Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: MQhNb4b9/KpcepWkEN4F8tq3Iad8JLJ6puB0vN2yXdM=
Subject key identifier: DB:3B:48:D7:A2:89:60:80:FB:68:8B:72:39:B5:CE:C6:4B:2B:29:AE
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01965B7136D0C5DF6A9DFD54087C64C04B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 150D
Signing time: Tue 22 Apr 2025 03:01:08 +0000
Manifest this update: Tue 22 Apr 2025 03:01:08 +0000
Manifest next update: Wed 23 Apr 2025 03:01:08 +0000
Files and hashes: 1: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: afASVQI5QMh1xA7WrAvSzNuasNX1r6JhQASgxALbKzA=)
2: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (hash: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=)
3: kjjmj3_M89wAaSRBkczk1njDNSI.roa (hash: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:36:d0:c5:df:6a:9d:fd:54:08:7c:64:c0:4b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Apr 22 03:01:08 2025 GMT
Not After : Apr 23 03:01:08 2025 GMT
Subject: CN=db3b48d7a2896080fb688b7239b5cec64b2b29ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:43:60:03:4d:54:f9:9b:43:88:a6:cb:33:
84:f7:0a:ba:0e:35:0b:ee:8a:18:12:ef:85:96:fd:
76:0e:e2:3f:24:83:7b:98:d5:2d:f0:ad:ac:f3:0b:
5b:75:8a:df:9f:97:84:75:10:3f:c9:a4:96:fa:f6:
91:fc:fe:85:6c:43:72:c5:87:6c:89:11:f2:21:85:
8e:b4:4d:af:f9:1a:f8:b3:ca:5e:b4:8e:66:1c:5c:
ff:8c:4a:36:89:81:6f:01:b9:41:ac:51:50:f2:3d:
67:0e:fc:d7:6f:e1:c4:84:31:89:9d:49:d2:0c:d1:
a8:69:a0:d7:a7:34:12:ca:7d:b8:b5:03:44:1c:3f:
ad:60:52:54:ed:b1:1b:89:5d:4a:fa:50:09:8a:0c:
7f:ec:6e:90:d5:ac:4f:45:3e:0e:5c:5a:83:ec:5c:
97:fc:a5:f4:b5:9d:bf:7c:3b:d0:cc:27:06:48:52:
36:8c:37:c3:ab:89:66:4b:9c:a1:a8:a0:be:e9:e4:
d9:a1:c4:53:ad:e4:b5:5c:44:66:dc:0e:40:35:c9:
f6:c6:59:1a:69:83:cf:aa:cc:c7:18:f6:00:39:14:
04:08:2e:d1:10:44:26:f8:0d:d6:0b:c0:ed:58:e4:
07:8c:4b:4b:12:c7:07:3a:8e:2c:f3:31:bb:82:52:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:48:D7:A2:89:60:80:FB:68:8B:72:39:B5:CE:C6:4B:2B:29:AE
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:88:69:69:d9:37:dc:32:8c:69:46:9b:14:8c:b3:6b:cc:f4:
87:20:7e:1e:1a:33:71:dc:b4:be:80:ae:4d:61:a1:5c:80:5e:
e3:4b:cd:19:ab:78:c2:7a:31:0a:7e:d6:f5:74:ee:55:7b:56:
74:f5:3d:49:e0:f2:4b:60:e4:fe:5b:2c:30:31:d8:48:89:dc:
26:15:05:be:8e:82:20:03:43:b8:6e:47:df:1e:79:bc:d7:e2:
bf:b8:84:e4:43:45:2e:a6:86:c1:6a:cf:4a:73:81:5c:16:30:
78:79:d9:c7:09:4a:72:b8:78:4a:a6:24:5e:c7:d3:64:74:88:
66:0e:95:37:9b:4b:a2:07:d7:00:7a:bd:2f:0e:49:0f:e3:0e:
95:4d:61:a7:c8:a5:6e:7d:fd:67:b6:d6:e8:fa:6d:b2:4e:e4:
4b:f4:47:61:85:0b:8d:1d:65:46:f1:8c:49:31:a6:9f:c0:f0:
54:ca:d1:ce:a5:f0:6d:9b:60:15:c2:f4:01:f5:d9:aa:eb:1e:
9b:08:4c:6a:28:5d:3a:a1:fb:6a:0f:57:67:e4:d0:7a:7d:6c:
37:3f:a8:c1:f6:49:bb:9b:c3:7d:0d:69:ac:aa:8f:dc:56:12:
79:10:69:ed:95:de:21:be:a0:59:40:2a:ec:2f:0c:c3:4a:c7:
c3:9c:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:42:47 2025 by rpki-client