Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: xSAuX2GcPfbsVjgdCSYHf8AoxLFH5JCY9+MkHgGvraM=
Subject key identifier: 5C:24:FC:FD:4C:55:62:39:06:EF:E2:9E:8F:50:A1:83:CE:38:2A:F3
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 01962ABC0EA1E69FB40F3ADC4957DE09C012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0BAB
Signing time: Sat 12 Apr 2025 16:01:29 +0000
Manifest this update: Sat 12 Apr 2025 16:01:29 +0000
Manifest next update: Sun 13 Apr 2025 16:01:29 +0000
Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: NWP1VzQSWatpEFoXCVile4qT8VJj0TortYhwRfSn1fA=)
4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:0e:a1:e6:9f:b4:0f:3a:dc:49:57:de:09:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Apr 12 16:01:29 2025 GMT
Not After : Apr 13 16:01:29 2025 GMT
Subject: CN=5c24fcfd4c55623906efe29e8f50a183ce382af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:9c:46:37:61:41:66:2c:c7:ed:c7:b1:82:
4b:1b:27:20:ab:3a:a2:c7:6b:33:03:57:3b:48:6f:
d6:14:35:a4:3d:da:45:bb:9d:55:38:73:29:71:a0:
0a:b1:c5:55:c4:85:20:74:05:b7:05:66:80:17:02:
42:3d:94:43:d7:23:54:26:e8:00:b3:a9:6d:44:ed:
70:c6:4e:3a:d1:ff:20:e3:7c:be:2b:7f:4c:6b:f7:
68:ce:ec:c8:7b:bb:67:75:d8:98:4a:cc:95:13:1e:
6a:47:a0:fb:02:08:5e:8f:c0:c4:4c:ae:b7:38:4a:
b3:3b:d9:1d:01:73:eb:e0:64:1e:25:25:03:1b:47:
5b:ed:6a:5d:18:40:55:99:a2:4e:14:dd:95:d2:da:
3d:60:30:d2:9d:2b:8a:6b:74:22:ce:58:cf:d7:db:
b3:9f:37:5a:71:7d:72:4e:cc:a3:5b:4c:87:da:65:
5e:41:62:0e:8a:6a:f4:ed:8f:f9:fd:fe:24:a1:03:
97:fe:42:a7:74:ad:c8:10:fc:cc:e4:ea:eb:f0:69:
18:fd:3e:96:8a:4b:18:aa:4c:f7:b2:67:7d:16:60:
38:d3:da:78:bd:16:be:21:1c:22:ef:ed:4a:53:00:
cc:76:f9:9b:83:11:be:5f:76:08:85:c3:2d:09:f3:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:FC:FD:4C:55:62:39:06:EF:E2:9E:8F:50:A1:83:CE:38:2A:F3
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:70:0e:79:fc:c0:f5:6a:b7:e7:50:df:97:4e:12:af:a4:01:
9d:62:7c:ea:18:a4:e7:9b:43:55:3f:b4:a6:4d:b0:a8:a5:be:
a7:d8:f8:23:dc:63:d9:24:ec:aa:00:d9:61:78:68:cf:7a:c3:
58:bb:82:93:cd:c8:a3:1e:b2:91:5e:26:4b:87:65:6b:5a:9f:
94:66:71:25:76:5c:c8:bd:b7:17:f9:97:9e:57:21:fa:fb:ee:
7a:02:96:70:d1:6d:c7:a6:e2:f2:25:76:5c:64:8c:1f:1c:f0:
f9:73:d3:f1:9c:74:06:5e:cc:d0:66:3c:0d:c0:33:42:21:47:
ab:37:51:52:99:2d:3b:04:7a:5f:bb:18:66:66:56:ea:d5:d1:
29:06:4e:8a:0b:83:b9:e5:70:1b:4c:e2:d7:87:09:b1:28:1a:
28:5f:9f:af:c0:49:f4:75:52:df:59:38:03:c8:df:b8:87:57:
f7:0d:fc:c9:73:49:fc:e9:91:92:51:26:67:02:1d:87:18:ce:
ac:be:50:67:6b:8a:a7:ca:c9:f6:0c:eb:6a:6a:71:45:5b:3c:
12:a2:1a:b5:fc:2a:1c:b9:a0:1e:ac:01:4f:78:40:79:e1:5f:
cd:7f:bd:1e:8b:b1:7b:20:3b:60:4c:fe:d3:3f:ee:11:4c:84:
1a:d0:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:47:48 2025 by rpki-client