Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: o+p2/JaAnEGryA3FiwEkU8lTkqgDCt4Bt5+PTvrWJig=
Subject key identifier: FB:30:8E:59:1F:5D:5A:93:06:37:AD:3B:60:E9:B7:68:03:59:A2:64
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 019653B7B5C9C9F890FC3EFB3DB14406D841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 1240
Signing time: Sun 20 Apr 2025 15:01:10 +0000
Manifest this update: Sun 20 Apr 2025 15:01:10 +0000
Manifest next update: Mon 21 Apr 2025 15:01:10 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 2Nv42JBG85zpc8vERQf/cfX5wyCsuEpua/n1+ikRMts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:b5:c9:c9:f8:90:fc:3e:fb:3d:b1:44:06:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Apr 20 15:01:10 2025 GMT
Not After : Apr 21 15:01:10 2025 GMT
Subject: CN=fb308e591f5d5a930637ad3b60e9b7680359a264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:fd:05:a3:08:42:d2:ba:3c:71:da:33:2d:
f0:76:ed:bd:81:35:85:6d:22:99:15:af:1f:65:4b:
b4:47:a7:ca:b7:25:97:be:32:f1:a6:93:39:32:04:
2f:3d:08:05:5b:8c:fa:fb:3a:3e:eb:39:a9:38:50:
d9:b7:a3:e2:2b:08:20:a6:5f:f8:60:3e:eb:61:a1:
94:1b:b1:c9:12:24:be:9a:3e:69:b6:5f:8a:ac:8d:
7b:d4:52:b4:bf:c3:6a:7c:d3:b5:b8:52:96:62:cf:
a1:a2:36:39:b6:85:96:56:c4:fc:f5:45:c6:90:14:
8e:3d:23:0d:e0:a2:07:8a:c4:39:63:7d:cd:6e:f6:
de:e2:c0:3f:9e:d8:e1:7d:f0:9a:07:55:1a:69:2a:
65:ef:5e:dd:a0:d1:33:53:b9:f7:1a:12:70:0f:a9:
19:f1:9f:1d:ae:f1:8c:3f:9d:3c:15:2d:5e:46:04:
93:da:da:5a:df:d8:14:be:89:e5:ae:cc:f7:8e:3f:
74:87:72:be:2f:9e:ad:10:9b:60:f9:75:fe:98:34:
72:3c:db:fa:14:b7:88:30:f3:d9:89:51:28:0a:21:
3f:c4:95:fe:ed:82:bf:65:35:7e:5e:34:70:08:ea:
a0:3b:b8:7e:cb:9e:bd:e9:d4:cc:61:7e:83:27:59:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:8E:59:1F:5D:5A:93:06:37:AD:3B:60:E9:B7:68:03:59:A2:64
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a5:79:16:2c:1a:11:61:7b:c8:dd:17:aa:51:14:a3:41:d3:
4a:1d:fb:8e:f2:b8:a3:21:1b:83:be:74:13:93:af:eb:38:66:
a2:72:9a:10:6e:53:99:63:cb:58:cb:28:fe:cc:c8:18:d4:05:
fa:b9:a4:88:a7:f1:79:24:40:a2:df:6d:3d:bc:79:d9:63:c4:
63:2f:df:09:14:39:74:6b:00:ea:2f:3a:17:ac:39:d9:cb:68:
28:a5:af:5d:c3:79:1e:85:91:86:a5:96:5d:e0:23:c1:e6:3d:
b7:aa:3c:b4:1a:05:a9:f6:7a:cc:64:26:e5:9c:7b:19:39:9d:
cb:73:7d:64:13:93:85:63:35:ff:bb:c5:68:13:35:de:6e:e2:
33:6e:d1:6c:9a:92:dd:48:24:39:75:31:40:14:b4:f0:59:d5:
9a:87:7f:4a:23:d5:00:6b:3b:f0:7b:50:49:c7:99:6b:76:9c:
ee:e1:61:14:b9:f6:41:d7:b7:cc:f3:fe:73:d4:16:4e:25:a7:
8c:ea:36:8f:0a:dc:1f:0b:9c:9f:31:ca:a6:98:85:e3:08:d7:
40:ec:38:9e:0a:ea:0b:56:90:7e:6e:78:0c:b7:eb:92:04:e6:
9b:21:6b:91:10:2f:44:74:c7:85:ab:ab:03:ed:0f:67:09:22:
2c:20:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:18 2025 by rpki-client