Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: rYuZ6NW/M+ZryGp/OV6KNLlb24hNxPUSleKxfypAqdE=
Subject key identifier: 64:49:E2:E0:18:E2:58:E6:A9:3C:65:8C:14:BE:DA:04:FA:44:2B:21
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01967A8DA80C92CD12934198275E8A4AED20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 04:00:26 +0000
Manifest this update: Mon 28 Apr 2025 04:00:26 +0000
Manifest next update: Tue 29 Apr 2025 04:00:26 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: 4tqBx/QM1HUoLf03PqGjOQryTUl+ZDM9BBkK9FQxg0c=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:a8:0c:92:cd:12:93:41:98:27:5e:8a:4a:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Apr 28 04:00:26 2025 GMT
Not After : Apr 29 04:00:26 2025 GMT
Subject: CN=6449e2e018e258e6a93c658c14beda04fa442b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:34:78:ec:04:0c:a8:46:16:a5:ce:51:cc:
a0:43:11:0e:d4:25:df:0d:ad:10:7e:fd:97:1a:56:
72:b2:d0:da:96:e7:71:58:d5:45:34:57:a2:cb:ff:
bb:a4:9b:4d:18:2d:7d:a0:83:e0:e4:98:b2:dd:45:
e3:86:4a:c7:1c:35:88:12:86:3f:a2:d8:c4:3b:d1:
c5:da:1b:57:61:1f:c8:41:17:78:da:97:00:c7:8a:
80:69:ad:ea:34:0e:96:04:89:c9:d9:62:37:1a:30:
16:e5:8b:79:b3:19:9d:31:19:4e:bb:c4:66:2d:80:
69:fc:97:fe:c0:87:f9:3c:c4:e2:39:1e:09:53:1e:
f9:50:aa:13:a1:e8:a7:bb:1b:20:94:48:08:99:5b:
c0:d6:29:43:a1:30:72:ca:62:93:e2:57:10:f9:a4:
dc:e1:d4:47:12:07:08:f3:b3:e7:d2:91:15:76:a1:
d7:e7:a7:aa:d1:f6:f4:fd:6c:da:d9:7b:37:9a:19:
50:99:6a:57:a4:dc:bf:e8:9d:d1:2f:24:83:c4:55:
aa:55:04:dc:4e:f3:fa:24:e7:28:19:eb:fb:5d:ba:
1c:e7:74:5f:8f:6c:96:c9:b5:6d:ba:e3:60:76:32:
15:0d:b3:04:18:81:1e:c1:12:f7:64:15:ff:de:2d:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:E2:E0:18:E2:58:E6:A9:3C:65:8C:14:BE:DA:04:FA:44:2B:21
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:7a:fc:0e:4e:b4:3a:63:78:a2:df:b7:2e:01:5b:80:39:
7e:1b:a5:bc:3b:71:60:3b:08:b0:09:be:37:77:1c:d8:2c:a7:
9e:ff:e1:9f:f1:32:45:7b:e5:78:d4:9d:77:68:86:6a:df:d3:
d4:b3:ab:8e:a1:dc:48:74:8f:13:03:29:20:01:89:ff:a2:bb:
1a:78:2c:1d:46:4f:0a:fa:73:a8:31:3f:58:68:cf:e2:e8:88:
77:3f:e1:c5:b4:9c:13:ee:d1:b5:e1:b1:99:1d:2b:57:9c:2f:
5b:cb:ff:d1:3e:5a:b5:9b:36:5f:17:bf:ea:76:34:07:a6:e7:
80:dd:49:e0:d4:4d:0b:5e:4e:78:cf:d8:6e:50:7d:fd:ea:25:
d2:de:0d:08:a6:63:6c:28:df:59:ee:49:45:5b:c8:7c:64:e1:
f6:72:8b:df:1a:b6:62:20:09:f1:f7:81:77:23:8f:bb:26:c4:
84:1d:79:e3:85:89:fd:ec:dd:e7:ee:47:15:b2:a2:4f:28:d0:
9e:69:83:e3:07:59:da:a7:7d:f4:2c:48:4b:f3:b0:1b:6e:ee:
9e:bb:b8:8d:68:02:0a:d9:ce:bb:7e:f4:df:df:dd:c8:98:83:
65:0a:48:03:3f:6f:01:3d:fb:86:d5:ea:5e:05:47:ed:6e:7f:
3e:77:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:29 2025 by rpki-client