Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: KhsaEyMEMSt0QT7Zxvkp2j4+1FMbMARW1HrYMfO/wfY=
Subject key identifier: 08:19:0E:B9:F0:AB:E2:5D:1D:B6:4D:95:49:DD:A6:5B:B5:03:90:DA
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 0196022E384A2E239F7866FDBFF121ECD53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 14D4
Signing time: Fri 04 Apr 2025 19:01:45 +0000
Manifest this update: Fri 04 Apr 2025 19:01:45 +0000
Manifest next update: Sat 05 Apr 2025 19:01:45 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: ChAqoHOaVSyjI/0ZCcPm52YfJjGKxwVeHm2vfSs0yZk=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:2e:38:4a:2e:23:9f:78:66:fd:bf:f1:21:ec:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Apr 4 19:01:45 2025 GMT
Not After : Apr 5 19:01:45 2025 GMT
Subject: CN=08190eb9f0abe25d1db64d9549dda65bb50390da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:bb:30:3a:85:f8:fa:4d:e6:86:50:1d:ea:
9c:8b:0f:fa:c8:6f:bd:13:35:0a:23:98:b3:83:05:
86:c7:1a:3f:bf:7c:5c:6c:9b:6d:e8:fc:02:c1:c4:
cd:6a:d4:69:66:90:b2:c0:41:69:96:23:8e:e5:46:
3f:ae:ef:b9:bb:92:f2:88:6a:4c:ce:fb:3b:9a:8e:
03:67:65:f5:1c:0f:0f:76:e6:f1:e7:44:b8:84:f6:
a9:9f:93:f2:22:e4:f9:a5:2d:d9:6d:d5:be:9f:e2:
8e:86:73:92:a0:5a:27:16:57:f8:bc:4c:33:00:32:
25:c3:f9:6c:8a:e1:51:e2:b4:f4:9f:bd:88:88:42:
e0:08:b8:cf:7f:38:ef:7d:c8:9d:1d:34:81:6b:b1:
21:b8:7b:b7:32:5c:f9:86:d4:3b:d7:54:f9:a7:47:
25:5e:81:24:0a:3f:f1:37:74:6e:46:d6:b7:d3:21:
36:4b:c2:3a:ee:6a:52:e3:9f:61:c5:86:6d:55:bf:
43:22:ea:ca:38:90:34:a0:74:57:93:e1:f8:4d:49:
f1:8f:ac:47:86:21:f2:90:58:ed:aa:e8:e8:0a:6d:
d7:1d:de:1c:67:f4:4a:4f:4a:06:92:35:a9:c2:4c:
fc:2a:f1:c4:72:32:06:20:55:30:09:b0:b9:29:b2:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:19:0E:B9:F0:AB:E2:5D:1D:B6:4D:95:49:DD:A6:5B:B5:03:90:DA
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b4:9e:51:c3:6b:0e:7d:a8:bf:46:73:1d:23:95:8c:f3:20:
c1:1a:7f:13:7c:a5:ca:62:f8:ba:d4:3e:3a:7b:7f:37:29:a0:
9f:17:aa:b3:60:f0:be:b8:c7:6c:ab:ab:db:9a:7c:3a:cf:a3:
0a:85:43:d6:eb:de:fd:d6:7c:78:bf:c2:05:19:a8:d8:e4:f4:
2c:2d:42:a0:2d:5e:76:2a:be:3f:ae:9e:4e:29:07:40:02:0e:
c4:0b:ee:64:f7:5e:2a:8f:c5:81:3b:e7:bb:4e:34:00:e0:51:
83:28:3a:6d:9a:de:9f:1b:16:b7:34:6f:1f:01:9e:5d:f8:fe:
90:91:25:30:95:c1:3d:20:72:c2:e1:8a:2e:ee:81:22:b5:17:
1b:38:b5:53:bb:3f:81:ae:97:89:a5:27:10:e7:67:84:bd:c7:
45:70:3b:5a:3a:02:58:d6:e2:5b:8d:ff:6d:76:ff:b4:0c:ab:
74:ae:9f:be:ff:3d:3a:b8:72:2a:88:b0:6f:43:b5:64:1f:96:
d6:c0:b2:d0:58:67:99:94:08:14:fc:87:1b:0f:e4:86:84:39:
6d:5d:60:89:6a:a8:7a:df:94:9e:e4:07:d3:9b:3a:58:7f:82:
11:48:ba:8a:88:4f:99:04:b4:18:b0:44:b6:1b:9f:04:39:c8:
7b:ec:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:52:26 2025 by rpki-client