Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier: gQrUFV8gkZrdv/+JDEmaYWLte5x46iM2w/OQHtrprFc=
Subject key identifier: 8C:88:CA:7E:87:3F:F3:2D:AF:A8:C5:E9:41:FE:6C:5C:B4:2D:10:FD
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial: 0196797B00465A872F57B3013C75B6E0BD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number: 065D
Signing time: Sun 27 Apr 2025 23:00:26 +0000
Manifest this update: Sun 27 Apr 2025 23:00:26 +0000
Manifest next update: Mon 28 Apr 2025 23:00:26 +0000
Files and hashes: 1: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: OuCu59wMEBio0w2CK6+ai1RrKCs1uGUu41Q9RQ6LLuQ=)
2: bJM_lGyoCdHM4Ew-bll92CWr05o.roa (hash: /LNeEVaQM+dKQQyk+FaHOgVJEKHJjoz/8u1g5mTs7vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:00:46:5a:87:2f:57:b3:01:3c:75:b6:e0:bd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Validity
Not Before: Apr 27 23:00:26 2025 GMT
Not After : Apr 28 23:00:26 2025 GMT
Subject: CN=8c88ca7e873ff32dafa8c5e941fe6c5cb42d10fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:0e:36:bc:37:ff:e2:5a:92:33:4f:25:59:
25:cf:4b:46:9f:b9:1c:c2:f9:e1:54:4e:cc:64:a8:
d0:90:d2:18:af:cb:e7:be:ce:20:45:65:72:36:f4:
4a:b7:f5:4f:a1:1e:de:4f:3b:1d:de:13:86:4f:01:
00:46:fb:0b:42:46:40:49:38:c5:57:bb:bf:6f:80:
7c:4a:d8:80:d4:bd:f0:74:68:66:80:65:08:cc:49:
e9:e3:88:83:aa:94:04:e0:dc:63:7e:a0:65:28:75:
2b:86:0e:0a:71:cc:73:0d:f6:d9:8f:95:93:17:7d:
c7:45:aa:94:07:7e:f5:92:31:a8:3b:43:48:9d:a0:
df:a1:21:80:4a:70:bb:e9:28:5b:53:9d:f5:43:e2:
1c:0d:48:96:ff:29:72:95:ed:94:f5:ef:7e:1a:7b:
97:bb:ad:8c:da:1e:17:43:b9:80:b7:9b:87:b6:7b:
08:9a:00:dc:c7:9b:51:9b:fb:b2:f0:cc:f1:10:ee:
d7:73:03:8b:0f:a5:d8:13:99:f0:51:0f:4c:8d:94:
63:2a:6f:1e:a4:65:f0:ef:36:c2:d0:0a:0b:cb:f8:
50:09:07:f3:ae:dc:b2:f6:e2:fd:6c:c5:2a:e9:7d:
33:7c:f6:ae:47:99:56:26:5f:76:0b:e4:06:21:03:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:CA:7E:87:3F:F3:2D:AF:A8:C5:E9:41:FE:6C:5C:B4:2D:10:FD
X509v3 Authority Key Identifier:
keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:76:c0:58:8f:64:dc:15:d2:95:11:34:a2:d3:32:97:ce:89:
ef:62:67:b4:ec:03:eb:2d:9e:f4:4e:db:dd:38:43:44:dc:62:
63:f4:24:39:d7:10:a1:4f:ca:6e:8c:c2:37:45:c3:47:58:5c:
a6:1f:9e:3d:6d:ab:e4:fa:62:ae:db:e2:8d:84:35:5b:18:a7:
93:bd:bc:8c:18:0a:e5:31:a4:c3:f1:07:24:98:1b:47:67:4c:
79:85:38:c5:f6:69:5f:14:8a:c5:df:f9:cc:50:33:7b:ef:5c:
65:52:5e:bb:f5:c8:97:5e:0e:79:b0:38:c8:e4:b6:8e:f3:99:
99:e0:1a:15:39:56:7a:07:cb:18:e0:6d:ab:99:1f:ef:9f:c4:
4a:c2:8c:de:33:6c:42:ca:e4:47:b1:72:7a:3b:ba:2a:31:6d:
16:ea:cb:05:05:4a:56:0f:c7:90:7a:d3:6f:02:43:25:ec:13:
82:3d:39:e7:ce:d5:55:e7:d3:09:78:a8:2e:41:3f:d7:b7:08:
d3:84:ce:7e:cd:77:0b:b5:5a:7d:47:47:36:07:39:11:42:37:
35:69:a3:90:f9:1b:e3:29:91:52:e4:c1:44:2f:de:76:6d:2e:
98:27:b3:38:1e:ed:43:cd:4b:f6:78:64:2a:f6:d9:6a:a9:3b:
43:fe:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:44 2025 by rpki-client