Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: wlfAE+RusybVLJJB4Dc0wpu+NKRRcZhk8BPOLuhI5iI=
Subject key identifier: 97:A7:8C:AB:F7:96:F6:91:0B:3E:73:C3:3F:66:C4:1A:9E:CC:A4:FE
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019652DB591A0F5B385AFF8FD2A1CAFAE182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 044B
Signing time: Sun 20 Apr 2025 11:00:28 +0000
Manifest this update: Sun 20 Apr 2025 11:00:28 +0000
Manifest next update: Mon 21 Apr 2025 11:00:28 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: IE0wKXJv3cdZtQfzwLFlPlRlMKkXH7OBkLIrJrN+pek=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:59:1a:0f:5b:38:5a:ff:8f:d2:a1:ca:fa:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Apr 20 11:00:28 2025 GMT
Not After : Apr 21 11:00:28 2025 GMT
Subject: CN=97a78cabf796f6910b3e73c33f66c41a9ecca4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:5a:51:a1:6e:05:b3:c8:64:62:32:52:17:
17:22:b5:d2:d9:45:00:0c:c3:5a:57:65:3a:ef:75:
a2:f8:da:98:fe:94:c9:b7:d3:91:ed:92:1e:78:e2:
03:8a:d4:df:73:65:8d:93:7e:bc:7b:57:cf:96:31:
ec:0c:3e:4d:5e:ce:0c:65:99:5f:ad:f5:55:51:2a:
38:65:a8:47:9c:d9:a4:3d:d2:cc:00:30:85:d3:b0:
2b:a0:a2:0d:4b:f5:97:cc:ed:35:fc:13:7b:b7:67:
4e:32:ca:0f:2c:64:9d:d5:2c:76:de:32:c2:54:45:
37:8c:e8:8f:9d:50:5d:13:83:e0:9a:95:c8:a8:7b:
9e:6e:17:9d:f5:e0:b4:ff:7b:58:18:be:aa:fe:b5:
45:62:0c:b6:78:ec:8b:95:f5:da:1e:2b:66:71:e8:
2a:bf:e3:5d:a9:2d:b5:05:70:e6:d8:ac:82:a7:af:
1b:c6:03:94:9e:b5:c8:9b:19:ef:68:0b:e8:d0:1a:
78:57:11:92:f9:a9:06:fb:3f:97:85:5a:ab:9b:15:
ed:c9:62:5c:f0:0c:ce:cb:79:23:4f:17:9c:ff:cf:
38:aa:70:bb:96:c2:6a:a2:14:db:69:8b:f5:c3:03:
9d:be:5e:48:9d:57:f0:b4:dd:4c:85:1a:4a:88:f6:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:8C:AB:F7:96:F6:91:0B:3E:73:C3:3F:66:C4:1A:9E:CC:A4:FE
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:16:5d:ef:20:3e:12:e0:a0:c4:63:cf:e0:c8:68:73:92:a9:
fb:58:a4:d2:81:f5:b0:3b:6c:63:76:3e:17:7b:31:c5:2b:fc:
6b:01:e4:8b:17:a8:8c:72:33:32:e7:26:a7:e7:2e:bc:e8:e4:
c7:e8:d8:74:dc:32:57:a6:7d:00:1e:f1:e2:53:f0:34:12:35:
5b:46:5f:8d:90:4a:a4:be:0b:61:5c:8a:ed:34:b9:cd:f9:f7:
8d:1e:db:fb:ba:d0:75:a4:be:dc:90:d4:83:7b:33:17:a9:12:
5f:de:4c:fd:d5:a5:a0:5d:3a:98:ab:9d:84:d0:ec:3b:73:4b:
b4:96:5c:d9:59:1a:da:17:a9:57:b5:ad:04:3e:f3:90:2f:9d:
fa:d7:f9:06:6e:de:8b:98:4c:a4:56:a0:ac:73:7d:32:f3:0b:
f8:39:f8:7b:57:25:d3:81:13:82:70:bf:b8:90:09:25:f7:9b:
0c:48:a0:f3:2d:ef:fa:f3:23:d4:70:3a:0e:99:be:64:c2:e2:
e7:33:66:44:0b:05:1b:fb:06:c3:22:6d:67:b1:40:09:8b:5d:
8b:44:3f:a2:35:ae:be:7b:de:3f:d6:9e:ff:7b:bf:82:83:99:
98:0a:29:71:ff:09:d5:07:3f:96:7d:e2:94:8c:5d:af:02:0a:
1d:3a:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:50 2025 by rpki-client