Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File: TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier: tA9PrghaXWiNe3iV6IXQYKGk8elGD7QwV2rtm3UKHXI=
Subject key identifier: CA:1A:0F:8C:36:67:18:54:9F:92:0D:A5:0A:FD:40:C2:42:4B:1F:5F
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 01967BA096F7CE51061EA9064599F1BDD1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number: 0BF4
Signing time: Mon 28 Apr 2025 09:00:44 +0000
Manifest this update: Mon 28 Apr 2025 09:00:44 +0000
Manifest next update: Tue 29 Apr 2025 09:00:44 +0000
Files and hashes: 1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: RgANtMNQTVmX7dgXmaj0hgi0cNwg7B9JEkiEPxgcL7o=)
3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:96:f7:ce:51:06:1e:a9:06:45:99:f1:bd:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Apr 28 09:00:44 2025 GMT
Not After : Apr 29 09:00:44 2025 GMT
Subject: CN=ca1a0f8c366718549f920da50afd40c2424b1f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:35:bd:94:f1:eb:49:41:00:9d:66:d1:38:
37:cc:6a:e3:cf:7c:cb:96:71:cc:5c:66:48:62:5b:
0c:91:c3:7d:3a:d9:96:aa:fc:9d:36:1a:2d:34:9c:
7a:df:59:af:ec:d8:26:ab:c7:00:47:75:bb:3c:3c:
eb:94:92:8c:49:ff:27:ee:67:02:da:1e:99:90:82:
fe:34:a9:c1:5f:3e:2e:97:2a:fc:41:41:10:f3:8e:
d4:3a:11:21:5e:70:1d:a4:a8:e7:37:cd:b6:ce:c9:
8a:8c:51:bd:0e:e7:b5:f4:25:75:55:0c:93:df:3f:
2d:d5:25:42:e2:14:66:5b:97:c8:40:3c:a0:0c:8b:
5e:98:23:88:ca:6a:f5:1c:ec:fd:2d:18:e9:69:50:
e8:d0:fb:7f:54:6f:f7:f1:34:ef:aa:17:93:bc:9a:
2e:58:a4:8e:42:b4:df:45:ba:9a:40:47:6a:34:c8:
3f:b1:61:cd:09:94:a0:15:b5:d9:b4:22:3e:de:10:
96:5d:ae:64:3a:44:5f:a2:73:0a:d0:ce:40:bd:81:
a9:d1:33:d7:f6:99:33:6f:bb:65:a2:e3:7d:87:63:
84:75:d3:a5:97:3e:3a:35:97:d7:c7:f9:08:d7:ff:
dc:c3:bb:4d:e3:74:aa:f2:f3:4f:aa:13:0f:37:3b:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:0F:8C:36:67:18:54:9F:92:0D:A5:0A:FD:40:C2:42:4B:1F:5F
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b4:b7:cf:d8:13:6e:d0:a3:d3:32:df:b7:03:46:c8:cb:3d:
38:98:38:63:7f:43:ba:7b:3d:c8:35:64:78:82:91:7d:c9:72:
c4:a0:85:4f:59:10:17:50:21:58:57:98:5e:44:a3:56:4f:54:
9e:45:e5:ba:b0:1d:d8:69:ed:49:18:92:89:60:27:dc:02:20:
53:f6:9a:81:97:98:de:f1:84:44:7c:6f:52:c8:58:bc:34:85:
0d:53:65:32:1b:fe:0d:7b:24:ee:8c:a5:4a:0d:ad:30:ed:3c:
d6:fa:70:0a:4e:7f:30:9f:56:7a:ae:52:f1:3f:87:de:6e:36:
17:64:69:d1:68:92:0b:49:0e:6a:55:81:57:46:69:6e:f4:80:
75:ce:b5:40:07:37:fa:62:40:7e:18:fc:96:bd:b6:85:70:ae:
50:06:fb:a5:2f:99:5d:f9:cf:a6:7d:ba:9b:73:96:7a:ac:29:
d0:29:a2:48:82:72:36:c5:3e:b7:39:a8:57:79:51:e9:fe:d4:
63:e8:e2:32:98:49:00:cb:dc:12:cf:25:be:57:2e:d9:b4:6b:
d9:3f:ec:9b:7f:51:22:ae:ca:99:34:5d:af:39:1c:8c:ae:fb:
9e:a3:23:c4:d5:35:77:ba:5c:05:81:aa:52:49:4d:91:e4:b9:
53:2b:86:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:04 2025 by rpki-client