Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: Fk5Hp9AGq27iLoHrsJpmZuNPm2SRdOQhKsstcKB32MA=
Subject key identifier: 47:91:C2:C1:88:E7:BF:02:A2:8F:A4:CB:38:DA:A1:A4:22:28:3F:F7
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 0196120ECCD4F95C5670F371FAD9994FF82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 05D0
Signing time: Mon 07 Apr 2025 21:01:21 +0000
Manifest this update: Mon 07 Apr 2025 21:01:21 +0000
Manifest next update: Tue 08 Apr 2025 21:01:21 +0000
Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: yPfSin+s+fNzmWimugP6Z2W40Z6k2vtKfG8g6heXGSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:cc:d4:f9:5c:56:70:f3:71:fa:d9:99:4f:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Apr 7 21:01:21 2025 GMT
Not After : Apr 8 21:01:21 2025 GMT
Subject: CN=4791c2c188e7bf02a28fa4cb38daa1a422283ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:8e:26:58:d3:b3:f0:f1:3c:04:f5:9e:66:
a0:48:eb:f1:e5:c1:c9:36:23:e2:d1:da:bc:6c:de:
3d:e1:02:65:7d:c2:b1:e1:b1:c7:78:7b:4b:33:a4:
77:df:38:69:15:02:ea:01:19:6c:9f:16:fa:f2:14:
f8:3d:f3:e6:82:89:3c:a7:92:3c:5c:3c:a4:e6:7d:
a8:5d:dd:f9:53:e5:d8:bc:2c:5d:12:f7:0b:ab:ce:
8b:77:1d:1a:00:1c:25:6f:d9:2b:4f:16:9c:92:fe:
36:51:0a:32:8b:ba:9d:c2:03:22:2b:de:6d:d4:b9:
c3:eb:01:35:9d:c3:2f:35:d9:58:4c:60:65:7d:df:
4d:df:34:d2:f8:59:b8:5b:f2:90:e8:3d:3d:07:52:
79:3b:de:a2:17:14:1f:dd:4b:47:b0:d4:00:db:97:
99:20:c4:d5:ce:90:e7:ca:0c:04:db:a2:b7:dc:6f:
e7:b3:28:31:ed:a5:bc:2e:ab:8d:7c:3a:ae:01:a6:
db:02:49:16:2d:04:ec:04:28:93:9d:f5:91:d9:a1:
11:bb:39:0a:61:b7:df:18:f3:49:d4:90:4f:f0:99:
3f:71:db:8e:5d:6f:cb:b1:43:f7:99:28:9c:bc:ff:
87:a8:90:74:6a:05:29:e2:d0:33:42:24:69:c2:3c:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:C2:C1:88:E7:BF:02:A2:8F:A4:CB:38:DA:A1:A4:22:28:3F:F7
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e5:5c:10:f9:e9:3e:ae:fc:6a:f8:36:37:5b:7e:2a:64:1d:
a4:8a:0a:ed:f3:25:74:94:b3:88:91:92:71:7e:44:ce:64:4a:
c0:3b:3a:99:e5:d2:db:e1:af:6c:c1:a5:b8:be:0e:52:2b:b6:
b2:6e:bf:61:3a:ae:7f:17:c1:0e:49:49:30:8a:53:81:30:08:
46:7d:b6:35:67:97:71:73:59:d2:50:8e:ee:eb:07:6f:b3:ae:
23:b3:ae:11:70:16:4b:c0:34:9f:63:59:ea:db:89:e9:14:0c:
15:e4:7c:0d:74:79:18:a4:6a:4f:91:46:fc:01:8c:39:ea:46:
c0:7d:61:4c:18:e4:67:ef:14:e5:e8:ba:9f:99:0c:2b:36:08:
cb:73:95:28:1d:5b:a8:25:7a:cd:a9:d4:0a:4b:2d:b3:6a:02:
c6:67:51:11:51:3f:55:d3:7a:b1:02:df:83:ae:d4:b3:e4:2e:
89:94:85:0b:7f:8e:5d:89:b5:9e:16:1e:de:35:4a:89:8b:c7:
00:07:7f:31:1a:bd:ce:9d:d3:93:ed:56:00:22:8e:fe:6c:3b:
a4:64:6c:9a:7b:eb:a8:22:8c:7b:7d:fb:61:b3:17:29:12:61:
aa:b1:fc:a6:c6:16:8a:f2:0f:20:64:9e:98:c1:92:94:2c:16:
d3:57:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:43:33 2025 by rpki-client