Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File: TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier: kK0try0rJmMkZs5Ck1lUvZUyRhV08iQ7mKyh4RypT74=
Subject key identifier: 0B:8D:46:CB:F0:06:8E:1A:72:28:95:73:52:F1:D2:2C:D7:2E:0D:BA
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 019645FB71B019EADC808A823FA8F0BE68A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number: 14FA
Signing time: Thu 17 Apr 2025 23:00:28 +0000
Manifest this update: Thu 17 Apr 2025 23:00:28 +0000
Manifest next update: Fri 18 Apr 2025 23:00:28 +0000
Files and hashes: 1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: Hd1il3CY4RTRRVSMGt81IaOaMFEKTZSl26BD3r9oufI=)
4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:71:b0:19:ea:dc:80:8a:82:3f:a8:f0:be:68:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Apr 17 23:00:28 2025 GMT
Not After : Apr 18 23:00:28 2025 GMT
Subject: CN=0b8d46cbf0068e1a7228957352f1d22cd72e0dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:50:3b:76:36:f5:d6:84:c9:12:08:33:47:
b9:0d:09:b5:be:47:e1:4f:c8:94:11:13:1c:5a:59:
eb:b4:04:ce:66:13:81:e5:96:28:eb:06:dc:1c:1b:
e5:e2:ad:f9:11:4a:31:69:51:0e:a5:29:ae:5b:7e:
4e:64:ff:da:d4:8a:ba:ad:69:85:85:f1:19:b7:7f:
27:a8:07:50:d8:b8:65:b3:46:15:44:95:1f:e3:e0:
6a:dd:fc:34:5f:66:09:0e:45:4f:be:a2:4f:f9:cb:
f3:68:5e:b3:49:2d:f5:1a:57:fd:0c:63:06:13:69:
e1:a1:2a:3d:38:ff:a7:5f:eb:3b:c5:21:a3:97:4a:
3a:aa:a6:af:86:56:8a:27:40:ef:3f:2a:d8:81:5b:
f4:a9:91:5f:78:1e:5d:95:a3:2b:9f:28:b9:f4:ab:
35:6b:9e:29:b7:57:96:9e:71:47:e3:ac:05:c5:6f:
06:56:51:5b:7a:63:5c:3d:ac:4f:91:c1:37:a8:96:
ba:80:3d:3e:7b:b8:c0:6c:7a:73:02:26:4f:c7:61:
d9:35:5d:d0:88:57:2c:53:52:60:2e:a0:6c:42:64:
4b:b5:fb:cb:1b:3b:05:8b:ca:d8:b1:10:bc:f1:e0:
1c:df:0a:cc:fb:c3:24:41:9e:7b:57:df:83:7a:81:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:46:CB:F0:06:8E:1A:72:28:95:73:52:F1:D2:2C:D7:2E:0D:BA
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8e:d8:e9:90:4b:02:62:40:ad:82:a4:8d:fa:63:a0:a8:c8:
fd:28:27:80:0d:7a:c3:18:fe:59:65:e3:72:b5:cb:55:1e:28:
ad:d4:95:c6:bc:53:6e:49:8c:8c:9d:e4:94:ff:ca:b6:4e:e9:
ca:94:be:a0:75:f6:8d:26:38:55:2b:90:f3:e4:88:27:fb:9d:
bb:36:c3:d1:24:5d:5c:ba:b0:4a:ed:ff:98:76:80:1f:e7:df:
63:95:23:a2:b8:0f:a2:af:f7:4b:ce:99:19:1d:8a:c7:5d:71:
ca:a2:60:84:41:df:e6:84:64:16:e8:80:7d:e1:07:e0:b9:0d:
25:3e:f8:90:1b:23:a6:e2:d2:36:33:e9:b6:0c:b0:3f:12:f0:
76:fb:cc:03:67:17:53:e8:93:f5:c6:a4:dc:14:7e:64:a7:60:
7a:27:12:9e:70:66:2e:56:29:fb:01:7a:2d:24:60:f1:73:f5:
d4:1a:c4:13:2c:16:17:9d:4a:17:1d:e5:78:df:1c:f4:8a:99:
8a:5d:4c:07:70:6c:05:b9:12:73:4a:9e:0c:f8:a3:09:78:3f:
e9:45:57:62:a1:ce:d7:70:e0:c4:60:c0:52:68:4b:ef:85:e5:
e9:28:b7:e3:03:05:1f:be:f5:6e:61:5f:6b:6c:f1:a9:db:ff:
a8:5a:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:19:34 2025 by rpki-client