Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: apKWlHGUqu3C7NcFb4SYmw4QFQH5uMnvvKO02sXDBHg=
Subject key identifier: A4:4C:E9:F6:CF:DD:0B:52:C3:EF:8B:A6:48:92:43:32:26:1A:B1:11
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 01964BFDF113769DB8C76118157334BB7937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0C3E
Signing time: Sat 19 Apr 2025 03:00:55 +0000
Manifest this update: Sat 19 Apr 2025 03:00:55 +0000
Manifest next update: Sun 20 Apr 2025 03:00:55 +0000
Files and hashes: 1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: 98pcbTMl2HtzOYsYP6AYgz4Z61LP210eX/ptUOhkhtw=)
2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:f1:13:76:9d:b8:c7:61:18:15:73:34:bb:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Apr 19 03:00:55 2025 GMT
Not After : Apr 20 03:00:55 2025 GMT
Subject: CN=a44ce9f6cfdd0b52c3ef8ba648924332261ab111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:61:bd:09:c8:09:2a:f2:de:a9:aa:78:17:
14:26:cf:d6:db:9d:4b:d6:21:17:71:dc:0c:88:17:
d5:91:82:9d:73:3c:0d:62:10:a1:af:5f:6c:71:8c:
6e:37:15:44:2b:d5:a6:20:c4:e0:21:83:39:94:3b:
f7:b9:23:d5:5a:68:e2:29:b8:e3:d3:60:0f:37:9b:
b5:a0:a2:c0:2b:03:37:28:1d:6c:65:7a:f2:85:c9:
47:34:77:0a:02:c9:22:d5:fe:05:7a:2b:b6:61:e5:
c1:04:8c:5b:b2:a1:63:ff:97:eb:2f:0e:27:12:3a:
95:43:7e:0f:7d:05:97:fe:5a:02:17:1d:7f:13:22:
5d:8f:f2:56:37:87:2a:5b:24:0d:b0:63:5a:f2:34:
47:d1:70:61:15:e3:e6:34:63:24:fb:8f:36:16:7d:
8d:cc:59:e1:fe:98:4f:58:a9:16:ed:8a:75:d9:9d:
f0:36:4b:34:25:b9:af:7f:cb:88:5f:e4:31:20:48:
9c:43:ca:0c:b2:f1:38:dd:52:12:13:aa:ff:43:cb:
78:fb:92:f2:0f:61:ec:a8:b0:2e:ff:a0:8e:c0:4f:
37:52:61:44:28:e2:93:7d:d9:da:47:8c:56:75:74:
55:5d:9c:2a:a3:9e:58:f3:e7:78:8b:34:60:be:ea:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:E9:F6:CF:DD:0B:52:C3:EF:8B:A6:48:92:43:32:26:1A:B1:11
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:51:20:cc:38:86:33:d5:38:46:ed:c1:1c:f0:dc:cd:2f:ec:
03:1d:2d:dd:98:f2:84:2e:b2:91:4d:af:db:7b:47:f7:5c:46:
2d:1a:36:bf:96:f3:6d:9a:b1:47:a3:07:ea:f2:64:28:64:63:
da:0f:e5:00:64:67:1c:6f:2c:31:fb:e4:a6:4e:bb:74:4f:f0:
43:b5:fa:51:ba:93:48:1d:79:ff:15:e0:79:87:78:85:84:ee:
51:99:2e:2d:05:8d:e6:d2:fb:03:08:f8:ac:42:76:63:89:17:
af:bf:38:49:c0:67:c4:a9:99:b7:84:ad:db:5f:42:4d:f0:45:
fd:0f:61:d6:71:94:7e:e5:76:25:cd:3d:8f:7c:04:66:4f:ff:
04:a5:ff:97:00:19:89:e4:33:2f:4c:3a:c1:0b:55:64:54:87:
1c:13:c4:e5:87:71:d1:35:db:27:00:bd:11:50:6a:20:05:79:
db:78:77:e4:36:d2:02:eb:5b:22:28:c0:d1:fd:77:44:ca:60:
16:cd:ee:da:36:9f:5b:47:6b:b2:9a:87:45:d1:95:2a:59:86:
4f:be:24:ac:89:7f:f8:a5:b3:6b:5d:ee:86:99:f9:05:99:c9:
87:64:8c:79:7b:e3:bc:93:44:75:aa:ff:21:c6:d5:53:f3:c4:
48:fd:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:16:50 2025 by rpki-client