Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: 6bbWSMnoOoxaOWKn7Odv0f009TtgeL7ve7aVptqu4V4=
Subject key identifier: E4:3E:51:87:31:53:64:1C:31:52:A6:83:2F:D2:18:7C:8E:D0:5E:9F
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 01961B11A24353EE46C110C3138C7803B39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 14E3
Signing time: Wed 09 Apr 2025 15:01:02 +0000
Manifest this update: Wed 09 Apr 2025 15:01:02 +0000
Manifest next update: Thu 10 Apr 2025 15:01:02 +0000
Files and hashes: 1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=)
2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=)
3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=)
4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: ZiaFY4Y8Usl2GaDjyo4JdurniAff/aJ2lyNKjo2/HFQ=)
5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=)
6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=)
7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:11:a2:43:53:ee:46:c1:10:c3:13:8c:78:03:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Apr 9 15:01:02 2025 GMT
Not After : Apr 10 15:01:02 2025 GMT
Subject: CN=e43e51873153641c3152a6832fd2187c8ed05e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:be:12:71:67:f4:2d:89:6e:e9:c1:c5:de:
60:bd:32:ac:54:08:8c:4f:d5:01:12:fb:c0:88:0b:
75:8c:7d:39:d8:a8:7d:23:d1:bd:6f:bb:2c:f8:e0:
e4:e8:4a:ac:07:97:36:1b:e9:c1:13:f5:c0:8d:d1:
3d:83:7c:c9:40:15:2b:a4:aa:43:24:1b:fb:6d:55:
5b:59:21:85:55:04:9b:ac:4d:99:9c:5d:40:53:c6:
a5:e7:58:3a:89:51:1f:df:bb:db:51:44:e5:fa:cf:
b0:80:74:96:50:61:38:f8:9a:ec:8b:32:30:e8:48:
d3:7d:e7:7e:81:7a:8c:1e:c6:47:90:c7:19:07:b4:
80:56:0c:65:8e:39:05:78:e7:5f:25:cc:db:ca:ff:
d9:7f:81:bd:26:cc:d4:77:08:37:78:5a:8a:e4:59:
b2:91:9a:f0:ce:95:da:31:53:52:38:7b:9d:44:b9:
db:3b:fd:4e:11:6a:ca:73:dd:9f:10:e2:65:1a:f2:
c6:a0:48:c3:4d:fe:d3:c2:bd:bf:ea:c9:81:c9:c2:
b3:9f:dc:7b:02:5c:86:1c:a0:c4:39:b2:6c:4c:27:
b7:4b:82:ee:3f:ae:fb:c5:96:0a:1c:24:06:e4:1b:
cb:25:89:05:7a:a5:a3:04:11:23:6f:bd:2c:ea:e6:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:51:87:31:53:64:1C:31:52:A6:83:2F:D2:18:7C:8E:D0:5E:9F
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c5:6f:5a:90:89:b4:8a:36:7a:3d:3f:4d:e1:67:cd:6b:23:
9e:23:ab:cb:24:1e:59:04:60:52:95:f4:11:40:24:c7:fa:a1:
45:6c:02:52:00:ea:ae:86:87:0b:ab:05:fe:60:fe:0e:d8:06:
74:2d:c6:70:54:f9:8c:7e:78:61:33:18:e0:7e:ac:0d:7c:58:
45:7b:88:90:2d:be:9e:94:57:dc:16:8e:4c:1d:9e:78:02:60:
ff:f2:24:54:8f:c9:50:f8:49:a9:b2:4d:75:d0:0e:81:f9:19:
08:62:9f:14:df:20:63:52:09:b3:de:57:b6:6c:3e:50:0e:67:
af:dd:80:52:b1:a0:fb:63:6e:22:f3:85:18:c7:d9:8f:3f:1d:
60:79:10:97:a8:37:38:ea:60:a9:4f:4e:9e:8f:a9:1f:1d:f6:
22:31:b5:c2:42:48:df:38:78:66:49:0f:2c:9d:dc:cf:cc:77:
9c:9e:39:8e:a1:02:bd:08:1e:f0:ac:43:29:7f:94:81:f5:6e:
f4:be:9f:f6:4d:56:91:8c:8e:a6:d4:92:dc:0b:14:22:2f:b1:
e9:26:eb:75:d3:04:d5:db:80:2c:80:70:d0:68:16:52:96:75:
74:d6:97:11:05:99:e3:df:ff:03:06:60:d0:d2:f8:83:ce:45:
31:f0:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:23:07 2025 by rpki-client