Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: CBJMcBwssLMFMWiHM+DFCSOkRRRbFagJMrUfyYC4TnE=
Subject key identifier: 2F:27:31:4C:97:4C:E7:2C:A2:6D:6E:3A:3C:E7:8B:2F:33:B8:AD:A7
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019658DD49F9831119E1896B4CC27ED50CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 02F9
Signing time: Mon 21 Apr 2025 15:00:19 +0000
Manifest this update: Mon 21 Apr 2025 15:00:19 +0000
Manifest next update: Tue 22 Apr 2025 15:00:19 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: AzoGx2ncf06HCcYZ0dJprYgP29s6jVqm0Cj0k6A74Wc=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:49:f9:83:11:19:e1:89:6b:4c:c2:7e:d5:0c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Apr 21 15:00:19 2025 GMT
Not After : Apr 22 15:00:19 2025 GMT
Subject: CN=2f27314c974ce72ca26d6e3a3ce78b2f33b8ada7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d9:a1:aa:6a:ad:a8:15:5e:31:b6:f7:be:59:
94:8f:b5:dd:47:b7:5c:dd:31:9e:4f:70:80:3c:f7:
7e:2e:70:3e:6b:b1:ce:39:36:4c:50:80:df:80:b5:
81:45:c3:c6:ab:34:d3:e3:12:ce:ab:9b:e6:3d:b9:
24:f3:a5:46:39:d5:5e:85:98:50:8a:57:70:a3:88:
7a:de:e2:bb:1d:1c:48:bc:14:b1:11:20:6c:53:b5:
31:bb:b0:80:71:4b:75:8e:00:1a:d8:d8:f4:4c:03:
1c:24:53:27:04:4e:c5:bf:2f:39:1a:8e:5a:72:46:
3f:97:1e:e9:86:e6:4e:c1:5a:d3:e5:70:c2:f0:61:
12:75:cc:cd:42:0e:a9:a3:24:52:93:21:88:83:12:
ae:01:35:2f:da:7a:25:9e:1c:d0:87:b9:86:94:7e:
6e:18:41:de:3d:55:7a:df:e4:f9:47:f7:2a:c0:ce:
95:c9:34:b8:f1:a8:87:22:20:c1:f9:5e:18:ea:25:
94:f6:f4:6d:58:54:e3:4e:58:e3:e5:65:43:49:38:
b8:48:43:e4:cf:12:26:d6:c0:0c:e2:de:f3:80:b2:
8a:28:28:bf:90:f3:aa:fa:6d:65:51:29:fe:32:56:
1c:84:68:6e:0c:21:e2:84:a2:b5:d6:56:49:b0:b1:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:27:31:4C:97:4C:E7:2C:A2:6D:6E:3A:3C:E7:8B:2F:33:B8:AD:A7
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:82:45:1d:55:81:85:23:de:3a:73:a0:c5:3b:a2:28:b8:52:
d9:68:9f:d1:1d:ec:d2:e8:19:f6:38:1a:23:44:90:b4:42:92:
ec:1b:3c:31:96:11:3a:39:ca:5a:4c:86:bd:fd:fe:bc:0a:75:
d2:c2:69:1e:29:73:71:35:cf:8b:36:cb:ea:44:07:b5:eb:60:
7f:8b:e3:80:a1:a6:c3:d0:ca:e1:29:0d:db:af:15:cf:de:bc:
01:ad:f4:ef:60:1a:33:5f:82:89:94:de:74:05:a0:ad:ff:c7:
9b:11:e9:d8:54:64:3b:c7:0f:a0:16:35:63:41:df:09:2b:6b:
4c:84:8e:3d:7a:89:7f:15:36:7d:25:30:8b:39:93:c3:e0:ad:
57:e4:6b:24:18:03:0d:de:cc:62:21:44:16:49:a4:a8:02:15:
93:d1:9a:ea:8b:1e:a5:15:b3:67:ba:4b:71:01:71:f1:8d:68:
f0:71:e9:98:13:4c:ea:6d:ed:fd:54:ab:4d:f6:92:bf:8a:7d:
a7:6e:93:d1:b8:bf:a7:ba:4e:c7:0e:5a:a0:35:6f:1e:03:4b:
ab:8c:32:a3:2e:e1:81:4e:97:65:11:01:f4:f4:63:70:b0:0b:
b1:97:f4:4e:0e:68:08:0e:bf:5d:a4:44:c9:20:fa:c0:cb:d6:
5e:8b:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:59:06 2025 by rpki-client