Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: TJ+jzxZuN0glnUZJ01TGJzmD+eOIZ0dvwlr8LTVaFh0=
Subject key identifier: A5:9D:3A:ED:EE:DC:CA:6C:FB:1B:7E:F1:66:9B:51:D2:A2:F0:35:A8
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 01965D9642140FBCA63CC8DA848335505508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 13:00:50 +0000
Manifest this update: Tue 22 Apr 2025 13:00:50 +0000
Manifest next update: Wed 23 Apr 2025 13:00:50 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: Kq4aW56WR+aWQqwHE6QdyFPur3NHh7WEicwfX/UipNw=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:42:14:0f:bc:a6:3c:c8:da:84:83:35:50:55:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Apr 22 13:00:50 2025 GMT
Not After : Apr 23 13:00:50 2025 GMT
Subject: CN=a59d3aedeedcca6cfb1b7ef1669b51d2a2f035a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:0f:51:59:c3:76:a9:f2:01:f8:a7:78:d2:
a8:40:9b:ff:8d:fd:1c:db:09:f6:60:b8:02:5f:03:
f6:9a:80:92:02:1c:ea:f4:c7:98:01:f2:19:b3:36:
8d:05:96:74:ac:1a:ea:32:78:02:1c:1e:b4:01:c5:
8b:dd:36:f5:83:ee:ed:f7:2c:74:92:15:dd:0b:92:
63:72:23:9d:69:10:a8:de:12:2c:9f:9d:b8:f9:74:
b8:8b:cb:12:93:46:92:76:d4:b5:c0:66:ab:5f:7f:
cb:e5:38:f0:9d:5c:fa:62:57:26:07:5c:26:f8:c5:
48:a7:3e:5f:ee:7f:45:f1:98:8c:34:85:cb:67:fa:
cc:33:2d:40:c0:9f:c4:c2:40:24:19:6e:c9:99:00:
a0:ae:31:9f:8a:84:8a:a5:96:c9:68:f1:00:d9:fd:
65:9f:58:87:43:05:77:b5:91:6f:c9:5b:b6:23:9b:
6b:6b:00:87:67:30:d8:17:af:c4:93:e2:42:59:02:
0f:c7:3d:19:e3:74:3d:df:cd:e8:dd:0f:69:f8:7b:
75:26:a8:40:b8:dc:2b:24:58:4b:7e:cc:8d:0b:ce:
a0:2a:5e:03:09:50:ca:ae:2f:28:31:4f:e2:15:c0:
ee:33:d1:bb:d3:04:23:2c:01:17:55:b7:ec:9b:4e:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:3A:ED:EE:DC:CA:6C:FB:1B:7E:F1:66:9B:51:D2:A2:F0:35:A8
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8b:a6:d1:77:8b:a1:b4:a6:f7:cf:4b:de:16:02:6d:df:3d:
3a:0b:0d:fe:d3:f5:d6:61:f8:bf:0b:57:2f:e4:bc:93:99:4c:
e5:b3:b0:49:24:8f:54:65:74:a3:c0:6d:43:23:cf:42:1a:a2:
b2:0e:c9:34:76:d4:41:6e:81:b8:0b:3a:e4:2f:12:3b:9c:7a:
80:b4:92:06:88:8b:17:01:d1:40:19:91:46:8b:d5:f0:9e:48:
35:30:bc:80:e7:db:0b:56:36:aa:cc:19:60:bf:fd:39:06:2a:
ce:29:f5:07:12:b3:a3:84:ee:07:0c:37:4a:eb:78:4b:65:76:
b0:ba:5a:5c:1d:d2:50:06:b7:85:1a:ff:1d:b2:f2:5a:de:95:
a3:df:c8:37:b1:8c:0d:06:38:55:84:5b:2f:cd:69:88:40:80:
2f:6f:46:8b:b2:ac:a6:9c:d1:6e:9f:19:e0:a4:d4:7f:d3:04:
c0:9e:39:7b:ac:9c:e3:0c:52:aa:a4:ff:6b:89:05:cf:dc:fa:
78:19:7a:68:5c:a4:c2:fc:e5:84:fb:ad:4e:92:aa:58:e0:ee:
39:44:69:8b:7b:4f:e9:91:9d:e0:9f:98:39:69:98:1d:9f:1f:
4e:f4:db:04:79:26:a7:3d:52:e2:12:81:ad:92:b9:ab:1b:34:
09:8f:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:28:45 2025 by rpki-client