0a:93:86:f4:43:3a:97:8e:97:52:d9:33:
cd:a9:b5:6a:db:3b:d4:30:4f:9e:16:6b:99:7e:21:e1:05:cd:
b3:a2:eb:12:71:a2:e9:09:7a:08:f1:dd:08:89:77:b9:c2:cb:
f9:04:4d:63:44:02:6a:87:22:26:bd:99:fc:ba:66:37:7b:7c:
41:97:f7:65:da:91:84:60:1c:3c:f4:7a:96:5a:a6:92:62:7b:
ac:e4:00:58:92:5f:e2:91:3f:f5:14:b7:8b:ba:25:d7:3a:32:
11:47:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:03:36 2025 by rpki-client