Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: x1qzdjEpHiKNdd16X5Auw1t0lLYT8dh+cwq6YndiZUI=
Subject key identifier: 0F:4C:5F:AE:8A:B2:DE:93:0B:92:AE:9D:EF:72:CD:60:E7:23:E7:AB
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 01958B4E16EFE1A791B7F48AA8D013A1DD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 17:01:45 +0000
Manifest this update: Wed 12 Mar 2025 17:01:45 +0000
Manifest next update: Thu 13 Mar 2025 17:01:45 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: F3khKagaMPoFJ9XsKdob5BE15VFldqsM4MGMHwFlRng=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4e:16:ef:e1:a7:91:b7:f4:8a:a8:d0:13:a1:dd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Mar 12 17:01:45 2025 GMT
Not After : Mar 13 17:01:45 2025 GMT
Subject: CN=0f4c5fae8ab2de930b92ae9def72cd60e723e7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:d1:1e:2a:38:97:13:49:f9:c4:62:e7:0d:
d6:18:d0:ab:27:6c:b4:47:48:d1:4d:e9:4e:db:57:
db:a0:bb:a1:02:c1:65:a9:40:cb:b8:cf:aa:25:5e:
13:70:10:48:fa:3d:98:68:3e:d7:15:c7:43:1b:1a:
75:45:d3:18:3f:1d:7c:61:a5:c4:e9:d8:89:13:20:
10:ae:06:9f:fc:be:08:70:bc:5d:7a:d7:d6:7a:79:
84:e1:dd:0e:dc:ea:ae:ad:1f:c3:2b:86:85:87:6b:
9c:8c:f6:15:27:c6:72:6a:d8:c8:fe:0b:dc:f4:b6:
fa:2b:b3:59:04:c3:49:0e:5f:cb:7f:a4:d8:51:f3:
57:ac:cd:1f:74:5a:d9:52:33:41:08:37:e7:74:21:
c0:ea:74:0a:6f:e4:2e:06:1a:4f:9c:cc:e2:81:3f:
af:77:c6:d5:86:5a:1b:ea:6b:cd:e6:a9:64:d6:ba:
d8:42:04:18:88:25:64:44:c7:3c:85:79:c4:be:a2:
64:f6:54:02:e6:d0:86:e2:5a:46:ba:8a:12:47:fd:
76:3f:05:66:2f:37:68:25:a5:3d:bd:ab:19:b7:c0:
cf:09:19:04:41:af:03:cf:62:a1:89:c1:26:14:1f:
07:92:3f:a8:3c:c0:8f:88:25:3c:ec:27:27:e4:cf:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:5F:AE:8A:B2:DE:93:0B:92:AE:9D:EF:72:CD:60:E7:23:E7:AB
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:83:a8:ee:52:a7:48:fd:6e:55:bb:87:f5:c2:9a:26:66:db:
be:16:4f:e1:f7:3f:50:44:34:66:11:46:dd:41:88:77:ad:6c:
d5:ef:9e:d5:a6:f4:6e:7f:b8:62:67:7c:b5:03:93:b1:0b:01:
31:57:bb:a9:b3:f5:cb:35:3f:8a:cc:6f:f4:c0:00:3a:7e:65:
0d:f5:f0:c5:89:d2:c0:0c:2b:f9:67:16:87:4b:d5:d8:7c:39:
4d:68:bc:ea:57:6b:fc:cb:dc:74:2d:d8:01:e7:00:4c:bd:51:
54:0e:84:ed:a6:0f:10:b4:22:30:07:67:5c:d7:85:d7:78:0e:
d0:07:9b:ed:e2:a0:38:d0:2b:40:0d:a2:92:e5:52:6f:74:72:
cd:14:21:57:a6:e5:c1:ed:51:51:81:b9:c5:b5:11:eb:7a:47:
4e:17:2d:2e:06:ef:84:5b:0b:c6:5f:c6:4e:ff:2f:45:da:aa:
be:80:a8:f9:ad:fb:f9:09:8d:a2:92:1f:00:08:fa:0d:7f:11:
dd:4b:a1:f0:0c:c3:98:71:85:b7:9e:ea:ed:91:b3:b8:af:3f:
5d:ab:ac:51:65:d2:9e:ad:3c:eb:0e:0b:df:a2:6e:55:9c:a3:
5e:c4:8e:d8:7b:46:c8:ff:b1:e1:1e:7c:c9:53:3f:81:ae:30:
19:a2:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:02 2025 by rpki-client