Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier: /xspvXixIeolbo2YOh3+QCo7mJLxyzaH5jLSQr481Vk=
Subject key identifier: 71:E1:9A:E4:98:85:80:4E:8C:04:5C:C0:3C:03:AB:A4:F8:C5:02:EC
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 01967C4551DC1D7346C2419883DF605E4EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number: 02DB
Signing time: Mon 28 Apr 2025 12:00:39 +0000
Manifest this update: Mon 28 Apr 2025 12:00:39 +0000
Manifest next update: Tue 29 Apr 2025 12:00:39 +0000
Files and hashes: 1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: dX6wevXSjmMKOHJLgGrUhbX4rmpzCtHmmJXEQjfqyCE=)
2: dRB7xJtajjzk6UoGyoSGsT51giI.roa (hash: YcmDNZ/enUR0rChrVz40koeNmEa+q2s38R7f9KQbajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:51:dc:1d:73:46:c2:41:98:83:df:60:5e:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Apr 28 12:00:39 2025 GMT
Not After : Apr 29 12:00:39 2025 GMT
Subject: CN=71e19ae49885804e8c045cc03c03aba4f8c502ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:03:6f:66:b9:97:c5:a3:b5:e6:e4:af:76:
69:a1:43:1f:ba:12:20:f0:92:bd:66:4e:49:9a:5e:
f4:58:10:a4:44:d0:f3:5d:78:71:2d:ec:62:c3:7e:
37:be:3c:53:ed:2c:28:70:e6:1e:43:79:bc:8b:75:
57:59:08:7c:41:35:68:c1:86:b2:d0:27:f8:35:89:
d2:df:ab:f0:37:8a:a6:84:e9:cb:7e:c1:3a:92:07:
bc:54:fe:e3:9b:fd:d1:74:ba:75:83:ca:d0:4d:3c:
44:ba:8a:ad:71:2c:cb:25:01:b9:23:19:9b:5a:3b:
66:b5:c0:09:7d:2b:4b:17:e6:09:5e:ed:b4:3f:bf:
96:e6:78:70:5c:20:06:62:e6:f1:8b:2c:ad:37:73:
38:b8:f0:77:9d:b9:88:19:d6:88:2d:eb:17:d4:d2:
43:80:39:8c:cd:e6:b8:4e:eb:73:ae:08:1a:9e:4f:
f1:53:52:8e:28:82:48:2c:cc:fc:85:89:14:c8:ed:
ee:66:14:44:67:f1:f7:1f:03:79:82:a5:5d:d7:87:
72:38:ea:d8:5a:31:99:e1:cb:f6:13:79:d3:31:aa:
b0:f9:19:d5:23:7c:60:ee:33:14:31:e1:30:77:35:
4b:86:06:25:df:61:8d:2b:4c:c2:de:c3:c3:95:a4:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:9A:E4:98:85:80:4E:8C:04:5C:C0:3C:03:AB:A4:F8:C5:02:EC
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:78:2c:5b:dc:da:8b:e3:cc:f1:07:11:8d:70:65:79:c0:b3:
d3:ac:36:4b:05:04:59:12:fa:e1:e4:29:9e:ae:95:2d:b7:40:
ba:d8:8d:e1:fe:e7:2e:a4:9a:68:2a:a9:96:4c:10:54:6f:6d:
26:9b:72:6b:74:4c:45:ce:c6:57:4c:e6:8c:ca:1a:09:9d:ae:
43:d8:e1:3a:e9:d1:42:3f:cb:3c:0b:e7:d1:89:8c:f7:f3:cf:
03:32:28:a2:d6:f0:6e:4c:33:3a:3c:2c:36:0b:65:23:67:3c:
5e:c6:9c:06:16:5f:c0:0b:d9:f8:b4:38:28:d7:e5:28:17:69:
1d:4d:03:21:42:00:24:ad:4b:1b:08:36:59:bf:6c:73:c5:c1:
7d:c4:c2:05:df:9e:ef:3c:84:e7:0b:18:44:5a:0b:24:da:1d:
98:61:4f:07:a3:a2:72:64:7b:1c:b0:9e:d7:b9:2a:87:38:ba:
f6:4d:31:64:54:25:c7:9b:63:4a:4d:dc:85:5d:fb:bb:d1:83:
ca:2b:76:f9:15:2a:51:36:bc:ee:a8:dd:c8:5c:ff:48:29:b0:
fa:a1:6b:c8:8c:c0:73:ab:a5:96:7b:cf:39:fd:60:4f:f2:1d:
79:13:30:99:bb:b0:2f:3b:24:57:d1:42:0a:af:4e:4f:f4:5a:
bc:d8:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:58:37 2025 by rpki-client