Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: FEQ7qc2nKnvloBAWGfNTKPEvCihTqbbnHxVfWN1Vqgc=
Subject key identifier: 76:8B:C5:CB:FD:E5:98:3A:53:16:B1:13:3F:CB:13:1D:78:55:D0:13
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 01960D5621503CA7B33402626511B934B47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 14DD
Signing time: Sun 06 Apr 2025 23:01:10 +0000
Manifest this update: Sun 06 Apr 2025 23:01:10 +0000
Manifest next update: Mon 07 Apr 2025 23:01:10 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: lHK6JON3r2++8LmePTi4bG7fOf4m0jq5CRUZaT9Tk9E=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:56:21:50:3c:a7:b3:34:02:62:65:11:b9:34:b4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Apr 6 23:01:10 2025 GMT
Not After : Apr 7 23:01:10 2025 GMT
Subject: CN=768bc5cbfde5983a5316b1133fcb131d7855d013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:2d:83:0f:2d:d1:cc:81:6d:89:04:d9:a4:
78:58:e7:7f:bf:fb:ac:87:a8:37:87:55:ac:03:da:
f3:08:23:25:1e:db:e9:4c:57:42:70:c9:62:b5:99:
a8:91:f2:a6:18:06:8c:37:93:6b:66:97:81:b5:48:
52:b5:8a:cf:88:45:c9:41:6a:69:0e:1c:76:fb:b8:
d7:53:bc:9c:cc:a1:6b:ba:12:a6:01:de:e9:2a:51:
89:23:ab:d5:e2:29:0d:e2:72:67:ca:ea:49:32:0d:
68:d7:31:ff:75:9b:59:27:ea:62:22:55:8d:38:29:
64:9a:97:76:3b:3a:80:9c:b5:69:95:d6:66:d4:f3:
b6:49:de:9f:15:ea:15:f8:10:92:b9:4b:7c:f6:fa:
cf:05:f6:66:55:c2:cb:87:7d:f1:4a:9c:8e:2c:50:
8e:2f:24:e0:18:0c:88:79:a0:7b:1e:26:06:bd:cd:
78:48:8b:fb:9d:9e:7d:af:c9:97:ab:6c:0f:7a:35:
77:c2:be:00:e6:02:aa:66:b3:63:33:c0:e8:5a:59:
47:57:62:40:3a:2e:96:71:dc:3b:ce:ae:76:d1:da:
c7:3c:80:ce:08:f1:c2:a2:2e:8a:30:cf:55:7e:41:
8a:3a:46:d6:3e:69:d5:28:79:6b:b6:a1:f9:8b:2f:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:C5:CB:FD:E5:98:3A:53:16:B1:13:3F:CB:13:1D:78:55:D0:13
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a1:0e:7d:b0:7a:9a:65:9b:e4:67:b3:d0:e2:cc:93:f5:b0:
4b:1c:ab:93:9f:a6:ab:d1:b5:ce:52:ff:1b:a3:b3:77:43:ab:
8c:09:96:53:e5:ba:78:67:7f:9a:50:54:05:38:a2:c2:d5:56:
0e:76:2c:bd:35:04:e4:cc:a1:ea:a4:14:e8:d1:cb:18:28:ba:
43:28:0a:5b:50:fa:1a:66:d6:a0:35:1c:97:85:8b:b5:7e:74:
bc:f3:31:43:d5:c8:dd:c5:82:60:31:a2:a7:35:fe:a3:0e:77:
6d:37:7f:63:11:74:6e:da:74:05:ba:46:5f:1d:81:1d:fd:b2:
81:e1:e9:28:84:d6:71:52:a0:75:b0:92:39:54:a9:ea:cb:89:
e3:97:17:d1:89:4a:c2:0f:a0:0b:e9:1b:71:c1:88:f9:68:bd:
9b:c3:08:10:ec:e2:da:13:3a:ba:5e:3c:48:6b:c6:19:8a:bc:
8c:0d:fc:0a:59:07:d8:b8:ea:e4:88:bb:2d:93:b5:fa:cc:05:
f8:d8:a3:ba:44:ac:0e:41:e3:db:8e:f6:de:92:70:d7:e0:e0:
c4:22:ff:59:ef:4f:44:8a:74:97:53:83:97:3b:b8:1f:7a:0a:
72:e9:68:46:2f:ab:99:66:c1:a0:81:f6:bb:44:7b:e0:2f:5b:
6c:e8:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:46:51 2025 by rpki-client