Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: h4+tYAejZME1Xe6VD7MbxoR+6s1kIhEWF8Jh5OkxGAc=
Subject key identifier: 72:FB:F3:06:D8:24:CA:80:D8:AC:2C:4B:D4:FE:BD:F0:5D:05:DA:0C
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 01967FB45EF564A04EC4B818EF155B10044B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 04:00:49 +0000
Manifest this update: Tue 29 Apr 2025 04:00:49 +0000
Manifest next update: Wed 30 Apr 2025 04:00:49 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: MT/kZn08la/YRZTTjsnh78i1yMgNFxXFC5dw2h0MiqE=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:5e:f5:64:a0:4e:c4:b8:18:ef:15:5b:10:04:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Apr 29 04:00:49 2025 GMT
Not After : Apr 30 04:00:49 2025 GMT
Subject: CN=72fbf306d824ca80d8ac2c4bd4febdf05d05da0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:de:5a:9e:10:5f:6a:ef:12:12:67:75:82:
ae:e1:ee:31:cf:c0:5c:ff:1f:fa:98:61:22:cf:61:
a0:d4:b7:e8:9f:c8:20:4f:16:84:c8:20:2b:6b:fc:
11:b4:03:5e:69:c2:f7:9d:a2:7a:4b:f5:fe:ac:fb:
b2:b9:d6:02:db:39:c4:4d:c2:4a:2b:fd:4a:69:d0:
dd:9a:f9:33:05:72:42:7d:02:30:81:f1:19:28:f7:
16:1a:31:ea:ee:e4:cd:17:6b:c6:d6:a6:61:d6:1b:
31:be:73:88:91:5f:e9:7f:6a:60:1e:bc:8a:45:99:
04:a5:b8:62:96:de:77:2c:88:9b:83:55:d3:84:aa:
8e:8f:ef:11:70:52:f7:6d:13:38:e9:48:a6:80:11:
31:c9:bb:26:c8:de:cd:7a:df:5f:2f:1b:fd:17:4e:
20:39:55:44:df:20:9a:80:6b:5e:28:0c:4b:a9:77:
44:b8:dc:fc:e0:69:a4:9e:83:ab:9f:f9:1c:ea:b7:
12:96:20:96:16:11:73:08:20:05:2b:30:30:b9:61:
54:61:ee:b5:e7:e3:d2:33:39:7f:23:f2:79:4f:83:
95:ac:29:17:e0:0f:c9:a1:2c:18:5f:b2:77:51:84:
3f:b4:0a:34:a8:7e:ac:93:c0:44:b1:e2:fb:1c:5e:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:F3:06:D8:24:CA:80:D8:AC:2C:4B:D4:FE:BD:F0:5D:05:DA:0C
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:b3:0e:fc:c7:72:b8:99:de:d1:db:dd:ab:44:19:d8:b1:88:
66:af:98:05:9e:79:c4:77:c3:bf:98:bb:92:f8:23:1e:eb:ca:
a0:60:11:1e:e4:5c:4c:84:55:96:58:cf:d8:bf:ba:89:55:d0:
89:f2:0a:75:6b:95:25:30:b6:94:a1:a4:9f:9d:87:47:39:be:
11:63:85:1b:12:1e:cd:27:f4:45:c8:32:aa:ae:b1:51:97:4b:
f2:cd:9b:b5:a5:b1:b5:f1:d5:98:42:33:3c:c9:a2:ee:6c:99:
59:7c:07:39:94:34:12:93:3d:bb:99:46:93:5a:05:c0:8c:3d:
e2:59:36:ea:46:2a:67:9a:89:bf:19:c5:bf:da:80:2e:45:77:
c1:83:fc:2c:60:8b:02:db:38:74:af:c3:ec:11:50:75:41:c8:
24:16:87:0e:72:e6:be:13:48:75:25:d0:ac:0e:fc:29:65:87:
5a:9f:86:16:be:15:e4:d8:06:a7:0b:cf:0e:4e:53:1e:b3:25:
1b:0e:5d:3d:7b:40:2a:02:b4:7a:d9:70:11:66:d0:92:cd:87:
6b:8e:3e:71:39:db:1f:6a:54:82:97:63:52:ea:81:e3:ef:4b:
b6:83:0f:46:c3:a7:f5:26:9b:64:89:a2:91:de:7a:fb:85:6a:
f1:44:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:46:35 2025 by rpki-client