Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: BlJygk+/RrqTJmp6bKTmrL0An11ScZxmbZHDvYB5wMs=
Subject key identifier: D1:95:CC:4A:12:23:AB:DC:10:A8:64:15:2E:BF:23:28:FF:BB:62:3F
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 019655DCA474D6F5E5D307B84A20F6267A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 12C4
Signing time: Mon 21 Apr 2025 01:00:45 +0000
Manifest this update: Mon 21 Apr 2025 01:00:45 +0000
Manifest next update: Tue 22 Apr 2025 01:00:45 +0000
Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: iYkGT2SXIm9alUS8atyZ8xo9YX2OjQFTeFy70qGhcj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:a4:74:d6:f5:e5:d3:07:b8:4a:20:f6:26:7a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Apr 21 01:00:45 2025 GMT
Not After : Apr 22 01:00:45 2025 GMT
Subject: CN=d195cc4a1223abdc10a864152ebf2328ffbb623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:e4:b7:9e:0b:80:b1:0e:67:a9:99:d8:4e:
be:9c:ff:28:a4:76:be:c0:a9:f9:0c:a1:d4:da:93:
97:6a:8d:a0:4b:8e:f9:0b:20:20:c3:a4:a3:12:c6:
03:a0:f8:26:04:aa:c9:a3:0b:65:be:50:6a:8a:84:
ee:00:81:70:89:c0:31:62:e3:96:dc:a5:3b:e1:0b:
f9:02:7e:06:64:4e:f6:8c:f6:30:3f:2c:22:53:8c:
e6:ad:b8:72:f0:30:46:e9:f1:5b:31:0a:10:01:90:
39:39:1f:e7:a6:3d:15:77:b8:1d:52:32:eb:a8:cd:
61:ab:9a:49:85:e9:d9:81:7c:ec:b3:58:18:1c:80:
eb:fb:22:29:e3:d1:38:8a:b9:a3:a6:76:08:3f:78:
b1:1b:77:77:da:20:da:93:7e:a8:0c:20:16:46:96:
1a:40:3d:83:4f:56:2d:e8:35:da:65:ea:93:7e:f8:
bf:8e:4f:bf:a2:8e:f8:d7:dc:17:b1:77:c6:c7:31:
80:16:f7:68:8e:45:4c:da:56:1c:ab:c1:2c:68:10:
10:f1:40:ef:bd:19:be:dd:17:ca:b9:f0:1c:79:2e:
27:36:07:43:bf:82:90:2c:b0:41:84:6a:b8:40:3e:
99:fd:b2:3d:18:60:db:d2:cb:c4:16:4f:04:6b:74:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:CC:4A:12:23:AB:DC:10:A8:64:15:2E:BF:23:28:FF:BB:62:3F
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0e:70:1e:c9:0f:18:12:5c:1c:9c:8d:aa:76:41:3b:24:30:
1f:5a:84:3a:f3:dc:ee:33:dd:58:8c:d9:31:ad:cf:98:dd:db:
b9:be:12:08:14:21:e0:f9:96:9b:a3:c9:7d:b5:03:75:d3:ef:
d2:ee:f3:c4:a4:bf:3c:0d:9a:aa:0d:a0:7b:75:e5:58:6a:df:
a4:7a:47:19:4e:a7:7d:d4:87:b4:f8:18:29:98:9c:86:84:bf:
c5:2d:f3:e5:60:da:fc:be:57:1d:be:d1:33:ed:52:fe:00:a0:
d4:d2:64:0e:e1:97:19:8b:96:aa:55:8c:15:f8:e9:21:f3:5a:
9c:42:b6:2a:02:13:8d:39:a6:7f:ea:ac:f6:e9:a7:fb:a7:0a:
a1:92:3c:7a:16:06:9a:60:1e:4b:58:37:83:ed:80:38:d2:8d:
31:a7:0f:3d:b3:ad:50:2b:a4:cf:b8:af:ed:73:c4:aa:90:cd:
ea:3e:db:6e:13:00:df:b3:fb:6b:8f:97:d6:8b:57:01:2a:81:
0f:cd:86:c0:06:a9:5a:27:51:77:42:6a:f8:2e:f6:b9:74:cf:
66:72:32:ec:a3:b0:a2:89:21:3f:ef:cc:ef:0b:7c:f3:42:6a:
6c:80:bc:c7:8c:40:91:58:5f:8d:49:bc:3e:95:e4:27:78:84:
2e:e4:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:09:00 2025 by rpki-client