Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: S3SOAGnDruvB+MMyTIy+H1VxqTSsEYgjSzUQT8iFmIY=
Subject key identifier: 49:47:EC:31:8C:86:25:CE:6E:1C:FA:EB:6E:7E:65:F3:E9:46:D8:44
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019652370603A0DC5C0D57D1E39CDCB03F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 09A4
Signing time: Sun 20 Apr 2025 08:00:59 +0000
Manifest this update: Sun 20 Apr 2025 08:00:59 +0000
Manifest next update: Mon 21 Apr 2025 08:00:59 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: zy5jP2zmbu5H6L+i3m+oAiOEpzjQoPLnfZzqZGwIdI8=)
2: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (hash: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:06:03:a0:dc:5c:0d:57:d1:e3:9c:dc:b0:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Apr 20 08:00:59 2025 GMT
Not After : Apr 21 08:00:59 2025 GMT
Subject: CN=4947ec318c8625ce6e1cfaeb6e7e65f3e946d844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:06:0f:b6:5d:ea:64:f4:f8:01:d0:c8:9c:
39:c7:f8:9c:a0:55:97:d8:a4:ca:87:ca:04:49:a8:
e4:7f:d0:51:c8:bd:d4:a8:d0:29:ad:0a:14:79:e0:
e7:88:24:65:d9:37:a1:44:ac:a6:6a:05:9f:e8:0c:
f3:bf:d7:97:4f:48:50:84:5d:0d:d9:29:ba:b8:7a:
59:07:e5:2f:9c:d7:2c:c8:c8:d5:7b:69:4e:97:90:
b4:19:5a:5f:9d:cb:3a:b1:e1:af:6c:b2:7b:2e:6b:
f1:01:7e:9a:b5:a9:1e:8a:13:26:7e:0d:eb:c3:f3:
61:9d:98:9b:06:5f:69:76:ba:58:5a:43:30:27:75:
36:b7:0b:ad:a6:72:37:40:98:cc:4b:f4:eb:ad:ce:
37:61:37:6d:80:b9:87:c9:bd:d3:eb:99:f0:61:a5:
11:17:79:b2:d6:6f:aa:f5:8b:9e:db:52:c5:b4:59:
83:77:90:a2:56:1b:e9:cc:c4:4b:f3:24:27:46:39:
f6:97:45:65:3e:03:c8:5f:96:3a:9b:18:95:7f:9c:
8d:f3:1f:c2:c7:c0:92:68:96:54:de:85:53:54:a4:
1e:10:3b:1e:69:1c:e6:ff:1e:9a:d6:2a:39:0c:36:
55:aa:16:48:88:90:bc:58:09:1e:ab:87:98:0b:f2:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:EC:31:8C:86:25:CE:6E:1C:FA:EB:6E:7E:65:F3:E9:46:D8:44
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3b:03:a5:ca:1e:d9:d7:da:0c:6a:75:55:16:39:5e:8f:4e:
fc:0f:f5:54:3a:82:3b:ee:5d:0b:34:4c:e8:c0:39:af:de:03:
76:28:f8:46:0f:98:14:58:18:b0:c4:7e:c8:c1:c9:96:9d:39:
0a:b5:38:35:5d:38:cd:a4:26:47:53:80:42:da:21:8f:b8:42:
8a:a3:f1:d3:3d:54:48:bc:82:72:e6:9b:30:d5:9f:67:34:ae:
c6:53:06:53:6f:4d:6b:d1:a0:ae:6b:72:0e:e0:67:8e:cf:22:
db:50:cb:14:2e:2a:86:e9:06:57:2f:6a:4d:1c:e7:a4:94:e2:
bc:a4:0e:8c:da:dc:be:e4:b3:f2:68:25:fb:fc:20:c5:dd:74:
a7:91:b4:b6:93:63:86:0f:d9:64:c5:52:71:d1:14:89:d0:9f:
88:55:f4:ef:a3:6b:5c:71:06:1d:be:b6:ed:e5:1e:ca:7f:60:
8e:3b:46:d0:52:63:4c:b9:02:4e:74:83:ce:34:64:f4:d7:ac:
25:15:74:14:70:bc:70:13:d9:b0:91:4f:b5:3c:75:f1:c6:82:
c5:05:1a:c6:cf:f6:94:83:79:61:72:22:bd:78:6e:c4:9a:16:
e9:25:bb:09:e0:9b:74:d2:db:cf:a5:ce:3c:d4:90:29:fd:a7:
50:e9:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:40 2025 by rpki-client