Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: /r4nqIFSk+a5sksNwjyV51Ns/xvmnTbkGcj3x7WwKEE=
Subject key identifier: A1:32:73:3B:A1:0F:D1:C9:08:F9:B6:EA:01:3D:56:53:CF:8A:AF:1D
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019655DCCFF3267C67FEBBDB439BF3CB61B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 0FB4
Signing time: Mon 21 Apr 2025 01:00:56 +0000
Manifest this update: Mon 21 Apr 2025 01:00:56 +0000
Manifest next update: Tue 22 Apr 2025 01:00:56 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: 3ZX7y8Os1RtCRkvVPNBPFYFFWDebjVaGRTNXDYWJoEc=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:cf:f3:26:7c:67:fe:bb:db:43:9b:f3:cb:61:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Apr 21 01:00:56 2025 GMT
Not After : Apr 22 01:00:56 2025 GMT
Subject: CN=a132733ba10fd1c908f9b6ea013d5653cf8aaf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:82:94:e4:9f:6a:4a:5a:4d:17:de:48:e5:
be:59:2d:16:42:3d:24:b2:fb:2a:b1:29:35:2f:41:
bc:22:74:a1:ae:7d:9e:a6:a1:55:eb:8e:ef:57:e1:
13:6c:2e:b9:b0:da:3f:dd:3a:de:b8:45:e7:0b:f8:
84:91:b1:45:19:eb:4f:32:37:b3:36:9f:e6:e5:8b:
db:37:a5:fd:f9:7a:3d:98:72:81:2e:68:7b:cd:de:
fd:19:33:4c:1d:6a:8b:49:0e:f5:1c:f2:16:80:c1:
b5:7a:af:e0:83:53:cf:86:9c:f9:e9:dc:a6:79:cb:
30:36:2f:c3:3f:d0:14:17:1d:45:3e:f4:70:29:fa:
49:a6:29:2d:88:89:f8:72:1a:75:13:5a:b4:ee:0e:
28:31:6b:17:51:a9:86:c7:ca:84:82:92:9a:84:e2:
d7:0b:aa:3c:41:7b:f2:8b:53:53:47:2d:1e:f0:ea:
52:c7:c8:38:7c:06:de:a9:24:87:b2:55:e0:24:9a:
08:18:61:3c:25:15:26:c1:4b:78:01:fa:3a:aa:04:
43:d7:74:dd:91:85:ae:69:84:32:27:ad:64:ee:8e:
36:5b:b3:5c:dc:f7:82:5e:7a:d9:65:4b:5e:04:da:
61:8d:6d:ee:71:a2:3d:a9:e3:1a:1f:f1:0e:01:77:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:32:73:3B:A1:0F:D1:C9:08:F9:B6:EA:01:3D:56:53:CF:8A:AF:1D
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:9f:1a:9b:e3:ba:52:9a:db:e9:e5:0c:6b:6c:1a:41:4e:
eb:b3:ec:34:aa:b3:11:06:4e:d6:91:4f:e4:76:5b:9e:ab:e3:
68:3f:32:c7:88:f0:ce:2b:3a:24:df:ad:28:b4:b1:fb:65:2f:
92:ee:77:d0:44:3f:ff:22:d0:f3:3c:78:3b:62:35:82:30:ac:
75:6c:7f:17:1f:1c:d8:5a:bf:66:ac:ba:75:d1:0a:5f:91:55:
5f:1e:9e:9d:e9:2f:b0:32:c6:e8:f0:34:87:26:4d:23:f2:2a:
bf:22:fa:d5:68:01:0b:f2:6b:46:84:b9:c0:04:b9:7d:3f:a3:
19:d5:8e:b8:b6:41:f9:cc:65:f1:6f:a5:6e:36:17:47:3e:c6:
82:8b:f9:35:2d:22:c2:c6:c6:da:08:4b:7c:c5:bd:5c:a7:74:
4c:2f:e6:4c:ad:6b:02:26:ba:76:5b:0a:57:5f:5a:0f:08:ae:
40:5e:aa:33:f0:8d:6d:18:8f:46:0f:9c:ca:6e:59:1b:b1:59:
f2:ca:fd:a7:22:b0:a4:0d:f0:e2:97:1d:f4:70:aa:eb:43:74:
f7:b9:19:34:b1:1f:5f:0f:a1:90:d4:89:cf:2c:df:85:16:ce:
9f:7b:ef:f4:8e:95:9c:a9:6a:45:d2:89:ae:23:76:ea:cf:7e:
a2:b9:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:07 2025 by rpki-client