Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: QmxS8HaGp38BpJnnKgipG8ClZiWxTZ/mNdaEK8d4qhk=
Subject key identifier: 72:37:77:29:5D:34:E2:05:1B:15:7E:84:CD:3E:44:97:BC:98:D1:F1
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 01963651E716AF863DC2CACFEF4E7C2B5C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 142E
Signing time: Mon 14 Apr 2025 22:00:59 +0000
Manifest this update: Mon 14 Apr 2025 22:00:59 +0000
Manifest next update: Tue 15 Apr 2025 22:00:59 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: +75B6yhMT0w2p72CxyRDw0pL87e83HSwL379Kr6GF8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:51:e7:16:af:86:3d:c2:ca:cf:ef:4e:7c:2b:5c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Apr 14 22:00:59 2025 GMT
Not After : Apr 15 22:00:59 2025 GMT
Subject: CN=723777295d34e2051b157e84cd3e4497bc98d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:00:01:9f:e4:6d:17:b5:ad:04:b1:12:0f:
4a:34:94:56:20:1c:e9:be:0f:ec:f3:01:fd:c3:c2:
71:5f:05:03:a0:8b:17:03:89:e2:23:dc:72:f4:34:
9e:cb:cf:97:fd:62:88:6c:10:6d:09:8a:94:4b:dc:
4a:69:e6:85:92:05:ae:11:84:c3:33:3c:45:c8:b7:
18:3d:bc:51:f5:d3:fe:19:79:2b:4b:83:ed:96:ad:
27:22:87:a1:3c:2c:8d:02:d2:71:23:85:4f:52:94:
cc:72:55:19:fb:a6:77:94:f3:b9:02:c3:33:cc:fd:
e0:6c:46:b5:5f:e2:b6:cd:1d:83:db:f1:3c:ee:4b:
b3:bd:ee:19:19:20:39:10:ed:e9:f2:7b:6c:5c:7f:
dd:7a:b4:d3:81:66:13:e1:02:c8:44:fd:f4:dd:1c:
b0:0f:ef:91:3c:95:5d:1a:2c:9c:a7:f4:b2:c1:e1:
bc:34:2e:e4:d4:28:7e:bb:a5:c2:69:5a:e8:40:65:
15:86:13:65:ec:ac:71:d6:ac:0e:9a:fe:0b:44:c9:
cf:88:fb:72:e3:f8:a3:9b:eb:fd:6b:57:66:d9:2a:
7e:98:7f:d1:eb:d8:88:65:89:31:83:38:06:36:de:
ba:2b:54:62:87:14:ca:bd:a9:d0:88:07:e5:3d:b5:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:77:29:5D:34:E2:05:1B:15:7E:84:CD:3E:44:97:BC:98:D1:F1
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:1d:a4:9c:3b:06:35:1e:54:9c:ed:85:84:54:6c:de:ba:a1:
27:f6:84:9b:94:73:27:10:87:1e:b4:9e:7a:76:a9:f5:4d:ea:
d7:b4:7a:2e:27:9f:88:a2:3a:da:6b:e1:12:f6:c2:0a:ec:3f:
e7:d8:50:5e:a4:b2:1b:07:5c:1b:3b:b4:aa:71:37:cb:94:88:
96:99:e9:fe:a9:85:fd:a0:95:e8:be:24:78:40:97:76:ed:20:
5a:11:9d:f8:6c:c1:0b:9c:3d:e4:d2:23:0c:0e:58:56:50:64:
a9:7e:8d:db:eb:dd:6d:56:b2:75:7f:61:4b:26:69:7b:e3:be:
68:50:38:a8:c3:24:3e:f0:1e:14:c4:55:9a:b8:3d:03:a8:d2:
7f:22:9b:4b:3e:ce:6f:7f:4d:f3:26:73:41:94:50:70:80:a2:
10:06:53:79:ca:e4:f1:b6:00:f5:a4:37:62:86:94:4d:27:55:
e6:38:43:1f:68:c4:83:94:9c:b3:8c:6f:dd:79:d0:78:d9:ad:
bb:84:92:01:b9:91:68:cb:86:1f:b3:ee:3f:86:ff:65:d2:60:
04:ec:0b:fd:df:89:84:d4:98:c4:8e:1e:29:95:82:8d:d4:cb:
d9:1b:57:65:42:94:1c:37:90:83:c5:4a:5c:fd:0a:d1:f5:54:
3f:81:b9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:00:00 2025 by rpki-client