
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: KPxZpfAxPlF+DzwCqBnkjsurkWLz0MgS849k5jCk3r8=
Subject key identifier: EA:EB:6B:B9:FB:D6:D7:07:68:13:9C:D5:AF:F3:50:FF:53:BA:C7:AB
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019603AE53E050652AA37DB59F843E1757D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 0568
Signing time: Sat 05 Apr 2025 02:01:18 +0000
Manifest this update: Sat 05 Apr 2025 02:01:18 +0000
Manifest next update: Sun 06 Apr 2025 02:01:18 +0000
Files and hashes: 1: SILoOgzFVVKXYr4BeO1iAtaShUA.roa (hash: dPpD4jLPayYBOVInoYbVqKqufem4sI8eQUfot03I5EY=)
2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: suinI4C9wS2oKrfhIXKKu2xUvLsD3hU6uh8R2J/uKnM=)
3: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:ae:53:e0:50:65:2a:a3:7d:b5:9f:84:3e:17:57:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Apr 5 02:01:18 2025 GMT
Not After : Apr 6 02:01:18 2025 GMT
Subject: CN=eaeb6bb9fbd6d70768139cd5aff350ff53bac7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:63:1a:b2:90:37:50:8e:78:0f:93:e5:f7:
fc:ab:64:e5:d6:16:9d:ac:72:9c:b8:c9:7c:e2:2b:
38:a2:ca:c0:cf:15:78:8a:e3:72:1b:0a:4a:39:6b:
4e:81:c6:a0:37:89:69:7e:13:a2:d5:f9:f7:8d:4e:
1b:67:22:5c:ce:7b:21:84:88:4f:a9:f3:e5:a8:97:
9f:75:aa:c3:5e:e0:5a:e2:93:46:ef:06:d5:ca:65:
23:59:14:f7:4a:7b:6b:38:7e:40:e0:60:07:ce:f8:
dc:1b:ff:3f:09:95:e6:c9:bd:f0:fb:aa:c6:66:d1:
04:12:84:c8:8d:07:26:e1:50:0e:d0:ed:77:4b:32:
89:1a:bf:64:82:1f:d7:16:dd:64:24:19:14:cc:62:
b9:00:6c:d4:3a:98:15:fc:f3:4d:99:ac:b2:df:d5:
e5:b4:81:82:64:d4:ce:26:f4:89:75:d6:12:2e:b6:
80:3e:01:75:94:96:41:61:9c:3d:4a:38:f4:16:22:
21:61:63:9d:e6:1a:5b:f6:5a:54:22:bd:fe:32:e4:
da:fc:50:3a:ff:46:9c:5c:e4:95:a3:e1:36:09:63:
68:56:c4:5e:4d:8b:58:1c:96:c8:32:c4:06:e2:9c:
fd:83:83:c0:81:fa:a5:25:5c:71:64:c2:a7:a0:34:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:6B:B9:FB:D6:D7:07:68:13:9C:D5:AF:F3:50:FF:53:BA:C7:AB
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:88:c5:c1:23:c7:6b:fe:df:40:8e:e5:ee:3f:1b:4c:f8:6c:
62:bf:b3:36:a7:a2:22:fd:31:fa:15:4c:c6:32:ed:b6:3e:a6:
0b:00:e4:ba:de:58:ad:6f:a5:30:d8:82:97:4e:2b:b5:43:e4:
29:8c:ab:62:b6:f3:f8:a5:64:3c:19:00:59:ee:52:2a:78:7c:
d7:82:49:b1:83:ff:fb:a3:20:02:a5:54:17:5f:82:d0:3d:41:
00:1f:fa:2e:6c:36:5f:db:12:ed:f9:53:18:d0:df:59:fc:54:
ea:80:37:be:5b:cf:b9:e2:81:7a:a9:9b:cc:43:4c:94:e1:a8:
3d:42:43:94:f8:47:d2:dc:b5:38:48:60:77:ed:13:e8:ec:72:
c0:8b:77:47:a4:94:38:3a:88:f8:1c:1e:93:55:18:a5:63:47:
7e:25:43:49:56:1e:52:c4:f3:23:2f:0d:fe:ab:48:dc:5c:54:
b2:f0:14:fc:24:9f:7e:1c:71:ee:04:64:de:c2:2b:b6:ec:3d:
65:f9:8b:33:b1:d0:3b:e2:80:9b:d0:4a:62:cb:eb:5d:b6:43:
7f:5e:6b:b5:c3:dd:c2:6c:f6:17:ac:55:79:2a:d4:d8:86:01:
72:29:33:2c:a1:1c:07:94:77:da:ec:28:d3:f3:26:78:18:b1:
e8:30:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:22 2025 by rpki-client