Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: le5asjS7tgu/sV+a/ap5MO5Loc2dgUQ/hdvA1poCRM0=
Subject key identifier: E8:44:D2:D1:5E:46:91:50:90:67:15:24:0A:72:7B:EC:0D:C4:DF:9F
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019653B75B83A1270F799EB4DF650C0E8D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 03BA
Signing time: Sun 20 Apr 2025 15:00:47 +0000
Manifest this update: Sun 20 Apr 2025 15:00:47 +0000
Manifest next update: Mon 21 Apr 2025 15:00:47 +0000
Files and hashes: 1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: SIlg/Nh8eal6Tnk1S8pKSAZfZOij7VDZnwtcJPfKpKA=)
3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:5b:83:a1:27:0f:79:9e:b4:df:65:0c:0e:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Apr 20 15:00:47 2025 GMT
Not After : Apr 21 15:00:47 2025 GMT
Subject: CN=e844d2d15e469150906715240a727bec0dc4df9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:f4:89:88:d6:71:7b:4f:8f:1b:d0:5a:34:
e5:c9:3d:63:4e:89:8f:78:bb:ec:3e:42:e3:29:15:
b3:85:93:9d:1d:3d:43:ff:2a:bf:88:be:4b:f7:50:
71:a7:9f:ae:01:4c:85:f2:77:be:6a:fc:02:00:ad:
5c:08:be:be:ef:33:11:e4:a5:9f:74:a6:5a:fc:e1:
4d:33:04:31:ed:20:6e:43:1f:23:1d:0a:85:c5:cc:
5c:23:eb:3e:51:8a:2b:0c:25:52:a3:64:f8:f3:4d:
48:1a:db:a4:9c:64:8f:42:0a:72:5a:ef:d8:e2:21:
fe:f6:a1:dd:60:81:4d:5a:b4:35:50:22:43:19:10:
93:58:24:21:6e:d6:f1:42:20:a5:7a:23:23:3d:a7:
c4:09:c2:20:3b:77:f5:4d:f5:cd:38:45:f8:14:fb:
ac:cb:e6:1e:7d:d0:13:20:54:5b:5e:cf:2a:99:95:
f3:3c:8e:a1:2f:82:d4:e4:c1:cd:09:aa:92:9c:2e:
55:9e:7c:6a:15:e3:03:2f:41:c0:df:1b:e9:40:06:
ad:d7:66:c2:a1:a7:3a:dd:6f:ce:27:58:dd:38:a9:
42:97:80:be:5c:55:73:b4:5f:f7:56:d3:f7:7b:f1:
42:65:8f:49:5f:44:5b:ab:ee:ed:b4:da:3b:6a:fe:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:44:D2:D1:5E:46:91:50:90:67:15:24:0A:72:7B:EC:0D:C4:DF:9F
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6c:bb:06:5c:9e:9d:d6:77:ae:72:75:66:a9:1c:e9:8b:2e:
19:e0:37:af:77:d9:dd:9e:c7:25:44:51:77:1c:3e:8c:2b:a4:
3a:96:a0:7a:48:58:08:d2:0b:c1:a9:f5:d8:3c:fa:5a:47:e7:
d1:59:79:70:71:c6:e4:a7:c7:a2:18:96:d6:7c:f6:4f:7b:6d:
22:c4:1a:3d:1a:fc:8a:1a:42:68:80:0d:3d:2c:2a:30:21:4b:
6e:18:7a:99:e1:ac:da:22:dd:61:9d:b3:84:f9:db:21:21:84:
62:75:5d:14:a4:b9:b8:ac:87:96:1b:89:2e:ae:19:a2:06:90:
fe:d3:c1:ce:ec:af:4e:b7:8d:a9:f5:27:3f:7f:94:a8:67:58:
69:ff:cf:19:dc:6f:3c:4c:76:f8:52:ea:e6:f6:66:6a:c5:be:
44:0d:77:e1:b9:be:d8:98:b9:3a:61:7c:07:f7:b3:a0:e9:c5:
3b:ae:5d:13:91:3a:5c:00:83:ad:16:4b:17:48:73:a5:a0:ea:
68:87:99:94:07:60:cf:a5:2d:08:61:84:4a:52:fc:35:d9:78:
29:f6:dd:46:1b:fd:a6:e8:d3:30:a3:09:9d:cb:5e:6e:e1:8e:
d4:30:41:7d:04:ea:a0:23:dc:67:11:ad:4f:5a:43:ed:c6:f4:
04:1b:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:45:43 2025 by rpki-client