Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: 2ycYpNmSWRigoMXv8iWLsbPNDm1dH6pwUMU2c1181C4=
Subject key identifier: FA:2C:1C:89:46:90:EB:E3:A4:12:4E:9A:65:EA:FB:0C:C1:2D:98:97
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019644B1F7BBD523D79AE2ECAE825119B9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 0E73
Signing time: Thu 17 Apr 2025 17:00:36 +0000
Manifest this update: Thu 17 Apr 2025 17:00:36 +0000
Manifest next update: Fri 18 Apr 2025 17:00:36 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: TDCpI8ldQD9JUSBvmBZyCjsH8+VEvwcHv7v00Cd55ag=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:f7:bb:d5:23:d7:9a:e2:ec:ae:82:51:19:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Apr 17 17:00:36 2025 GMT
Not After : Apr 18 17:00:36 2025 GMT
Subject: CN=fa2c1c894690ebe3a4124e9a65eafb0cc12d9897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:f4:ad:e8:05:7c:76:40:96:73:b5:bc:ec:
a2:7b:ed:35:81:dc:2d:f2:40:8b:df:3b:64:5a:6f:
33:28:e8:28:67:5e:e8:5b:6b:f1:aa:66:bf:2f:1e:
25:12:7d:4b:d6:8a:c1:b2:52:30:00:7f:83:93:da:
09:d1:a8:03:53:c8:55:36:19:ce:d0:cf:fc:ec:52:
17:5f:ed:22:ef:e7:1d:d0:7f:2d:39:ed:25:60:4b:
2c:14:2c:42:19:d5:e4:20:0a:8e:df:92:f2:83:2c:
33:91:aa:c7:1d:c4:c8:27:09:f0:65:c7:cf:aa:01:
00:6f:02:8a:16:c4:c0:c4:2e:1d:a7:5a:1a:e2:13:
9c:e1:de:50:21:cd:7d:75:88:88:81:a4:31:7a:5b:
21:d6:79:ef:21:2f:7b:8e:54:a6:6b:a7:da:71:72:
0a:c9:da:b3:1c:e9:5a:36:df:d5:f0:d9:99:a9:10:
31:93:b1:59:fd:23:98:6c:e2:f4:5d:ce:7f:19:2f:
d3:52:c1:67:3c:9e:19:4e:0e:23:5f:0f:81:18:09:
7a:4a:69:28:9c:23:9b:55:77:8a:fc:cc:22:b1:c0:
2d:22:11:20:bf:8b:aa:ea:d2:35:55:ca:fc:f0:62:
8e:85:5c:93:12:2c:fa:e0:e7:12:86:fd:30:76:1a:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2C:1C:89:46:90:EB:E3:A4:12:4E:9A:65:EA:FB:0C:C1:2D:98:97
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b8:f4:22:1f:de:95:46:e8:86:0a:03:49:18:dc:48:e7:b0:
ab:ab:58:72:7a:a9:19:08:27:ed:79:5d:a9:f0:92:f0:67:f5:
09:aa:cc:8e:b5:c7:f0:41:9a:e0:db:7e:4e:fa:1e:52:5b:9f:
3f:8e:e0:78:8e:d6:b0:d4:5a:38:ff:f3:77:a1:66:78:6e:7c:
1e:4b:e7:58:14:d5:7d:a6:e9:5b:86:03:d7:af:dc:b0:fe:84:
82:bb:12:f3:f9:ec:2c:65:90:79:2b:0f:7c:71:2a:33:c3:50:
24:fd:b4:55:c7:1b:28:2a:71:b4:13:90:a6:eb:1e:06:98:ff:
e4:fa:66:1c:1c:f6:dd:49:ff:38:cd:62:7a:53:24:2b:de:eb:
e5:60:97:26:e0:db:30:df:12:c1:91:1a:46:50:93:3d:1f:05:
64:c2:3e:81:75:79:30:0e:cc:21:5e:3f:1e:4a:aa:ad:00:74:
20:97:3a:6a:f3:4c:7b:92:a7:0e:08:94:5e:44:d5:78:d8:64:
55:92:d2:1a:6b:26:5b:9a:d6:13:20:47:0f:72:ab:06:07:78:
a4:3f:c8:b4:4a:8d:8b:90:40:64:25:07:6e:dc:9f:40:3e:59:
8c:ab:8c:53:8e:24:74:bd:38:4c:bd:21:a7:b5:a1:7c:18:f3:
1a:c4:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:22 2025 by rpki-client