Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: PhCSQp3ruN5Zci0fVS2IRf/JlDslYXrw/NbEjfM7dXw=
Subject key identifier: 4B:19:68:67:9E:DF:A9:2E:E5:41:EC:7B:0C:39:4E:B7:73:56:52:B9
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 01967E33565DA6811F4EAB8ABB0DEDA98773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1522
Signing time: Mon 28 Apr 2025 21:00:15 +0000
Manifest this update: Mon 28 Apr 2025 21:00:15 +0000
Manifest next update: Tue 29 Apr 2025 21:00:15 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: J2/YylkqUEqKxvY5mpX351ghZixI7jlbvBRln9SWAtU=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:56:5d:a6:81:1f:4e:ab:8a:bb:0d:ed:a9:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Apr 28 21:00:15 2025 GMT
Not After : Apr 29 21:00:15 2025 GMT
Subject: CN=4b1968679edfa92ee541ec7b0c394eb7735652b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:06:f1:8c:eb:89:87:d8:87:e8:d0:7b:d5:
1c:7d:0d:76:4e:cf:42:53:7e:44:45:8e:5d:5e:63:
e0:14:95:08:c5:b2:c4:5a:ad:73:0e:16:32:90:c0:
9d:b6:9a:2a:21:12:bb:61:97:f1:36:48:0a:e5:e6:
3a:ef:be:a7:0d:3a:74:7a:97:58:b0:8b:0b:da:54:
4c:d3:c0:64:45:4b:83:93:70:16:a6:83:0d:72:39:
17:69:7e:fb:b6:8f:cc:3e:a4:81:42:4a:3a:02:60:
19:97:50:18:2d:83:02:98:d3:8d:19:b8:8a:77:9d:
19:85:7d:e7:02:68:59:60:42:cb:83:aa:f2:35:45:
71:ea:25:03:37:02:16:2a:56:08:27:bf:e4:e3:1b:
44:b5:0d:ae:62:73:28:55:20:55:8f:7d:ff:fe:f7:
40:67:16:06:09:da:3b:8b:72:f2:46:e3:1b:e6:6b:
04:bf:ea:c8:e6:3b:d8:c8:89:5e:e2:ff:93:a3:d6:
b3:29:e0:c8:5d:75:ba:a5:c5:59:e1:af:5a:98:c2:
6c:9b:5c:b6:48:3d:fb:f5:12:05:cf:e8:25:bf:93:
06:c2:51:b2:78:68:57:a8:d1:b4:6a:26:95:a2:8a:
d6:4b:8d:27:32:4b:ec:fb:aa:d5:2e:82:c4:05:b3:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:68:67:9E:DF:A9:2E:E5:41:EC:7B:0C:39:4E:B7:73:56:52:B9
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e7:ef:6a:41:11:f6:03:73:ad:2c:71:56:29:69:c9:bf:dc:
f6:b1:b8:fb:d7:4a:83:4f:1f:13:62:7c:7a:b1:96:4f:ad:fc:
8c:ac:59:a1:cd:9c:d6:2a:8f:25:c5:23:b6:d9:88:3a:9c:5c:
ac:3a:1c:90:2d:cb:fb:0a:fe:dd:17:6f:30:b8:1a:06:04:d7:
f2:a4:53:3c:e8:f3:cc:4e:d0:e8:c2:01:e3:ab:f9:d7:66:ae:
d5:7d:4b:e5:8e:30:54:3f:84:12:99:45:c6:c3:9b:5b:7a:66:
12:f8:68:29:cf:d0:95:f9:6a:b4:a8:35:37:c4:58:f8:b8:50:
e2:88:14:79:ed:0b:0c:be:65:42:96:b5:8d:29:7f:cd:67:ab:
57:29:f3:2e:ed:32:4e:e7:21:a8:39:74:ad:d7:52:2e:28:4b:
96:5d:58:db:d2:9c:76:5f:1d:10:3e:0f:53:28:68:60:32:59:
82:c0:40:68:21:d4:b2:3c:20:1b:37:80:ec:f7:f8:80:de:e5:
25:ed:b2:a2:f9:13:c0:78:ef:be:76:1b:18:a8:84:c2:ff:b9:
73:5b:53:26:4e:2f:e2:09:5d:0a:3c:2e:24:c4:3d:ec:c0:93:
b3:ea:dd:2e:95:84:80:8b:e4:b6:53:71:d8:43:10:8f:b9:e1:
d5:a8:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:40 2025 by rpki-client