Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: Gac+DLRiAHu467LNRyKioyi3pfnrH1Gt8pL03mbO+kI=
Subject key identifier: EC:BA:DE:9C:39:34:1F:A8:99:57:55:07:B4:B4:44:C1:05:EA:CE:BA
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 01961621C55962A16D8C909459E50302123E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 14DD
Signing time: Tue 08 Apr 2025 16:00:34 +0000
Manifest this update: Tue 08 Apr 2025 16:00:34 +0000
Manifest next update: Wed 09 Apr 2025 16:00:34 +0000
Files and hashes: 1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: B03YqPXl51bn0MiF6wYX2UeUjeds38IpTNozrQPnvFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:21:c5:59:62:a1:6d:8c:90:94:59:e5:03:02:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Apr 8 16:00:34 2025 GMT
Not After : Apr 9 16:00:34 2025 GMT
Subject: CN=ecbade9c39341fa899575507b4b444c105eaceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:c7:dd:23:81:4e:03:76:ca:3f:d1:70:16:
34:31:45:b4:e4:0c:3c:67:a5:44:cf:4f:79:2a:e7:
09:0e:e5:22:25:d1:b7:09:6b:4f:d6:ac:95:eb:00:
86:02:f3:4f:a6:ca:46:f5:06:21:8a:7c:7f:96:8b:
ef:78:82:cc:f5:14:a4:bf:96:cd:5e:b2:5b:62:48:
75:2f:52:3d:5a:f7:fd:18:f4:ba:33:32:a2:54:ea:
73:cd:07:ce:b4:e8:4f:78:56:98:55:a9:80:d8:0e:
6b:5f:97:60:ff:23:e9:6b:f5:da:d3:d8:4a:8e:f8:
ce:b4:2f:c1:86:9e:62:78:86:d0:2a:66:91:c5:c4:
66:b6:1a:aa:c1:c4:9a:0b:78:64:71:22:7e:0c:fa:
a5:57:fb:d1:5b:5c:68:bc:c9:18:83:91:67:5f:82:
87:4b:a8:70:1c:c4:8b:e5:88:c6:af:83:15:73:a6:
23:db:ac:af:b7:e2:7e:cf:84:e3:63:33:cc:73:26:
9f:83:df:f1:44:e6:80:3d:8f:2f:d6:76:12:87:ba:
f8:2b:f8:11:af:5a:17:15:c8:dd:10:82:70:b3:5c:
50:4e:70:c3:75:c0:ec:15:e3:16:ce:1d:78:71:8d:
8f:88:aa:b5:ed:4f:ed:88:21:b5:bb:36:b8:01:cc:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:DE:9C:39:34:1F:A8:99:57:55:07:B4:B4:44:C1:05:EA:CE:BA
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:65:63:fd:0b:28:c4:24:1e:ae:29:d5:7e:00:cf:96:91:ca:
53:a3:46:09:08:85:1e:f0:7f:fd:4e:7d:2c:35:3c:1a:30:e2:
f0:e7:88:0a:9a:27:86:a6:e0:97:c2:03:48:33:f9:8e:c4:97:
54:0a:79:57:be:cd:57:c3:33:b2:cd:26:35:70:ea:26:72:47:
74:df:0e:b4:fd:bb:2e:46:a4:10:2e:77:75:b5:4a:5b:f2:dd:
f3:4f:85:40:1b:d4:31:e6:6d:68:52:6f:87:6e:3d:ff:7e:e9:
b0:8a:dd:19:27:10:f8:2c:b3:ac:5b:00:4d:d2:cc:a6:02:4f:
10:13:87:e9:44:54:37:84:33:38:59:6f:0e:e4:10:17:69:36:
31:e4:8e:54:9b:55:ed:bb:08:61:88:11:0d:4f:b0:27:5e:5b:
54:dd:f4:38:5e:1c:41:a4:8b:e4:26:c6:12:b9:1c:9b:b3:53:
54:62:b8:95:74:7b:ca:70:e8:ae:44:21:26:a8:1c:93:ad:ea:
9a:e9:bf:c4:09:58:4f:eb:36:34:ec:f4:48:ad:5e:a8:82:54:
6c:88:7e:15:9f:1c:c4:e3:e1:15:d8:41:da:7f:e2:d8:f1:74:
3d:4c:9f:0d:82:35:3c:fa:c9:26:34:5b:9b:0f:1f:65:69:5d:
a9:f2:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:45 2025 by rpki-client