Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: ChvAqn2L3lvqcKDnEYpLT8NAm3Nne5aiRy/IKB8lv6A=
Subject key identifier: B0:3D:2D:DE:98:41:0E:85:C5:96:16:57:6B:80:2C:5C:F4:C3:61:5C
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 01963CF8BB45600E1F49DCFF75760163B4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 0DED
Signing time: Wed 16 Apr 2025 05:00:55 +0000
Manifest this update: Wed 16 Apr 2025 05:00:55 +0000
Manifest next update: Thu 17 Apr 2025 05:00:55 +0000
Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: XIxgFUGk0H8/VtpgQyGUxFoOMR/W2+Vkg7FZctHMW5Y=)
2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:bb:45:60:0e:1f:49:dc:ff:75:76:01:63:b4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Apr 16 05:00:55 2025 GMT
Not After : Apr 17 05:00:55 2025 GMT
Subject: CN=b03d2dde98410e85c59616576b802c5cf4c3615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:c4:6d:f6:bd:dc:f7:1f:7c:5e:85:c7:0b:
fe:f2:83:f4:71:a3:5d:81:e4:72:54:b4:84:59:1e:
14:8c:c8:a3:34:aa:22:fd:de:f4:ed:fa:55:2c:dc:
1e:da:a8:f5:43:76:3a:28:c2:f5:43:f6:38:94:1b:
16:80:68:44:bc:29:ff:01:7a:a4:32:ee:30:32:05:
f8:af:c5:bd:a6:e6:5b:a6:b8:52:98:3d:80:ce:9a:
1b:c3:f4:62:fa:d2:92:a1:4e:1c:da:dd:60:bb:f3:
80:66:15:c7:83:6f:3c:76:c4:ff:37:d9:88:50:40:
c9:cb:06:cc:06:71:74:eb:43:bc:d6:8d:00:10:b2:
03:17:70:b6:76:7b:e8:a1:b0:54:49:eb:6d:36:6e:
ba:d8:16:7f:92:cd:be:59:cd:63:13:94:3c:ad:ce:
14:18:6f:e5:ac:af:b8:54:e5:50:0f:80:12:61:22:
2d:ff:76:3a:3c:47:74:63:26:70:de:4c:c2:4b:52:
52:69:68:f4:d1:ee:5a:08:49:8d:7f:37:e9:55:df:
a0:9b:0a:48:2c:39:d2:8d:36:81:3e:5a:fe:5c:1e:
02:36:a4:07:37:cb:74:93:e6:61:09:5c:9a:6c:18:
35:22:ab:fc:f7:3e:b9:b5:69:a7:09:44:33:b0:4d:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3D:2D:DE:98:41:0E:85:C5:96:16:57:6B:80:2C:5C:F4:C3:61:5C
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:09:1b:12:75:77:68:0f:43:a4:2f:a6:9f:9b:b7:97:24:17:
49:3d:05:de:58:9c:54:88:e0:2b:bb:43:36:a2:79:15:13:c8:
f4:e2:51:c6:89:58:63:f9:30:6a:c9:60:c0:fe:9b:a5:90:fb:
20:08:b1:6c:d1:75:87:a9:9b:07:04:9f:ba:26:e3:0e:ff:1e:
a0:e2:31:0c:2b:69:4b:56:b9:5b:fb:b4:ac:43:28:40:61:04:
1e:db:63:31:09:54:20:ef:2f:20:e1:55:ba:fe:46:81:63:c8:
31:aa:dd:9c:d0:8f:f4:b8:31:6c:5f:32:3f:1c:05:86:b4:f4:
ae:56:bf:67:6d:6b:52:ae:fc:94:83:9a:c3:3b:99:2d:11:90:
be:f9:88:40:90:b1:5b:bb:86:c8:7a:3e:7a:03:b4:0c:d9:72:
65:0c:d5:bd:a8:d1:52:0a:1e:2f:c2:1a:60:e3:93:fb:94:17:
af:c7:8f:97:22:70:d1:6f:e1:d8:56:a7:39:41:e7:fc:4e:4d:
86:c4:99:8b:58:88:08:51:da:d0:40:72:e8:26:e3:1d:04:df:
fb:0b:a9:ba:52:59:b5:97:e4:10:92:72:d1:d0:6f:4a:ae:3d:
0b:c2:a8:2a:ee:fa:7c:06:37:ca:4c:36:96:e9:1a:fd:a2:c9:
ea:fe:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:10:11 2025 by rpki-client