Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: Ic/VnJ5cnINgl86gesHFuJqauwT3waFzHoyszt9Xyp0=
Subject key identifier: 9A:A0:46:1D:3A:2B:AF:4F:DA:2B:29:5E:0A:D2:59:C8:1F:3D:97:A3
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 01964C6B53E39EDBC6B3A1638554841C8DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 142D
Signing time: Sat 19 Apr 2025 05:00:24 +0000
Manifest this update: Sat 19 Apr 2025 05:00:24 +0000
Manifest next update: Sun 20 Apr 2025 05:00:24 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: r1Z/Nc6Yi8ldtpuiEZHTvu43mJg3SfPvgQK/KRYqq68=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:53:e3:9e:db:c6:b3:a1:63:85:54:84:1c:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Apr 19 05:00:24 2025 GMT
Not After : Apr 20 05:00:24 2025 GMT
Subject: CN=9aa0461d3a2baf4fda2b295e0ad259c81f3d97a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:3d:a3:8a:08:af:a1:d0:f1:31:57:ed:08:
0e:b1:b1:13:5e:9b:58:59:55:88:69:ae:cf:ee:08:
f3:cd:50:4a:c0:78:ff:11:42:ab:1a:df:12:45:56:
d8:0a:de:fd:b7:f8:31:f1:81:05:09:6d:f9:0b:c1:
6e:89:22:a8:a1:69:d4:e0:69:bf:64:bf:d2:32:00:
46:11:45:c3:95:38:92:65:ea:c5:e9:f6:21:ad:1f:
e8:e7:be:01:47:64:53:23:f4:14:25:6b:0f:e5:ee:
9b:ca:ea:55:0f:7e:ae:27:13:5b:1d:d4:f0:70:1c:
27:cb:77:6d:be:58:af:b3:f5:a2:b9:6f:17:8a:83:
98:48:f5:84:66:22:eb:3a:bc:d8:89:b6:23:e4:88:
1d:b2:89:7b:d4:98:95:ed:6f:27:bd:c6:12:49:40:
b5:60:7c:ac:a3:f2:70:7a:d4:dd:4c:47:5d:35:35:
5d:0c:50:e9:bc:e0:67:5f:59:1e:0c:f2:bf:e9:24:
69:a0:ab:fc:d4:b1:42:c5:38:9e:dd:80:84:a6:df:
33:87:b3:f0:f5:ba:5f:b1:d5:68:e2:1c:99:4d:63:
36:71:d6:34:31:10:51:77:d8:58:f2:6d:77:40:1f:
d5:f3:74:53:7f:a6:a3:70:e4:a3:99:ae:5c:32:c2:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:46:1D:3A:2B:AF:4F:DA:2B:29:5E:0A:D2:59:C8:1F:3D:97:A3
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:49:8f:12:57:a1:75:dd:bb:0b:58:6e:7c:d4:53:04:75:8b:
d9:dd:6d:ee:8a:75:cb:74:c6:6c:b7:3f:5c:24:17:45:8b:26:
95:f7:94:06:1c:61:9f:83:29:81:33:96:f3:24:3b:56:87:a0:
c1:91:3f:dc:77:1f:40:a9:48:ef:90:7d:bf:3c:e9:37:21:dd:
d8:e5:91:9f:12:a6:88:ad:d3:b0:f0:bf:42:32:34:cc:b6:0a:
7f:4e:f5:88:ad:7a:a9:7f:4a:50:bc:4a:82:59:e5:6f:22:6e:
94:d0:d3:a5:77:91:87:48:5d:8b:fa:f4:77:03:5b:44:fa:a1:
6c:6a:70:31:4f:80:b7:90:d4:57:bc:00:02:b3:bb:72:42:95:
ad:36:9c:6d:d1:8d:f5:a8:ea:49:e8:f1:78:11:8e:50:6d:6f:
bc:7d:e6:77:ce:f0:5d:4c:67:e4:f0:b0:68:b2:28:62:ca:51:
6c:3e:53:47:df:10:ce:ce:5e:06:19:d5:fd:66:f0:a6:00:ac:
17:9e:05:98:d7:05:fd:d6:5e:ed:6f:98:1d:cf:0b:a3:82:1f:
e3:e8:6f:05:1d:ff:e7:b2:c3:77:b4:fb:a4:7f:93:78:7c:be:
fd:f7:28:a2:d2:56:aa:c3:c2:60:2b:34:4c:70:08:d5:96:f2:
77:71:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:23 2025 by rpki-client