Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: 7q3HbQrm/vEISkljKFcRTzRiLD4weMRF+5YZlH1I58Y=
Subject key identifier: A2:89:ED:69:2C:0B:1B:ED:85:A8:54:73:B4:5A:91:5D:94:B8:58:63
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 01967C7C11432E622ABA408CBF7ACE4F66E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0C0E
Signing time: Mon 28 Apr 2025 13:00:27 +0000
Manifest this update: Mon 28 Apr 2025 13:00:27 +0000
Manifest next update: Tue 29 Apr 2025 13:00:27 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: BHGn6IWE1R1fnVRooXAluRo8r8ac0biFlwAtJz2z/c8=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:11:43:2e:62:2a:ba:40:8c:bf:7a:ce:4f:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Apr 28 13:00:27 2025 GMT
Not After : Apr 29 13:00:27 2025 GMT
Subject: CN=a289ed692c0b1bed85a85473b45a915d94b85863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:14:9c:fb:07:75:6e:60:90:cb:6b:ce:33:
5b:cf:12:7d:72:e8:03:e0:d0:93:39:71:66:d9:ac:
2d:88:3b:4e:bb:97:2b:08:ed:91:17:9e:83:19:78:
15:38:b5:e6:40:70:a5:70:e4:ba:59:ff:5c:fa:37:
45:1e:a0:f5:41:d5:0d:21:53:2e:2f:ec:01:13:a3:
94:68:dc:00:f7:9e:01:14:23:09:e1:e9:76:c4:d2:
db:d3:55:6d:55:ff:e9:7a:e7:1a:af:91:52:da:47:
98:d1:a8:3d:3a:6f:53:e7:ff:d6:ab:2a:ae:b2:01:
60:c1:73:3b:d4:94:51:08:2a:68:f2:80:34:b9:e3:
d3:f9:2a:40:e6:3b:be:5f:ce:58:95:ba:59:4a:86:
d3:3a:2b:db:c7:10:a4:32:a5:f6:2c:0c:1c:e3:65:
e6:c7:3d:24:b1:fa:ca:a0:0e:83:ae:14:ed:07:42:
e9:ab:5c:98:b5:ba:8c:b9:b1:38:df:47:d1:ac:92:
eb:fb:43:61:82:0f:9a:b9:af:42:0a:bf:e7:5c:f7:
ae:4f:bf:96:93:dc:54:b0:e0:05:68:12:d4:e8:5a:
e9:3c:ac:5f:84:7c:29:0a:06:61:0f:fb:58:77:e4:
1b:19:ee:ec:6e:11:41:4a:7d:e6:9c:46:5a:2e:dc:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:ED:69:2C:0B:1B:ED:85:A8:54:73:B4:5A:91:5D:94:B8:58:63
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:10:b4:06:41:db:d4:66:ea:5d:c9:ec:ba:c2:b4:52:cd:24:
c8:7f:0b:6b:67:f8:cc:f7:f2:25:33:9b:14:d5:2d:29:c4:ab:
d6:72:a1:77:f3:a7:9e:f1:ba:ba:3a:e2:39:d5:e9:53:5b:bf:
98:34:84:4e:84:90:ed:12:60:60:e2:73:0c:f8:37:35:17:39:
fb:8f:0f:42:c4:8b:97:ff:35:e5:a6:45:b5:31:05:7b:e6:24:
64:ad:f7:72:05:90:57:3c:d7:d5:bd:b6:94:dc:25:85:8d:ca:
cc:47:86:15:02:cc:e0:62:b2:9c:5a:ec:a0:87:95:09:7d:72:
cf:b8:12:fe:e0:0e:18:8e:fa:26:36:a0:f6:d8:f5:66:d9:54:
1d:e7:0d:34:a6:ee:09:d8:90:f8:76:1c:83:8c:af:a2:80:12:
fb:cd:19:98:df:4c:98:2b:95:48:33:3f:85:17:c1:64:2f:7f:
1f:2a:35:f8:d8:df:0a:0f:66:2d:11:b0:ce:8b:b3:11:b9:19:
64:23:e0:bd:9c:53:42:5c:04:3c:cd:2f:83:b1:d5:ad:bf:c3:
ff:f6:e2:65:89:a6:17:9b:de:e2:ad:46:4b:a9:5a:2b:0a:8a:
c5:14:01:d4:45:0d:37:af:ca:66:96:2a:d0:7b:a5:de:9b:a3:
40:ac:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:00:05 2025 by rpki-client