Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: w/7S0bkvCrYMqDuM6heQIHX8cvj/iPGoM+cmM2zGJ9Q=
Subject key identifier: 07:78:F9:9E:40:B4:AE:D5:98:87:C7:91:29:67:92:44:17:F9:D1:9C
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 01964AB3C25BD3D924804D448160C98D26F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0E77
Signing time: Fri 18 Apr 2025 21:00:16 +0000
Manifest this update: Fri 18 Apr 2025 21:00:16 +0000
Manifest next update: Sat 19 Apr 2025 21:00:16 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: GKiqjJNjt/haLon5gpk/xEJi5EvTWusbOGAay3ZcZ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:c2:5b:d3:d9:24:80:4d:44:81:60:c9:8d:26:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Apr 18 21:00:16 2025 GMT
Not After : Apr 19 21:00:16 2025 GMT
Subject: CN=0778f99e40b4aed59887c7912967924417f9d19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:c5:98:e3:7e:af:d4:02:9d:52:a9:29:09:
b1:17:e6:a3:55:8f:25:c3:5d:d4:86:88:c5:82:69:
9c:be:e2:20:71:80:b4:61:b4:52:a0:29:7f:9f:cc:
56:76:21:ba:7c:78:f1:63:fd:e1:d7:fa:f1:84:c9:
83:b6:0a:17:2a:44:42:cc:ab:1e:90:cc:7f:01:28:
65:99:57:3c:40:7d:5f:a1:9a:c0:38:75:1f:2a:3b:
39:fd:d8:5f:cb:c9:3d:ff:c1:8c:44:fe:6a:36:ce:
23:b7:63:4c:0e:24:db:db:77:a1:f0:36:6e:98:5e:
e4:f4:e6:bc:2c:01:65:48:cf:b1:77:d9:8e:bf:e1:
e9:b6:34:f3:62:84:f2:96:d5:b0:3d:0c:73:22:f8:
9f:53:3e:25:62:a3:3b:f6:40:5d:8d:8d:72:4a:98:
19:11:e7:82:f4:4c:98:d7:5b:1f:a9:39:a7:d6:cb:
37:b9:16:5d:c6:c9:e1:a3:fe:8b:10:b6:2b:ac:b6:
dd:3d:0c:47:8a:10:66:04:9b:c9:de:21:bd:14:c6:
e3:03:a7:87:15:ec:7c:5e:06:06:1e:6d:24:5a:e5:
9a:cb:bb:b4:b6:dc:87:4c:5d:98:43:4f:e0:e9:a4:
ad:d6:34:49:89:37:28:1b:c0:17:ae:84:7c:df:1e:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:78:F9:9E:40:B4:AE:D5:98:87:C7:91:29:67:92:44:17:F9:D1:9C
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:90:77:65:8b:6e:07:4f:bb:ed:c8:d2:c1:1b:36:f1:c4:ab:
5a:a2:27:07:fd:a8:c4:96:e1:d3:00:1c:2e:ad:0e:9c:66:a4:
39:9f:2a:72:dc:cd:1f:47:50:82:37:49:87:a8:c3:3c:00:9c:
87:61:2e:76:83:88:ee:97:72:38:ab:03:2e:1e:d7:a8:9c:05:
54:83:99:ed:57:03:ab:6f:45:3f:45:5d:8d:fd:c9:d1:02:1e:
09:97:7c:63:38:72:14:ae:35:53:00:11:1b:2a:dc:95:63:b5:
9d:46:19:7e:ee:84:3e:c8:13:ff:db:19:7e:f1:27:e8:22:7b:
ec:be:62:28:1b:2e:13:ab:13:c6:e2:49:74:82:a9:e9:1a:63:
ab:f7:4a:00:5d:2f:d2:fa:4b:8f:7b:d7:da:b7:b8:c7:84:20:
fe:b6:09:28:91:77:6b:0a:7e:a8:02:9e:f6:9a:42:09:76:7f:
1f:a8:2b:b1:4d:d9:59:d9:b0:0c:f5:00:8e:98:34:ec:2b:6b:
54:c6:2e:3b:88:55:27:dd:5e:5f:db:54:59:71:62:99:cc:88:
ac:64:e1:b9:a3:b3:bb:b1:c5:2a:70:ab:b3:01:00:0d:eb:cb:
ac:3d:01:e9:2f:7a:48:2a:9a:45:4e:46:30:86:b4:59:84:ce:
33:70:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:25 2025 by rpki-client