Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: sAc0HE5OWW56PqvnnIM/SkYArR+F18ANobq+YL/OmeE=
Subject key identifier: 10:BA:7C:6E:07:07:2E:1C:24:29:EE:75:E6:9D:21:F3:49:EF:C7:D5
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 01964AEB5272F1015AA2D10DFE1D9F17A819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 14FF
Signing time: Fri 18 Apr 2025 22:00:57 +0000
Manifest this update: Fri 18 Apr 2025 22:00:57 +0000
Manifest next update: Sat 19 Apr 2025 22:00:57 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: MSsSdOIHyoJdySJImZUbhqZ4NiCPIJ5daPdvdSXoXuo=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
9: o6y2fyURWeu2t_DFurQx7USUPKs.roa (hash: kPReXruwGea93kBP9pEyd3hI0ZYY5dR0hxSQpsQ2xeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:52:72:f1:01:5a:a2:d1:0d:fe:1d:9f:17:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Apr 18 22:00:57 2025 GMT
Not After : Apr 19 22:00:57 2025 GMT
Subject: CN=10ba7c6e07072e1c2429ee75e69d21f349efc7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:e0:c7:9f:38:16:a6:8e:87:87:17:d1:a8:
0e:8a:0b:db:4d:81:23:ec:e4:24:d7:9f:79:38:73:
25:a0:26:2d:9b:54:d0:69:ac:a9:80:a6:ff:ef:da:
30:ab:46:c5:4d:63:2f:73:c5:21:2a:53:46:8a:e6:
27:65:62:be:42:40:3f:ff:f8:ef:d7:ac:b8:d6:4a:
07:9c:6a:ec:f9:78:b3:4f:55:af:ce:2c:a9:a1:5e:
7c:44:f0:f8:58:ae:29:52:01:8b:ac:fb:0c:b1:2e:
15:aa:0c:76:92:08:b1:e9:8e:89:43:33:b1:b1:28:
fa:29:90:ff:91:0f:44:e2:a2:77:19:70:44:c5:f8:
7a:b4:ed:fa:1f:20:17:06:75:d2:af:2c:cc:d9:30:
20:10:46:90:bb:c9:ba:a7:ab:ba:76:45:26:23:3e:
dd:d7:78:9b:4f:76:93:48:ac:dc:41:be:ca:4d:74:
6f:3a:1a:86:b9:e8:2b:fa:84:80:c7:da:99:07:36:
28:c7:a3:10:50:7f:bc:8d:8d:ae:b3:4b:4a:b3:63:
2c:f4:4f:93:98:6d:08:db:59:b1:08:56:e0:b6:70:
53:e7:46:dc:6a:a6:5f:12:46:98:33:0c:14:4a:bd:
12:e0:aa:87:96:cf:8c:89:49:6b:9e:ac:34:b3:2b:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BA:7C:6E:07:07:2E:1C:24:29:EE:75:E6:9D:21:F3:49:EF:C7:D5
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:10:fa:38:ba:7a:18:e8:87:fe:a1:c9:27:81:ba:9e:b2:1b:
b9:be:f1:06:ef:be:08:ab:01:22:ca:aa:a6:56:1b:de:90:63:
89:81:97:4a:20:eb:f6:27:c9:80:2e:97:6b:6f:a6:a8:8b:1d:
c9:43:ec:26:dc:04:9f:23:c8:ff:3c:97:db:6b:98:17:18:70:
4f:a6:8f:10:5b:fe:57:a5:8d:d7:56:7a:a4:aa:37:07:6a:31:
34:fc:26:db:5f:89:b6:0c:8b:42:2a:55:8d:4e:9e:78:97:f6:
d5:aa:36:a3:09:58:25:78:50:3e:75:55:ac:3c:cb:85:88:48:
41:5f:5e:05:8f:2c:0c:0b:34:67:6d:06:3f:a9:6f:c5:79:ec:
ab:80:79:4a:57:b1:2b:cf:0e:dc:6b:50:a1:9b:f7:c4:dc:36:
20:26:9b:3a:5e:4d:52:8e:0b:9a:a2:af:f2:2e:c5:12:e9:90:
8e:1b:bd:ef:90:9e:70:eb:ee:56:b9:c0:84:fb:2f:63:14:22:
4f:c5:fa:38:24:37:7a:e7:a6:c9:67:11:9c:78:d9:ad:74:54:
6e:35:06:32:51:83:08:eb:57:fa:07:c9:d3:ea:a1:ab:4f:37:
e3:02:cd:79:c3:d8:49:c5:f8:01:58:3d:62:cd:90:2e:d8:41:
a9:aa:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:11:24 2025 by rpki-client