Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier: R7bRRPTHC0bzhMPqNVi5k4QRndn4h7I6NkprJMlHe7s=
Subject key identifier: 5C:50:03:28:E8:54:E6:93:92:6D:B5:90:AF:C2:2F:7E:46:E1:9D:80
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial: 01961132A201050A0062F0091E54D10A97B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 17:00:52 +0000
Manifest this update: Mon 07 Apr 2025 17:00:52 +0000
Manifest next update: Tue 08 Apr 2025 17:00:52 +0000
Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: PltaiWl9dk4XPAi5hwlsy/z526TUaHWwRN5AcbWPXLY=)
2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:32:a2:01:05:0a:00:62:f0:09:1e:54:d1:0a:97:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Validity
Not Before: Apr 7 17:00:52 2025 GMT
Not After : Apr 8 17:00:52 2025 GMT
Subject: CN=5c500328e854e693926db590afc22f7e46e19d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:85:bd:b1:b4:37:24:23:0e:2a:de:e4:96:
e7:bd:f4:71:c8:85:20:6e:87:6b:e6:81:bd:51:fa:
8e:45:43:b6:c0:01:df:66:c6:11:0b:e0:31:01:3f:
1b:a1:10:67:0b:df:b9:c7:99:5b:7a:54:c7:f9:e8:
9f:1c:a1:1f:f6:0a:2c:41:67:b9:84:ed:2c:26:9c:
3b:84:ad:6e:5a:0e:16:0a:f9:30:41:64:1c:b3:6d:
ce:a4:e4:df:4d:e6:39:ac:f4:cd:cc:ca:14:09:aa:
37:c3:19:ef:a7:f8:c8:c0:79:c5:d7:1f:41:e9:9c:
5a:59:82:42:d9:37:5c:64:c4:a1:2d:da:b9:4a:a1:
41:f9:97:c4:43:bf:11:ba:c9:d6:b8:23:17:2e:ee:
aa:6e:90:df:40:13:4f:20:7a:f0:90:86:65:c3:7d:
97:c6:d4:7f:43:43:cf:cf:66:86:cd:8d:51:a9:36:
31:53:9b:38:94:7b:3c:14:b9:bf:8f:85:11:f5:dc:
27:f4:ae:a9:ef:8e:a7:ba:e4:66:e2:f1:b6:9c:43:
89:e7:34:f4:6c:c8:d2:53:c1:1b:89:e7:33:be:97:
71:03:cc:78:08:36:b6:9f:fd:c3:d8:1c:8a:12:07:
76:0f:7b:e6:e1:4b:19:21:57:07:65:c8:6d:c1:a9:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:03:28:E8:54:E6:93:92:6D:B5:90:AF:C2:2F:7E:46:E1:9D:80
X509v3 Authority Key Identifier:
keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:72:60:d0:6d:0f:bc:53:8f:bf:d7:6c:2c:03:ef:bc:02:a8:
54:71:c5:85:37:2a:d4:b4:1e:b4:3d:e4:6e:07:be:d2:dc:55:
c1:b1:1d:34:64:c4:a4:2e:48:d2:1f:b4:6d:a7:56:c4:1a:27:
1c:43:61:7b:3d:41:35:7e:71:71:ce:25:2d:b0:00:01:1e:24:
b3:66:e2:43:c7:82:77:88:6c:0f:e7:6e:ad:95:df:d9:6f:31:
84:f2:31:06:8f:8c:45:85:a5:fc:a1:e6:7f:1d:2e:bf:e2:b7:
80:80:a1:58:c8:2a:f5:98:e6:4c:45:cc:88:01:98:25:d0:02:
ea:7a:d3:0e:db:cc:7a:87:fe:f5:07:a4:35:43:1d:76:47:3a:
56:f5:84:81:81:c4:72:55:1c:48:9d:cf:f9:3a:78:e2:0e:d4:
f9:a3:95:25:a1:4f:c7:99:2c:08:72:de:ba:e0:c6:ce:fa:6f:
b7:52:fb:ca:e4:3a:0c:f2:dd:80:ee:c0:be:87:fb:97:9e:dc:
3d:6c:0c:c1:33:b7:9f:23:24:d7:c9:bc:c6:6b:2a:90:c1:67:
39:4c:d9:c0:cc:b8:3f:0f:4b:54:4d:82:60:d7:13:8f:39:5d:
b2:27:9b:b1:35:a9:a9:7d:2b:dc:f6:f4:40:54:b5:93:f9:ed:
1b:ba:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:31 2025 by rpki-client