Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: RyMKwPOL4hbIvkQSxMQjKkT1bw3+ej/+JHPVbeCpVT8=
Subject key identifier: BD:B4:40:C2:09:33:74:88:58:93:3F:E6:7D:BA:2F:BC:3C:FE:A3:92
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 019654252A45FFC611101908282AA87CCD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 17:00:43 +0000
Manifest this update: Sun 20 Apr 2025 17:00:43 +0000
Manifest next update: Mon 21 Apr 2025 17:00:43 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: NvfNwjqQX8qY6dthtZ+E7Pe3OGokYdS+fvVqHQE6JTQ=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:2a:45:ff:c6:11:10:19:08:28:2a:a8:7c:cd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Apr 20 17:00:43 2025 GMT
Not After : Apr 21 17:00:43 2025 GMT
Subject: CN=bdb440c20933748858933fe67dba2fbc3cfea392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:ee:8f:18:f8:c3:b9:f6:91:a0:80:3a:c0:
8f:24:bb:67:15:88:0d:15:f7:20:c1:64:f5:e9:ea:
a8:d4:06:31:1d:42:e6:95:67:64:5b:5a:e4:b5:96:
b5:84:ec:59:b7:d9:41:a8:89:9a:ce:ba:66:4e:ec:
42:95:c1:07:c3:0a:6d:e9:15:ab:fa:d6:98:f4:6d:
d6:11:b7:a2:c0:9b:75:66:95:1c:91:4b:23:18:87:
ea:d2:18:06:c2:db:fb:bb:7a:fa:b6:a9:dc:3f:61:
5f:8a:74:9b:66:96:01:f9:95:65:27:9c:d2:35:d3:
c3:38:ed:9b:47:2e:12:cb:3e:07:87:f3:94:f7:eb:
b5:9e:10:47:c5:de:8b:41:a4:1f:c4:ff:87:2f:f3:
ce:4b:fb:8e:32:d6:51:7c:f1:e2:42:bb:df:33:92:
93:6a:fb:bd:e8:50:8d:5d:a1:26:3f:37:b2:56:bf:
69:e1:08:64:f8:7d:53:df:c2:07:59:66:ef:f4:66:
1b:d8:de:79:a0:d5:a1:83:75:03:07:8c:4b:35:36:
47:95:de:67:ec:75:1c:d6:48:3d:ae:7c:ad:b4:c9:
ef:4a:51:62:b8:e8:2b:41:58:b9:71:86:77:71:45:
ef:25:0c:be:1d:eb:bb:38:0b:24:d1:49:d2:f6:ef:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:40:C2:09:33:74:88:58:93:3F:E6:7D:BA:2F:BC:3C:FE:A3:92
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e6:56:82:1f:52:a7:be:f8:90:ad:93:24:48:bb:60:13:64:
f1:97:ce:d4:4c:7f:13:76:b6:35:93:54:36:8f:26:7e:9c:b8:
3e:35:ab:ec:c6:43:95:ae:27:df:49:f9:c4:5d:be:4e:60:14:
4d:04:be:35:30:43:9f:cf:00:98:31:98:a6:4d:61:f4:e6:b8:
a9:bd:cd:b9:04:3c:68:45:39:60:54:5b:7b:63:d9:79:b8:a4:
2b:91:ab:af:a6:4b:9f:11:5e:b0:60:88:fa:f1:ee:4b:ab:8e:
f3:df:38:31:b5:7f:73:b0:a5:70:8a:11:e1:fb:9c:be:e2:ea:
5f:99:cc:6f:c0:01:f4:f5:62:3d:27:8a:c3:77:cb:3f:30:b3:
31:a5:4a:b8:ae:82:28:19:15:d5:be:05:e0:f9:47:95:a9:51:
a4:57:83:b6:e6:20:7f:2e:54:1c:0a:db:c2:ee:9f:14:41:10:
55:0c:ef:5f:f6:c9:66:fa:64:14:51:ea:53:95:ad:f0:23:a0:
a4:67:78:28:1c:25:c9:8a:e1:b1:1f:c0:60:b5:d4:cd:70:33:
71:bf:c2:33:a1:73:65:67:44:3e:c0:cc:41:54:7d:ea:e4:ad:
4e:9b:69:5e:9c:36:ac:c3:40:9f:ac:65:3c:ed:51:7d:cf:0f:
4d:8e:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:00 2025 by rpki-client