Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: ZsWXwjIhthCs4rNPfbEnuCdGub3TJ0I7uGZDtqHmKCY=
Subject key identifier: 7E:5A:66:DF:DF:7F:96:6B:3E:FD:62:F5:DA:38:9D:A9:83:FC:18:1C
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 0196748BC8703A297ED4BDB0BE977083FB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 1251
Signing time: Sun 27 Apr 2025 00:00:39 +0000
Manifest this update: Sun 27 Apr 2025 00:00:39 +0000
Manifest next update: Mon 28 Apr 2025 00:00:39 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 9F5wTGzPFTIHhFIE+waVsGUR2YxEGdu2F0mGvVV/xNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:c8:70:3a:29:7e:d4:bd:b0:be:97:70:83:fb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Apr 27 00:00:39 2025 GMT
Not After : Apr 28 00:00:39 2025 GMT
Subject: CN=7e5a66dfdf7f966b3efd62f5da389da983fc181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:54:3d:b2:51:01:02:06:0f:61:e0:ef:3c:dc:
72:82:b2:9c:8c:7f:9e:f3:48:3c:0a:df:9b:63:0c:
67:27:0b:73:54:b4:25:54:dc:31:ab:3f:e9:5d:6b:
62:a3:5b:25:a5:4a:0b:be:85:1f:47:31:90:c5:d4:
98:f6:3a:c7:d5:04:5a:ed:90:68:4c:9c:10:7a:0e:
66:01:15:c2:25:3a:1f:dd:21:50:ee:72:c3:e6:d6:
fc:2e:4a:72:e0:cb:2b:9c:6e:b0:20:d1:06:68:6b:
53:2f:1b:0b:74:0e:c5:0a:19:9e:05:47:3b:7d:59:
f5:16:b1:a4:1e:19:b0:7c:53:de:c3:06:b6:85:f5:
fc:67:d5:5c:51:7e:37:37:de:2f:0d:46:b3:24:6d:
1d:73:dd:a9:58:dc:82:7e:e0:ca:91:19:b7:3c:40:
00:64:60:49:ad:0f:58:97:af:53:f8:df:d7:71:9d:
44:80:a0:5f:62:7d:46:f4:d7:d8:3e:fc:95:b4:5e:
6b:50:46:98:69:cd:5a:18:dd:86:ca:d8:d6:36:e3:
e6:16:08:2a:4e:cc:ca:8c:b1:8e:d1:c4:c0:46:ce:
44:eb:9c:4f:e5:b0:3d:48:c4:73:fa:34:62:65:e1:
9c:0c:4a:73:7b:4d:6b:34:85:5b:0d:ef:9d:42:07:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:66:DF:DF:7F:96:6B:3E:FD:62:F5:DA:38:9D:A9:83:FC:18:1C
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b8:dd:5e:bd:e6:c0:90:65:f9:35:00:e9:63:39:90:30:58:
73:fe:27:68:59:ef:c4:77:41:57:24:4e:6c:f2:4d:1d:59:33:
d2:22:c5:d9:c7:26:2a:d9:c3:32:80:01:8f:dc:c0:0b:30:54:
f9:1c:49:71:38:8d:4c:ff:91:b9:68:81:9b:6d:1a:98:fa:e7:
ec:b4:9a:b3:a5:fe:1d:2e:cb:ea:07:fd:fa:86:a4:27:d3:0a:
0c:d1:d5:a8:a0:17:35:c4:ec:de:4e:ad:07:01:54:22:ea:6e:
ef:a4:e7:ea:71:f9:c5:6a:e1:19:5e:9e:b2:41:a7:9c:6b:47:
80:ac:13:37:9a:b7:e2:d3:6b:20:6b:1b:89:17:ff:2f:6e:0a:
a1:5d:5f:b0:73:f7:a8:5e:d5:a8:56:69:e5:f2:08:ce:19:c1:
d6:2d:22:f0:6e:c8:32:38:0a:81:35:07:b8:9e:6b:97:bc:20:
a6:1f:83:e7:ae:f6:7b:37:35:77:d5:38:7c:09:b6:56:42:72:
f7:ef:bc:c6:50:6b:cc:9e:aa:de:7f:11:a1:2d:c5:53:08:2b:
0d:61:06:4e:b9:66:26:f9:ec:87:7e:df:14:93:4f:f7:ec:79:
41:19:20:14:6d:83:da:d8:1c:7f:b8:40:cf:1b:84:00:3d:7c:
cc:f4:f6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:35 2025 by rpki-client