Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: 56SJuRMCOnSsGjePeg6h3Q2XgsDKH6ghjjk2bS68aB8=
Subject key identifier: 96:74:73:D1:76:33:DA:19:7F:4B:48:86:03:6F:2A:15:51:D3:30:EA
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 01958F981B5177E152E90B7F7A37E8D76701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 114B
Signing time: Thu 13 Mar 2025 13:01:04 +0000
Manifest this update: Thu 13 Mar 2025 13:01:04 +0000
Manifest next update: Fri 14 Mar 2025 13:01:04 +0000
Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=)
2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: BEizFfVkhqClNIJwr7D4Ha81ymSQ50jnYL36sB02k8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:1b:51:77:e1:52:e9:0b:7f:7a:37:e8:d7:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Mar 13 13:01:04 2025 GMT
Not After : Mar 14 13:01:04 2025 GMT
Subject: CN=967473d17633da197f4b4886036f2a1551d330ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a2:9f:ea:4e:63:c0:a8:df:cf:26:aa:7b:2c:
c7:20:c1:fc:83:d9:5e:4c:d8:1e:3d:16:8f:17:3d:
c8:95:4f:d8:fd:f2:6f:1e:e0:73:87:c3:6f:3f:cf:
3a:79:3b:0c:ae:2d:f8:a8:08:05:ea:2d:4b:f1:d4:
6a:c0:b4:5d:36:b3:2f:a5:de:7d:c8:a1:90:d1:00:
c2:80:2e:94:53:38:5a:56:04:0d:9c:ac:a4:f0:bd:
ae:45:82:3b:1a:3a:8a:56:9b:3c:65:aa:6c:0c:50:
49:3d:c8:5b:86:b5:48:44:de:e9:53:db:9b:be:6e:
c8:d0:3a:4a:9d:92:e9:32:44:f1:06:2c:c8:dd:c9:
88:22:8c:3b:88:8a:5b:c9:8a:0d:96:6c:e8:2b:42:
ac:73:26:d6:ca:80:b0:64:80:33:f5:63:bf:16:0a:
e1:4b:a0:cd:9a:f1:4e:b9:4a:80:58:be:74:80:a3:
d8:8a:b4:25:ef:3e:ff:59:40:f6:21:68:e4:5c:47:
85:04:5d:0a:2a:90:bc:db:4c:80:b6:96:31:70:4c:
62:12:5c:74:32:ec:53:ee:ec:74:c9:06:87:99:b6:
87:21:fb:41:0d:ea:64:b8:c8:d4:54:ea:06:96:90:
24:7f:aa:b2:b2:fa:8c:57:4a:cd:b0:8e:b8:eb:6a:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:73:D1:76:33:DA:19:7F:4B:48:86:03:6F:2A:15:51:D3:30:EA
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:27:93:b7:fe:3d:a9:95:b2:5b:9a:9a:a3:04:e5:aa:61:92:
0e:ef:0b:b4:a3:e2:fb:d3:5d:c2:51:0b:ee:da:97:cd:5c:42:
e3:9e:1a:90:34:6c:d1:76:ba:aa:57:ad:a1:48:14:9f:94:98:
33:5c:61:81:47:e8:cd:19:0b:b0:a2:88:63:1a:bf:93:8a:bb:
2a:fe:76:54:75:74:52:4d:d6:28:26:f0:a4:52:67:26:60:97:
0e:42:0a:ca:cc:5f:e7:6a:9e:28:de:85:4c:ea:5e:51:70:05:
bb:12:58:55:87:cb:ef:bb:e1:30:dd:fa:e5:1e:97:11:0c:d5:
d8:2e:52:4a:c4:b3:76:33:74:d9:df:c5:3a:2a:77:d6:35:1d:
81:72:f6:e1:e9:44:ba:98:11:8f:48:cb:4b:b9:0d:86:60:61:
30:31:5c:66:ea:e8:a9:c9:d6:2e:d0:fa:ee:23:77:fd:07:a0:
d3:8f:30:3b:6b:e4:5a:98:db:4d:d4:3e:99:21:2b:10:41:c6:
99:b6:e4:4d:69:2d:90:cb:9e:41:b3:ac:ca:bf:ca:72:d1:cb:
82:d4:c8:be:d9:c6:9e:ea:1d:7e:ee:fc:0d:56:50:0c:15:16:
06:05:af:4c:e7:f6:29:55:09:9c:e1:b2:fa:fe:a5:bc:c0:eb:
78:7e:4e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:31:06 2025 by rpki-client