Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: cEmEp+R3WjbDkiC2M17et2RplKIhjS6JXJ88OjTZeTY=
Subject key identifier: F7:B7:7E:14:84:E7:08:21:EF:C8:26:C6:C2:AB:01:B6:D6:54:D8:50
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 0196805929B5E2651469B8255310FAB49525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 07:00:49 +0000
Manifest this update: Tue 29 Apr 2025 07:00:49 +0000
Manifest next update: Wed 30 Apr 2025 07:00:49 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: TsrbMWjVSJgFO7oUCMFoq8OsfTCIiu0LKNyasQ4ZqjA=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:29:b5:e2:65:14:69:b8:25:53:10:fa:b4:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Apr 29 07:00:49 2025 GMT
Not After : Apr 30 07:00:49 2025 GMT
Subject: CN=f7b77e1484e70821efc826c6c2ab01b6d654d850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:b2:10:62:61:d0:42:d2:9e:2d:fc:2f:59:
77:60:87:43:2a:aa:dc:60:b3:a1:d9:e3:c5:92:76:
58:9c:88:ae:21:36:c2:dd:ed:7c:92:79:a3:fb:d1:
df:5b:65:ae:a8:10:fc:21:1e:e2:70:25:2b:61:22:
bd:36:ec:e8:f8:84:36:8d:06:58:5f:35:69:95:3d:
73:82:93:dc:04:f4:04:01:8d:76:f1:f0:99:11:03:
09:75:7f:ac:90:70:87:1b:b2:db:91:46:ee:68:f6:
37:81:72:b1:1d:99:be:64:5c:97:9f:db:a3:5a:64:
7b:87:81:fa:fb:a2:e2:a2:0a:8b:98:fc:2b:d5:b6:
4b:3b:78:53:9f:ed:4a:29:86:20:7f:e1:a0:5d:38:
42:4a:69:f1:c5:d1:bd:8c:7a:63:65:ab:4d:cb:47:
d7:7d:c8:9d:7a:fe:01:a5:58:db:04:46:05:0a:53:
aa:ff:b3:10:10:ff:49:c2:20:c7:f3:67:29:8b:61:
68:9a:a9:30:29:93:ba:a1:8d:c5:7a:49:9e:e9:70:
7c:bb:8d:51:19:a0:aa:61:c0:60:fc:c6:e0:6f:66:
8a:bd:2f:24:ca:bd:ee:0f:d0:2f:04:c1:f9:b2:af:
11:ac:85:12:02:36:87:4a:ac:ee:3a:24:e1:d3:66:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B7:7E:14:84:E7:08:21:EF:C8:26:C6:C2:AB:01:B6:D6:54:D8:50
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a9:1a:3e:0b:c0:6f:23:e3:53:91:2e:d9:56:1e:ba:6e:fe:
fa:63:4c:26:08:f6:67:55:ad:75:e2:1a:2b:af:88:ed:73:ca:
59:92:1d:6d:69:b5:53:2f:2f:7e:62:44:6d:02:b5:45:d9:e0:
83:1e:dc:88:7d:5c:1c:b8:ed:a3:34:11:ac:ac:1f:fc:91:83:
e6:9e:5d:d0:be:18:09:86:68:74:83:fd:3c:d6:fc:42:1b:0a:
31:f0:ca:95:7c:e8:64:a6:72:7f:0e:72:51:dc:e4:6c:f3:ce:
2d:02:28:2c:0c:50:67:35:f5:76:f5:78:60:a1:a7:1e:47:6c:
0c:40:f5:93:8c:28:4d:2e:27:98:b4:33:2e:1b:0d:da:52:ee:
6e:d3:88:59:b9:ab:dd:a2:1b:b9:62:85:ec:77:1f:08:1c:21:
e3:90:be:53:db:ec:3f:44:61:24:1a:89:5b:86:b8:72:d1:a3:
01:f3:23:da:ae:9b:c2:50:8f:bd:04:2f:d4:7d:80:3c:49:fb:
3d:5d:34:e1:1d:3f:03:46:36:04:a7:d9:d0:23:9a:8e:b9:35:
2f:2f:98:3e:07:cc:9f:21:e8:3b:d7:ed:24:ec:54:ad:60:0a:
8a:27:f3:41:58:9a:0d:b3:02:f1:30:d2:22:3d:55:f2:57:2a:
85:12:c6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:07 2025 by rpki-client