Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: 4h8cROum8NFKhfc/j84kZiW+WVjac7S7XGKIVZCnwEA=
Subject key identifier: 40:1B:B9:82:9E:40:2D:73:36:54:B4:3F:6D:10:CC:B4:FD:94:D4:F5
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019671C22DF6ED7149DD199C5D9410E4BE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 11:01:13 +0000
Manifest this update: Sat 26 Apr 2025 11:01:13 +0000
Manifest next update: Sun 27 Apr 2025 11:01:13 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: HAejx7jY3yOrU1n/IbsKFG2vDT8dpm64htMPBhkn5iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:2d:f6:ed:71:49:dd:19:9c:5d:94:10:e4:be:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Apr 26 11:01:13 2025 GMT
Not After : Apr 27 11:01:13 2025 GMT
Subject: CN=401bb9829e402d733654b43f6d10ccb4fd94d4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:c1:07:f9:2f:32:e9:f5:27:64:0f:33:32:
f7:81:98:ac:62:4b:01:85:a0:1c:3d:7d:f1:aa:93:
ff:a5:87:30:f3:03:f2:0f:23:1c:9d:68:1e:6e:e7:
46:99:a7:f7:16:dd:ee:e0:59:22:53:ba:8a:d8:bd:
e3:69:dc:2d:26:6c:15:0b:00:00:d6:aa:52:54:3b:
35:0f:6b:52:2f:c8:b6:14:9d:18:d9:20:53:8c:91:
e5:5d:2b:8b:79:4f:2b:6e:dc:ca:ba:5c:4f:9e:50:
0c:af:46:46:0b:7d:f9:70:d1:d8:89:b9:66:d1:9e:
87:a3:54:24:a8:f6:dc:89:51:22:b4:c4:28:d6:7e:
27:1f:3a:55:c5:b2:83:63:77:c4:c1:3e:af:89:70:
25:7f:96:ff:c4:84:7b:ab:c3:77:e1:15:c8:9b:1d:
ee:93:34:88:d3:3a:32:45:ec:b1:35:ae:55:80:04:
96:5c:74:e0:f3:98:bb:ac:60:29:4a:c8:94:79:37:
2d:57:0a:b6:87:83:f4:b4:da:7d:77:18:8f:3e:6e:
95:4c:b4:9d:8a:2b:b4:31:c5:5e:91:71:01:b0:4e:
e4:e5:4f:30:2c:8f:06:40:1c:02:67:06:f3:87:a0:
1c:04:81:ba:b6:7c:e7:87:7d:4c:a5:b0:13:39:22:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:B9:82:9E:40:2D:73:36:54:B4:3F:6D:10:CC:B4:FD:94:D4:F5
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:b2:05:15:dc:28:69:b2:99:a9:63:43:b5:ba:40:f1:48:
af:d0:10:90:4b:cb:7b:2f:dc:bd:1d:d1:d2:4f:e1:36:39:95:
ab:91:0f:84:0d:b6:30:54:4b:82:86:39:35:fc:29:93:bf:05:
ca:a7:fc:8d:13:cf:8f:b1:d1:57:fb:63:f9:9a:ad:a4:0f:f2:
9e:a8:46:88:60:24:1a:6e:99:a7:c8:be:56:a4:80:4b:25:a7:
47:24:4a:1c:c2:7a:3d:4a:7c:84:7b:a5:b9:62:18:f2:d2:e8:
17:cd:bb:2b:8a:e3:62:2d:98:4b:46:d2:04:4b:aa:ca:36:d2:
ad:27:e7:e2:cd:10:52:cd:73:29:31:51:91:3e:76:7b:ac:ce:
db:5a:05:81:c9:37:12:32:0c:be:1b:81:e7:f1:21:2e:c6:f3:
e6:62:a8:a4:e9:5d:18:1b:9a:59:e3:9b:b6:5a:8e:d2:16:91:
a9:e5:e2:a7:53:0e:2b:a7:5c:7f:fd:9f:48:72:88:70:a9:5a:
2e:c5:aa:6c:3d:1b:c1:e7:34:46:ad:94:cf:3b:64:2c:3e:e5:
57:34:a3:86:d4:0c:89:a7:8a:15:b2:6a:97:27:f2:c9:b8:4c:
bc:61:37:06:6f:e1:87:0a:f5:73:68:ee:b6:1e:28:33:99:08:
fd:cb:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:07 2025 by rpki-client