Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: j+E4y03BKI7oQdamxIaHK5xwxMGWAsmygIVt1+rDB7g=
Subject key identifier: 49:CA:7B:7C:59:A0:4C:0C:0A:1A:C0:43:6D:DA:AC:F3:2F:5F:6C:04
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019652DB2432D161343A73AE5E79CB091004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 11:00:15 +0000
Manifest this update: Sun 20 Apr 2025 11:00:15 +0000
Manifest next update: Mon 21 Apr 2025 11:00:15 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: RfA0OB2PjNkFRNziJLaqCU3dT8iBkCr20KtEU+iJOZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:24:32:d1:61:34:3a:73:ae:5e:79:cb:09:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Apr 20 11:00:15 2025 GMT
Not After : Apr 21 11:00:15 2025 GMT
Subject: CN=49ca7b7c59a04c0c0a1ac0436ddaacf32f5f6c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:eb:e2:00:9c:bb:c4:b2:6b:61:13:eb:fc:
20:0e:a0:ac:6f:79:a2:eb:f7:00:ee:6b:3d:b8:0c:
c3:22:91:77:51:e6:90:66:66:70:14:5f:97:05:37:
85:a9:31:6c:1b:55:b1:b0:8f:04:d5:e3:50:88:bd:
8e:d5:9d:ec:28:ff:9d:74:a2:9b:a5:73:ee:10:03:
c6:0c:ab:86:22:a5:de:61:2c:dd:a6:38:7a:58:78:
9c:9a:5a:a6:44:a9:df:1f:68:80:03:6b:7f:9f:49:
7c:bc:d1:80:0d:39:ab:2d:05:f2:e6:7c:ce:22:2b:
6a:7f:81:a0:c6:23:63:cc:b2:0c:a1:a7:c0:7e:19:
bb:04:40:f6:fe:89:93:2c:d7:34:97:0e:67:08:a3:
7c:ba:80:cb:16:18:0d:e5:25:49:7b:8a:88:3f:4f:
d8:aa:db:b4:d3:01:c4:ce:e5:15:1d:13:8b:96:79:
3c:12:5a:c9:29:e2:1d:77:98:36:8c:b3:f6:00:01:
0a:2a:5d:d8:88:fc:dd:51:b7:6d:24:cc:f5:5b:e7:
ca:cb:1f:25:e4:a3:e1:00:f1:f5:cd:64:97:82:14:
1a:f4:fd:b7:d5:58:86:db:a1:7f:81:e9:d7:75:f9:
f8:ef:78:0c:9b:2d:ff:5d:fd:4c:c2:d0:44:2a:97:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:7B:7C:59:A0:4C:0C:0A:1A:C0:43:6D:DA:AC:F3:2F:5F:6C:04
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f9:4f:4b:9c:37:61:c6:ac:66:50:6a:0e:1c:c5:9a:fc:ca:
07:63:25:ff:38:8c:8a:1f:87:9e:4a:b0:a3:dd:e2:9b:a9:d5:
a2:6c:17:37:9f:5b:15:8c:4c:fd:cb:d2:09:05:d3:48:ca:d6:
d6:41:74:f0:fe:48:a5:2d:7d:ea:04:21:5c:21:5c:b9:4b:19:
43:a9:f8:95:f0:88:5f:45:f0:9b:f1:67:2a:55:82:d6:08:23:
9b:d8:90:dd:cb:20:53:f0:6e:fb:6d:61:09:89:d4:71:d3:53:
08:7d:57:11:26:13:c7:0d:04:51:26:bb:56:a0:c5:66:57:61:
ea:ef:43:a3:7b:c0:10:a2:e0:a6:30:d6:c0:05:39:e0:7e:99:
79:3b:1e:a8:ed:c2:87:cd:58:ba:17:2d:ea:a3:b9:52:aa:b2:
32:39:4b:92:a2:e6:d1:3a:e5:29:05:64:8c:71:23:45:aa:64:
16:2c:39:31:c5:37:0f:5f:95:12:89:dc:ec:61:df:76:3b:71:
6e:50:93:63:71:f3:94:23:c8:8e:d0:18:2e:d9:3a:e0:ce:a5:
83:da:f6:58:37:4b:41:04:77:07:22:38:b9:38:8d:f9:9c:0d:
f9:a8:41:aa:aa:94:ab:80:ac:4f:2a:e7:6b:00:db:40:24:e2:
a9:9c:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:13 2025 by rpki-client