Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: XWsD/lDkQwUfCLhg8udTel3KJo7iwjCV7CPJv+YzVGo=
Subject key identifier: E9:92:0B:3F:91:5F:83:BE:A2:CF:1E:22:1B:F1:73:D9:B6:E8:35:EE
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 01965492F37143949B11EFC768A67A4E127E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 11E9
Signing time: Sun 20 Apr 2025 19:00:38 +0000
Manifest this update: Sun 20 Apr 2025 19:00:38 +0000
Manifest next update: Mon 21 Apr 2025 19:00:38 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: yOxQRq61FeU26BJAmaYH5YG2FgZMbbgZU/cRmcYPDIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:f3:71:43:94:9b:11:ef:c7:68:a6:7a:4e:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Apr 20 19:00:38 2025 GMT
Not After : Apr 21 19:00:38 2025 GMT
Subject: CN=e9920b3f915f83bea2cf1e221bf173d9b6e835ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:40:b6:f3:5a:9b:a0:b5:12:9b:a7:af:66:
b2:7f:8f:27:ed:19:6c:8d:f3:ca:05:01:01:fd:b7:
b7:7a:74:21:c3:a7:6d:03:ee:6d:db:a1:30:b1:b4:
92:20:c7:48:a5:4b:74:30:83:5d:2a:a8:26:37:3f:
94:ff:6e:8d:76:a1:c4:5a:51:4e:f7:fd:16:d8:07:
7e:0f:f5:9b:1e:55:2c:4d:7f:a2:e4:39:e1:74:ab:
64:55:24:6b:0d:59:b2:d7:2c:a7:a7:66:a2:c9:ba:
48:4c:4c:3e:d8:a9:6d:e3:5e:6f:36:b3:98:8f:73:
18:2a:1a:05:33:74:07:98:23:56:44:17:57:5b:1e:
fd:7f:cf:b6:35:e4:cb:da:b0:c3:19:1f:44:bc:34:
1d:f8:d2:b9:1f:28:10:84:6e:85:cf:7a:4b:5f:92:
df:86:24:b9:c5:93:66:43:17:a3:46:00:d4:d0:de:
83:17:25:db:ed:dc:7d:4f:a3:61:80:f7:79:09:61:
e3:48:f4:4c:ae:8f:87:d0:94:54:07:ae:82:2d:e8:
f1:dc:04:3b:ce:8f:65:9a:d3:0b:c9:9d:cc:fd:45:
57:d0:95:fe:fe:19:ba:fa:7b:12:4b:94:b0:ef:7b:
72:f5:a4:a9:45:7a:68:4a:e2:ff:b7:4b:88:a0:24:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:0B:3F:91:5F:83:BE:A2:CF:1E:22:1B:F1:73:D9:B6:E8:35:EE
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:06:ee:9f:49:f5:c1:24:9f:44:04:6a:59:3a:b8:b8:ce:d2:
9d:2e:9b:89:95:a6:fa:13:e9:77:99:89:ec:60:98:2b:36:b8:
7a:7f:5a:fd:06:43:e7:81:69:a7:a7:ab:12:08:2a:75:3a:f7:
68:6e:b4:a8:14:57:43:5a:b6:eb:f9:1c:61:14:84:57:f3:1f:
52:98:fc:80:a8:ad:7b:b2:be:28:1a:4d:53:4e:fc:da:dd:e8:
69:0a:f7:56:f6:aa:7a:bd:00:f3:eb:91:c2:0b:27:01:eb:51:
5c:21:69:b0:a3:1b:38:a3:60:7e:4c:e5:fb:f6:57:22:3d:04:
40:0e:4e:a3:3d:bb:d7:48:c0:7f:7d:94:70:5b:03:c5:5f:ca:
ea:0c:14:58:28:39:27:e0:98:77:4f:a9:ed:6f:65:04:85:4c:
e5:7d:bb:ce:83:16:c1:cf:7b:14:ce:c2:c2:e8:8a:61:c3:a0:
fe:5a:17:c4:be:53:3b:91:8e:b2:9d:97:a1:92:72:7b:8d:d9:
21:a3:be:c3:97:a5:10:42:7f:ab:39:c5:5a:b9:06:49:7a:5d:
25:f0:07:0e:e5:dd:19:33:f1:c5:bb:05:48:15:9c:e9:a9:44:
95:18:70:64:20:58:37:a6:8b:9e:ea:4a:e7:94:5b:68:0a:64:
c8:bc:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:12 2025 by rpki-client