Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: fZzuUi3+R6cUzFd7tkqedchCHvB8/D4JeS7mwsQYWWA=
Subject key identifier: 47:FF:6F:6E:E5:06:0D:B6:14:D0:82:CE:C6:3E:69:EF:17:1E:92:04
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 0196760D23F4AD23002B9FA35E5768C31546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 144F
Signing time: Sun 27 Apr 2025 07:01:34 +0000
Manifest this update: Sun 27 Apr 2025 07:01:34 +0000
Manifest next update: Mon 28 Apr 2025 07:01:34 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: gM10S62358wWxqDnC2DUWHj7pqS8GCpyuL/L3eDtoBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:23:f4:ad:23:00:2b:9f:a3:5e:57:68:c3:15:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Apr 27 07:01:34 2025 GMT
Not After : Apr 28 07:01:34 2025 GMT
Subject: CN=47ff6f6ee5060db614d082cec63e69ef171e9204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:e5:92:4e:66:cc:47:2f:f9:77:fc:b4:6c:
e8:f2:69:22:96:85:2c:c2:6a:09:ab:08:bd:15:a2:
01:11:22:92:45:29:93:2f:1d:5e:54:5a:6e:a8:f9:
22:54:c6:df:07:02:9d:b2:3b:88:f8:24:aa:95:40:
f1:5a:9b:ba:63:ab:f9:b6:56:42:70:cf:22:e8:48:
40:63:7b:30:56:87:64:cd:d4:4f:b3:af:4c:fd:24:
22:86:39:06:6f:f9:7b:d4:72:93:f2:8f:c7:db:5c:
b0:84:92:7f:17:00:3e:9b:de:f8:51:3f:28:43:68:
f1:68:19:4a:de:e4:e2:b6:5d:97:73:ea:67:27:21:
0a:fc:92:02:64:46:0b:6c:c7:79:21:36:08:b3:64:
c3:76:72:b7:be:27:8a:65:63:f9:33:b5:f2:03:f7:
19:07:d7:f8:fd:26:4c:81:5f:2c:7b:46:1c:e9:67:
08:67:29:10:aa:58:8c:41:57:49:dc:73:f9:e9:46:
80:a7:b2:39:1c:7e:e7:7f:a6:1c:f3:aa:fb:8e:99:
63:42:08:52:6e:fe:21:a8:aa:e8:25:a3:9e:1c:a4:
78:13:a4:fe:9c:49:37:84:c7:5a:cf:3a:8f:61:ab:
43:52:02:e9:91:0c:94:6c:60:f2:a8:d5:fe:21:15:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FF:6F:6E:E5:06:0D:B6:14:D0:82:CE:C6:3E:69:EF:17:1E:92:04
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:eb:65:6f:a4:a8:55:40:da:b5:ba:d8:19:9a:7c:8d:b0:21:
5a:71:24:3e:80:6b:e0:70:cc:a7:c8:da:79:a5:63:13:e9:3e:
d8:f5:cd:9d:03:ec:d5:66:22:b5:4f:ae:5e:b9:e9:06:c4:93:
8e:dc:33:57:70:7c:8f:79:23:83:82:74:c2:a6:c1:e5:d3:16:
bb:17:21:b1:80:46:c4:aa:09:6d:ee:1e:e9:9f:51:a1:bf:5a:
68:fb:15:56:ff:2e:59:86:a4:ce:8d:70:48:0c:05:9f:de:ca:
08:eb:c9:15:b9:36:29:58:f0:28:4a:77:d6:f1:30:5c:f0:26:
ff:2c:25:a0:5d:12:8e:2f:ba:6c:62:aa:bc:79:c8:b0:32:94:
eb:67:9c:47:9c:5c:ed:58:a1:77:22:df:e9:36:c0:ea:3e:e9:
d3:2e:88:8e:9d:21:45:fa:7a:dc:4d:fb:0c:02:c7:91:76:da:
3a:c3:38:4b:0e:c1:51:68:32:ad:26:ae:ad:76:ae:f4:1c:8a:
d1:04:4e:83:21:50:ae:53:9a:4d:5d:bc:93:66:84:f3:03:d6:
8b:a4:ce:2a:90:7a:d0:3b:6c:e9:d6:cd:39:5c:0c:7b:b1:dd:
17:67:6d:73:c9:ff:e4:49:88:b9:36:fc:69:8f:db:5c:c0:06:
6b:df:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:42 2025 by rpki-client