Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: w9c5OT73biLXt7S+rk08S5yaANKazjvnluHLmknscwc=
Subject key identifier: 57:9A:DA:CB:DD:1E:5F:01:3A:6D:F3:16:0E:A9:D7:2B:D9:3E:F1:C0
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 01967454A0CE2CBADA6AECE5383608EAD71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 1239
Signing time: Sat 26 Apr 2025 23:00:25 +0000
Manifest this update: Sat 26 Apr 2025 23:00:25 +0000
Manifest next update: Sun 27 Apr 2025 23:00:25 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: DaGYQLSk+NIYn0WQqXKektElI6DfAtF3QUbEcTK0T5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:a0:ce:2c:ba:da:6a:ec:e5:38:36:08:ea:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Apr 26 23:00:25 2025 GMT
Not After : Apr 27 23:00:25 2025 GMT
Subject: CN=579adacbdd1e5f013a6df3160ea9d72bd93ef1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:76:59:36:55:71:8f:ee:14:0f:d2:17:9e:
aa:10:df:7e:eb:9b:20:7a:f3:e9:1a:b2:c6:a1:d3:
27:41:84:45:ea:dd:cc:c2:2b:99:15:96:ec:3c:36:
ed:80:59:dd:94:69:7a:1d:c7:83:61:ad:70:da:c6:
0c:ac:2a:b2:22:ef:40:a3:22:15:5d:58:20:49:fd:
52:95:59:7c:62:c0:98:de:0f:fd:c0:87:08:2e:6e:
4c:fd:5d:42:81:22:3c:98:60:33:a2:61:95:60:73:
6b:52:83:30:33:20:82:52:dc:33:3e:99:d4:a6:b0:
20:55:f4:4e:5d:2f:1c:1c:6b:08:42:a1:ff:6d:85:
60:08:47:a3:35:23:e4:b8:ad:0e:58:a9:6e:0d:20:
63:b2:e8:76:49:fa:e5:a4:13:53:a8:7c:1c:e1:3e:
09:44:f8:5b:77:72:9b:93:c1:4f:f5:6c:cd:10:0f:
c9:c0:f3:e7:f9:78:ff:a1:9b:50:bc:4d:21:7d:35:
7f:38:3a:fd:4f:c6:25:68:b0:8d:dd:b7:40:c9:7c:
da:3d:b1:49:0f:89:79:7f:64:0a:d8:6b:32:e4:62:
42:16:1a:80:5b:eb:2c:97:15:7a:33:11:d0:8d:62:
ac:61:48:0d:81:b7:53:4e:77:8b:3d:68:a4:f3:6e:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9A:DA:CB:DD:1E:5F:01:3A:6D:F3:16:0E:A9:D7:2B:D9:3E:F1:C0
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:de:9d:3d:97:75:d3:00:7c:dc:3c:91:47:6d:4d:ad:1b:ae:
0d:6e:7e:b9:dd:1b:5c:d1:d0:3c:22:6c:3f:23:a3:22:32:4a:
f9:51:20:9c:0c:8b:1e:d3:b1:06:a6:5c:98:a2:55:81:80:95:
58:22:98:db:c1:83:cc:b7:a9:02:6f:24:10:24:f7:77:31:b5:
90:44:dc:41:a2:c7:04:08:58:9e:92:67:ca:15:db:6d:08:0e:
b6:84:ba:ab:73:24:df:94:e5:87:5a:e9:2a:5e:df:05:75:0c:
96:46:4a:39:00:d0:c5:1c:51:58:8f:cc:72:f8:40:43:7c:af:
89:d4:0b:8c:53:ed:cc:83:60:23:53:c8:c9:de:eb:ff:1d:30:
73:5b:10:f5:97:7f:71:ea:ce:9b:ad:b2:cb:77:f9:54:77:79:
84:f3:53:34:bc:77:e8:01:66:54:88:e0:73:7b:9c:ec:1f:7f:
b9:ab:3b:e3:9e:54:67:64:02:1f:63:1a:07:67:7e:c8:fd:19:
eb:21:aa:58:fa:57:16:0d:da:79:33:95:6a:b5:e1:6c:50:ae:
24:83:8e:cf:ac:4a:ed:c9:68:ef:dc:68:4a:40:52:b5:2c:58:
09:3c:18:74:03:d7:41:b3:64:e7:69:1e:b7:4e:f1:3e:2b:8a:
d7:6d:e3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:47 2025 by rpki-client