Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier: aB3RgY5IALCs7xR0I7Bs280316xGfqJq6cM94cDGFEg=
Subject key identifier: C2:6F:F8:54:7E:96:59:10:D9:CC:77:AD:2B:EA:CE:C2:D7:18:33:F2
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial: 01968210518C07359C9CC2905EA5FFA02B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number: 149E
Signing time: Tue 29 Apr 2025 15:00:29 +0000
Manifest this update: Tue 29 Apr 2025 15:00:29 +0000
Manifest next update: Wed 30 Apr 2025 15:00:29 +0000
Files and hashes: 1: 8G7CKA2HbZHRoNb9HaqBloS90vU.roa (hash: lDvm+Nsn5gFxpzefNnpEbQ5VLuNGtuV4rwnVopzkwq0=)
2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: JZnvirvJg/AUKk6npfJqjRmTCZB+R0USzJ4mECjj5FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:51:8c:07:35:9c:9c:c2:90:5e:a5:ff:a0:2b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Validity
Not Before: Apr 29 15:00:29 2025 GMT
Not After : Apr 30 15:00:29 2025 GMT
Subject: CN=c26ff8547e965910d9cc77ad2beacec2d71833f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:25:41:c8:d3:e2:99:94:f4:0a:ae:03:5d:
53:29:3c:5f:d2:05:41:a4:ed:bb:24:61:52:d1:7c:
93:08:08:df:7e:5a:96:9d:c7:c4:96:4c:aa:84:e8:
e2:ff:21:bc:ae:1f:2d:bb:39:52:ca:70:ee:48:5c:
5e:c2:e7:46:ba:a5:6f:a2:d1:f5:8d:7d:52:78:4f:
e3:fe:7a:b2:90:41:7f:8a:1e:2a:d1:e0:5a:21:ba:
aa:8b:f3:fa:04:68:c9:0f:99:ee:68:9c:0c:cb:d3:
8a:18:df:38:7d:c3:fd:f1:72:19:e7:ab:67:2b:b6:
92:63:6b:16:3e:64:90:05:d9:9b:25:bd:b4:d2:69:
6b:40:aa:21:d2:81:20:e4:62:20:96:38:53:5b:af:
69:fc:e3:d9:11:ba:1f:6c:31:69:81:b7:3e:42:12:
1f:df:43:d6:3e:cb:f8:24:64:fc:65:64:8f:a5:d5:
5a:05:5b:a3:00:74:c5:dd:49:1e:66:19:e0:ae:ac:
a2:f3:d1:12:ea:6d:72:aa:6a:e8:2e:2e:69:df:7a:
f8:f1:54:07:75:1a:0d:2e:e4:c8:0f:68:00:d9:b6:
1c:f8:37:e0:2e:fa:b6:80:f7:cb:73:41:f1:a7:58:
4d:48:12:bf:1f:89:1f:aa:0d:8d:63:f9:87:44:88:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:F8:54:7E:96:59:10:D9:CC:77:AD:2B:EA:CE:C2:D7:18:33:F2
X509v3 Authority Key Identifier:
keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c6:3b:1a:9a:a2:2d:8a:28:26:e9:93:91:d0:5e:32:3e:07:
fe:7a:89:18:46:41:11:5d:fb:62:c0:03:0d:0b:af:89:97:75:
a8:6f:45:32:85:4f:fa:eb:7b:c2:f8:c6:68:bc:96:43:bd:ff:
bd:43:ce:3f:8e:08:9a:26:e2:01:5e:e0:0e:65:d2:fd:fe:fe:
42:0e:2e:f8:ce:35:8c:9a:bb:0e:1b:fc:02:9c:21:16:12:7a:
06:96:0a:2f:97:8a:c2:df:60:09:4c:39:a0:81:68:23:b9:79:
aa:4f:ff:e4:a6:7e:ca:53:17:ff:e4:b1:e3:6a:29:ab:bd:c4:
c6:5d:6e:a8:bf:0d:d0:95:40:86:e0:70:e7:d0:a7:fd:39:51:
99:9d:3a:eb:3f:26:7e:56:84:5e:eb:47:f7:20:75:38:24:62:
48:45:4c:79:41:7d:69:d4:09:3f:32:05:34:38:e8:e5:69:f0:
96:e9:a4:23:b7:31:2a:0e:8f:1f:28:c8:84:fa:a7:2d:f5:f0:
15:65:fc:c4:64:2c:42:94:33:fe:fc:5d:92:3c:23:4b:f6:97:
26:e4:13:f1:d4:fa:f5:df:0a:92:b9:79:db:8e:9a:79:29:e4:
e8:ef:b0:4e:21:30:a2:9d:73:af:0c:a4:18:11:66:e6:7d:4d:
7d:dc:79:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:21:37 2025 by rpki-client