Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: kU5jYBDZYWb0FLEl7s36+xaNeb3tFK4tLUJeumug/gg=
Subject key identifier: 92:FF:FD:F1:79:C5:DF:69:E2:CE:BB:D4:83:BC:85:5B:87:95:CB:49
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 0196771EEBF63048557F051B94B17C766715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 12:00:37 +0000
Manifest this update: Sun 27 Apr 2025 12:00:37 +0000
Manifest next update: Mon 28 Apr 2025 12:00:37 +0000
Files and hashes: 1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: 2PERyzP9t32XZZChNYImAMKlgetRPLkOhPgSjZ3j+u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:eb:f6:30:48:55:7f:05:1b:94:b1:7c:76:67:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Apr 27 12:00:37 2025 GMT
Not After : Apr 28 12:00:37 2025 GMT
Subject: CN=92fffdf179c5df69e2cebbd483bc855b8795cb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:cf:76:6f:b0:85:b0:fd:d4:3c:f5:34:f4:
81:a9:ca:9d:c4:ba:f0:f2:c7:78:01:10:9f:69:0c:
3a:38:4d:bc:a7:96:e2:f2:cc:82:19:02:df:b8:8e:
fd:71:ee:bd:48:14:dc:76:e3:ce:c7:94:08:56:85:
b0:5d:84:c9:ea:4a:5f:fe:66:15:b1:37:51:75:b5:
43:aa:e0:66:5e:aa:fb:aa:1b:c4:cd:82:db:e4:6f:
05:60:ea:de:91:1c:5f:e1:06:be:36:5f:bd:63:f8:
cc:5b:ab:33:42:1a:4b:e6:6a:83:89:9e:b3:3d:ee:
d9:06:10:d4:d9:87:b8:42:63:8b:a6:5c:43:3e:98:
25:74:c4:a2:ab:1d:dd:b9:e1:32:e2:bf:bd:51:d1:
76:c4:2c:9c:5a:b3:51:2f:20:cf:83:4e:72:5a:65:
b2:4b:c1:88:10:e7:42:28:d2:55:49:e6:7d:ed:7a:
db:6d:f3:ec:df:4b:6a:d3:2e:fb:52:2d:ce:23:9c:
9a:12:aa:0c:eb:da:0d:75:14:ce:37:db:eb:0d:8b:
da:28:1a:55:20:3f:0d:c9:3b:77:68:8a:14:9d:f0:
91:6c:56:c9:93:66:c7:73:af:43:83:d6:2a:5f:6c:
95:61:38:6f:83:98:9c:58:c9:f5:39:56:23:5e:08:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:FD:F1:79:C5:DF:69:E2:CE:BB:D4:83:BC:85:5B:87:95:CB:49
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:41:47:4d:25:f0:f0:0b:09:38:1a:cd:cb:9f:16:bb:77:fb:
f2:e7:3d:f9:be:90:fe:65:66:24:1f:19:c6:74:74:53:7c:06:
3c:48:4b:29:6f:c0:cc:ea:9e:67:0c:92:f7:de:05:3e:34:59:
48:22:53:00:a3:fc:00:00:1e:3b:7a:bf:48:7b:3c:87:ab:80:
92:56:8a:09:55:87:cc:b1:20:e7:da:88:cb:b1:ef:83:74:d4:
f1:52:4f:d1:8c:ba:17:78:9f:72:dc:c5:4a:6b:e8:46:6e:72:
5d:e0:e7:4c:9d:f1:9f:94:11:b3:cf:b2:ef:52:00:dc:b2:6a:
04:0d:4d:94:05:13:9d:02:29:96:e4:db:ab:38:84:26:87:01:
27:aa:88:43:80:e7:a2:01:a5:2c:a9:67:3c:b6:25:f2:57:7a:
b7:b4:d3:c7:9c:df:6e:5d:3e:3f:c5:49:76:ae:35:b4:24:2f:
61:95:57:2f:94:bd:e7:bf:90:9b:50:40:a8:1e:92:3c:27:99:
32:b5:26:6b:09:cd:c4:a7:00:c9:99:f7:bf:11:cf:39:01:b5:
b1:5e:a9:49:5b:0d:4c:53:5a:63:11:47:b6:69:9e:17:ad:c5:
02:fd:4d:de:19:0c:0c:37:09:d0:d0:d4:94:9d:b0:5e:98:0a:
06:3b:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:14 2025 by rpki-client