Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: dGGIIOm5W0MCZblHCa6nfAD+tOXbSMnpfAv4dK0nT9s=
Subject key identifier: 9C:7C:72:37:A8:58:F2:9D:EB:C7:0A:91:F6:2F:96:CC:22:A1:3F:FA
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 0196756748A0B2800DD286FAB20F66BFB864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 04:00:25 +0000
Manifest this update: Sun 27 Apr 2025 04:00:25 +0000
Manifest next update: Mon 28 Apr 2025 04:00:25 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: DRgdAFknSERyrr+NMfUma/MWADFxS6fevk0Rn0GpgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:48:a0:b2:80:0d:d2:86:fa:b2:0f:66:bf:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Apr 27 04:00:25 2025 GMT
Not After : Apr 28 04:00:25 2025 GMT
Subject: CN=9c7c7237a858f29debc70a91f62f96cc22a13ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:63:35:4e:5c:48:ca:d1:ef:7b:df:7a:0b:
ff:dc:e6:9c:31:33:0c:fb:a9:b5:53:ea:42:d1:e9:
af:7b:b6:1a:1e:09:c7:8a:80:12:a3:a1:e8:8e:de:
54:3b:ff:9b:be:5a:d2:bf:a7:45:c1:46:c5:c0:ed:
a1:15:b9:97:f3:e7:50:c0:a5:79:a1:c7:23:b2:25:
2d:73:75:17:ce:3a:c5:65:80:9f:7c:83:d3:23:12:
af:7c:58:ca:00:ad:98:5b:e3:fe:3c:60:0a:df:21:
34:8f:38:36:ed:b5:af:11:96:2e:dc:72:aa:ba:af:
00:fc:25:74:eb:01:18:fb:c6:08:1a:07:9e:2b:f6:
70:2b:ed:6e:4a:7e:83:b6:83:3c:7e:8c:9f:24:92:
9a:34:57:66:27:d5:cd:dc:9e:8d:d6:da:b6:ce:e0:
04:b1:01:ab:e1:d7:34:20:55:01:b0:3c:1b:19:6e:
35:e0:5d:d4:8c:ea:4a:13:2b:76:5b:05:41:35:ff:
6c:a7:69:28:b5:a9:84:75:7a:e9:cf:07:79:cc:4e:
0d:fe:19:78:de:fd:4f:b6:3b:95:32:b5:80:28:25:
7a:64:0c:f2:f3:c0:d9:97:86:89:9b:de:13:1d:b9:
49:37:b2:fe:8f:2c:41:43:f0:7a:5a:0e:8f:f1:e0:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7C:72:37:A8:58:F2:9D:EB:C7:0A:91:F6:2F:96:CC:22:A1:3F:FA
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:5d:d7:21:81:6a:e3:51:bc:bf:8d:59:ef:3e:dc:66:41:
97:ac:85:47:d8:b4:c3:dd:93:e5:a3:9f:55:ba:eb:ae:5e:28:
cb:04:6c:c7:23:55:3b:29:b6:8e:64:b0:81:b7:f3:a9:af:d4:
d7:8f:ab:b2:a9:0d:bf:8a:f2:41:2c:c7:08:50:f8:0f:92:e8:
14:87:89:c4:99:6d:ac:b0:bc:e3:ff:cb:f1:a3:66:9c:f3:e8:
c7:33:ed:68:37:14:f6:64:78:8d:d2:23:6d:8c:f9:e7:c5:9c:
97:0f:7c:88:2d:15:c5:1c:2a:c9:24:38:87:5f:72:56:6c:b5:
cd:c0:38:a0:c1:de:20:9b:14:25:6e:fa:73:e7:c9:7e:6c:c5:
38:df:89:87:f3:00:ba:af:f7:d0:a3:b7:cd:88:72:67:85:a8:
04:73:2b:51:26:10:b2:88:72:59:64:22:f6:ca:57:f9:7b:73:
a4:28:1f:ae:33:aa:2c:bf:2c:f1:54:32:01:4a:df:22:2f:47:
49:6b:92:6a:d4:ba:6a:91:72:fc:e9:d3:9d:87:bf:69:2e:c6:
eb:f8:26:72:f8:67:e9:e7:c7:22:3b:1d:a3:f7:5c:0b:76:01:
76:3b:ff:99:a2:b5:af:bd:e0:a3:4b:df:a2:01:8f:af:95:40:
f1:c7:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:02:11 2025 by rpki-client