Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: I8RHaJkPHRnVfIi3ar499XkVP2gNPIVool+B1lgm2CI=
Subject key identifier: 65:C9:F7:94:67:F3:D2:6A:E5:A8:37:6C:D6:34:29:00:D2:E0:18:24
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 0196759E3AF47F9FDEFAB4ABE23029B38F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 0197
Signing time: Sun 27 Apr 2025 05:00:26 +0000
Manifest this update: Sun 27 Apr 2025 05:00:26 +0000
Manifest next update: Mon 28 Apr 2025 05:00:26 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: A8Ta33fVyZnIEudF9ODjpy7vPej/K/8hS073hkRQECI=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:3a:f4:7f:9f:de:fa:b4:ab:e2:30:29:b3:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Apr 27 05:00:26 2025 GMT
Not After : Apr 28 05:00:26 2025 GMT
Subject: CN=65c9f79467f3d26ae5a8376cd6342900d2e01824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:ce:87:b5:89:34:f6:21:7b:31:0f:64:85:
53:fd:ac:69:05:44:18:d2:a5:26:e4:96:6e:2b:ef:
d0:48:14:eb:28:e5:fe:ab:aa:0b:7a:66:d8:d6:e3:
38:00:a0:d4:db:37:ea:b8:40:af:ca:06:ed:ae:00:
00:d0:ce:83:b2:0e:c0:a4:bd:ae:8c:fb:bf:65:af:
34:25:db:2a:08:45:4e:ee:72:b0:52:93:7f:98:5d:
1e:71:fd:a5:44:44:67:94:53:24:b3:d6:6a:6e:d3:
a5:af:b8:ad:1f:78:92:0f:45:95:74:fc:c7:76:63:
fe:8b:61:79:4d:01:49:21:44:df:ff:ba:47:8e:47:
b8:50:76:a7:c6:28:96:23:8c:b3:9a:f9:73:5f:e2:
f1:95:08:bf:12:68:a5:60:07:dc:80:f4:84:28:1b:
d6:af:7d:04:53:86:60:60:15:4b:e9:c6:71:7a:9e:
5b:7b:71:31:c2:9b:01:b7:f3:c0:bf:e8:ac:a4:61:
09:ca:67:f3:2f:35:14:c6:c5:1b:65:e1:5c:7f:e5:
67:49:d4:e1:af:38:0c:26:d9:78:17:5e:7e:90:c1:
cd:ad:b3:08:cd:2c:62:a2:15:b0:93:4a:f5:9b:d0:
83:95:c7:4c:e6:02:43:c7:69:2e:d8:1a:76:d9:e1:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:F7:94:67:F3:D2:6A:E5:A8:37:6C:D6:34:29:00:D2:E0:18:24
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:25:8e:bf:eb:4c:ba:09:ba:1e:1e:c8:85:37:9e:b3:ce:1a:
66:a0:5e:04:34:bb:12:82:71:38:91:ab:bb:4d:ea:df:b9:2b:
a2:cc:20:15:9f:c9:fa:87:0a:93:f5:f4:17:30:33:ae:97:dd:
79:2c:e9:e7:de:e7:3d:2f:28:56:b4:54:2e:92:16:e4:2f:76:
1e:e6:dd:53:2a:b3:f5:f3:85:8a:26:d5:87:19:01:e2:0d:ff:
cd:c4:76:70:bd:8f:9b:99:8d:cf:c1:d6:bb:aa:79:11:b8:4a:
5b:64:60:22:34:e3:8b:25:39:89:00:e8:19:bd:db:6f:d8:c8:
24:17:41:8f:6c:28:60:15:1a:5b:25:aa:73:c3:dc:59:7b:52:
98:31:96:0b:53:bd:eb:f2:c3:62:03:aa:e0:a0:c2:21:96:66:
2a:79:80:f4:81:5f:cd:22:6e:b6:53:d9:8f:64:5a:7f:f8:51:
a7:48:75:29:76:f7:64:97:3e:c9:07:1f:fa:27:40:e8:11:e7:
08:0e:db:cc:c2:b1:3d:cc:d1:11:9c:2e:e3:13:ac:6a:f3:61:
d2:90:b1:da:e9:9c:34:09:23:02:57:5c:e0:f5:9e:ec:1a:37:
01:6b:8f:1b:5b:9f:4e:43:c4:8c:cf:73:92:50:4a:7b:64:9b:
3b:b7:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:32 2025 by rpki-client