Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: ZmM8s5laowFqWsFoOMVDp0hoAQV//7S7izxjkJjPE2o=
Subject key identifier: 70:8B:07:2E:9F:D1:94:65:D0:0F:94:A0:4F:CD:9B:07:20:F6:6E:A1
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 019652DB3C9E9AE5CF83AFBE13CB88031907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 11:00:21 +0000
Manifest this update: Sun 20 Apr 2025 11:00:21 +0000
Manifest next update: Mon 21 Apr 2025 11:00:21 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: FnqgVqRfI+zYd16m5Q7Kx50moHxTXw8Kt29dIkeAj8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:3c:9e:9a:e5:cf:83:af:be:13:cb:88:03:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Apr 20 11:00:21 2025 GMT
Not After : Apr 21 11:00:21 2025 GMT
Subject: CN=708b072e9fd19465d00f94a04fcd9b0720f66ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:e9:26:2f:27:5d:6b:8b:54:14:5b:09:3d:
0d:8e:fa:24:d4:51:34:78:af:eb:d9:47:84:73:52:
ee:e5:95:ed:ae:06:64:7d:26:5a:0e:b0:e8:9b:60:
04:2b:b3:a8:e8:33:c8:a7:2a:a6:13:5d:33:04:c1:
1b:f1:62:20:37:f9:22:42:af:0e:01:e7:91:96:e8:
16:6f:c2:89:0d:4a:da:76:6e:27:a0:da:95:16:10:
e0:fd:46:24:52:89:a3:0d:15:b9:48:8f:ca:45:56:
5a:e3:7e:42:ff:48:1a:cc:e9:3b:e5:cf:61:0e:f3:
96:fa:50:40:a9:9b:cc:86:46:eb:2b:e2:c3:ee:cb:
5a:66:2d:46:88:17:18:dd:92:38:79:cb:4b:23:64:
cf:38:4b:37:94:04:77:02:17:ae:75:74:fa:40:07:
85:dd:68:81:47:02:64:fb:82:bb:82:21:ca:10:b0:
d4:54:9d:50:f3:a3:c5:e3:2d:14:33:b1:fc:9c:f7:
73:26:f5:78:0d:af:6c:d9:6b:f8:76:c1:a0:18:c3:
da:47:fa:f1:e0:59:44:dc:55:50:13:35:17:15:ad:
ca:ba:c9:d5:26:9e:3e:a3:0e:1f:9d:55:d0:b7:77:
86:77:cf:6e:01:34:ad:6d:e0:34:89:f3:04:3c:c2:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8B:07:2E:9F:D1:94:65:D0:0F:94:A0:4F:CD:9B:07:20:F6:6E:A1
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:53:1a:06:28:d8:b3:54:da:dc:8e:5b:92:9a:61:ff:5b:
c2:62:c4:4c:7f:2c:f9:85:13:03:0f:0a:94:5b:91:56:7d:c8:
6c:a6:49:fd:01:fd:f7:07:70:37:1b:56:be:1c:cd:e9:c4:d7:
a8:a1:42:ad:96:d8:6a:69:81:05:6c:59:d7:18:09:30:95:20:
ba:f1:49:9d:b3:9d:07:2b:ac:61:e9:c6:49:0e:43:b4:28:56:
90:ee:f3:6b:16:3f:6f:1a:b9:52:f5:5f:49:39:82:89:94:bf:
da:69:e3:04:99:ea:68:f1:35:cd:45:46:75:0b:87:95:c0:af:
4b:9a:20:8c:d1:0e:99:b8:6a:67:ea:ab:92:42:c1:84:4d:e8:
17:ed:bc:5c:d3:4c:aa:ac:f6:ff:cf:12:30:0d:c3:de:71:33:
d9:55:73:c4:60:6c:ee:4b:fc:d1:bf:06:27:31:97:a8:90:e5:
68:ac:c8:82:c7:35:4d:67:41:82:f7:2f:ba:a7:3c:6b:15:23:
b7:da:91:d4:ef:45:42:fc:0c:cf:37:1e:b6:a3:ee:91:31:78:
6d:20:00:fb:87:09:4a:87:06:c7:64:e5:b4:16:f6:53:d7:b7:
83:f1:a0:23:e6:59:bf:15:a9:c7:da:88:af:20:c2:d3:a0:27:
1c:34:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:21 2025 by rpki-client