Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: Bam6WtqpDrez4u7mdxGpZfcZ4WIdI6ZbVcjIH8OtoJY=
Subject key identifier: 85:93:65:AB:2D:FE:DA:07:B5:31:BC:A8:B7:D8:14:14:8C:16:2F:30
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 01964F6CEACBE417CBA24BCC1DAAA5ED9A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 1501
Signing time: Sat 19 Apr 2025 19:01:00 +0000
Manifest this update: Sat 19 Apr 2025 19:01:00 +0000
Manifest next update: Sun 20 Apr 2025 19:01:00 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: n4Rm6aT2PFqcMNyTdOGtgHTk4m9OIAQUVix3IHzv++4=)
2: oon8tofXSL0bstXb0QiNHaSo5e0.roa (hash: q95x2W1H6So6PI+GrFNwBmF4x3vMZH20z4fA4E6gLBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:ea:cb:e4:17:cb:a2:4b:cc:1d:aa:a5:ed:9a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Apr 19 19:01:00 2025 GMT
Not After : Apr 20 19:01:00 2025 GMT
Subject: CN=859365ab2dfeda07b531bca8b7d814148c162f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f1:a3:04:ec:3e:0d:b6:10:1e:ad:8f:25:5c:
95:56:76:c0:d5:93:6c:d9:09:3b:59:92:3f:80:a0:
db:cd:a6:17:b3:50:f0:7c:f3:23:4c:c3:9e:72:1b:
db:3c:2d:3a:fe:53:1e:c1:80:91:c8:ae:9d:66:6b:
ec:4c:f3:14:fa:28:6f:33:e9:b3:ee:4c:fc:77:3d:
35:78:e4:1b:3b:32:d1:dc:e3:ea:a4:07:4c:ae:7b:
a0:14:43:e9:b2:a7:38:1a:40:d0:b4:e1:3c:4f:5d:
5f:e8:d4:a8:7a:1e:72:10:26:d5:5a:94:5a:5d:df:
45:fc:69:cf:81:06:bd:a4:cb:49:93:ba:a2:97:a9:
39:85:0a:8f:c1:11:ef:e5:26:15:cb:04:1c:d7:34:
1d:80:b6:b2:d1:d8:4d:9b:3a:5a:4e:b1:6b:0e:ae:
66:4a:2e:bd:34:5f:93:8d:a1:0e:f3:b9:11:2b:f2:
46:f9:c7:67:0f:ac:7b:c5:b5:f6:25:cf:5d:e0:d6:
cc:ae:4f:8f:89:5c:b0:16:7d:7d:77:89:c9:29:1c:
a0:bf:e3:46:b6:f6:62:28:7c:64:55:28:c1:96:d7:
40:6d:3a:a0:db:10:0c:46:45:81:70:33:f2:d6:1a:
0f:9d:24:26:42:9c:4d:14:af:49:fc:04:e7:20:32:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:65:AB:2D:FE:DA:07:B5:31:BC:A8:B7:D8:14:14:8C:16:2F:30
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7b:81:95:2f:6f:cd:2e:a1:8e:2d:4c:d0:e1:11:8e:08:6a:
41:05:4f:7a:88:c7:69:e2:f5:e4:e7:26:18:ca:d5:44:59:57:
58:18:44:de:ee:69:9f:c8:38:e6:80:17:6b:09:8e:1c:6b:00:
4b:e1:6a:58:ec:61:7d:1b:b4:19:18:6b:e2:3b:11:9f:ca:d3:
9d:21:a1:4d:2a:69:17:a7:de:19:14:d3:b5:77:a5:f9:bf:ed:
71:89:bb:40:c6:59:a3:8f:bf:3e:cd:47:26:0a:13:47:68:47:
23:74:a3:0d:a8:71:fa:1e:b3:4d:98:1a:e1:9b:f8:d7:16:45:
07:db:0e:07:61:87:f5:09:d5:b8:66:28:de:fe:cb:f1:45:16:
c5:8b:58:18:35:f3:6d:ce:34:4c:e7:57:02:9a:ab:1d:69:4b:
f3:91:18:ef:32:4a:a6:c7:6e:0e:3c:90:34:b0:71:42:fd:56:
30:23:fd:7e:6d:63:ff:30:da:83:68:57:a9:a8:63:1a:cf:47:
9d:9a:09:b9:72:c1:5d:9b:93:55:9c:e2:11:33:a9:c8:19:45:
76:b0:d8:60:6f:63:24:bd:66:c3:f2:9e:f0:44:d5:0f:d3:42:
7f:d7:00:d6:ac:47:f6:e0:c3:f3:45:52:fd:7f:a3:55:63:9c:
3f:a6:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 21:29:31 2025 by rpki-client