Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: OvSpoP4UsSDBYH+bd3bLYeO/QU2trcvRRGRNPMjzeck=
Subject key identifier: A7:A7:39:4C:0F:C0:3E:F3:1A:64:7B:97:FA:4F:BE:7E:A7:46:BA:C3
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019613213DC2DA0AFA1A6112EBD317571827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 14DC
Signing time: Tue 08 Apr 2025 02:01:07 +0000
Manifest this update: Tue 08 Apr 2025 02:01:07 +0000
Manifest next update: Wed 09 Apr 2025 02:01:07 +0000
Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
3: 6XBAxRu2vxsYUwDkyUyt114ocMQ.roa (hash: eGNmL1OUFrA09FqL5JQElO3Jmjf1hQtWEl+MS56G7Vs=)
4: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: k1FXu9BU4abPHnkK9A3eVWCPRsXUn4mwMig0RbOTYsM=)
5: cOWofKyb3NN8nv4CWZV7MLxAcXc.roa (hash: LjkxNR+VtLN8pFku0A8FzCtI0cGNobOpe7LNW6GMeZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:3d:c2:da:0a:fa:1a:61:12:eb:d3:17:57:18:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Apr 8 02:01:07 2025 GMT
Not After : Apr 9 02:01:07 2025 GMT
Subject: CN=a7a7394c0fc03ef31a647b97fa4fbe7ea746bac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:71:d8:fd:0a:49:e0:37:e1:54:d5:60:65:
31:bf:5d:d1:5b:a2:cf:e7:ea:91:e5:14:48:18:49:
84:25:09:1c:3b:35:53:b4:da:48:da:08:7b:46:51:
15:1b:6b:f1:70:96:73:09:ba:c4:4d:63:3f:c5:5e:
85:66:b3:7f:f6:9e:de:fc:5d:6e:84:e3:92:47:f0:
8c:43:83:d9:c7:92:bb:0c:f5:31:8c:bb:56:12:77:
ff:4e:f9:8a:7c:ec:cc:db:cb:e6:23:e2:71:03:4c:
66:ab:ac:7d:bf:2e:20:db:ae:d8:82:82:7e:e9:d3:
52:2d:d3:65:69:c4:24:12:a8:91:ed:a0:48:78:97:
12:73:d2:fe:b1:e0:ec:ca:80:6e:8a:01:f1:fa:87:
9a:93:6c:4d:c3:12:b7:30:68:91:2b:8e:38:72:c1:
3c:40:01:6d:a3:a2:4c:ef:1b:62:e2:43:01:f6:79:
b7:2a:69:f0:21:56:48:92:8c:3f:bc:1b:f7:e1:d5:
0e:66:37:19:13:53:0b:2a:0f:79:c6:f5:0e:94:86:
db:9a:69:88:88:d0:9b:b5:2d:a5:88:ca:66:0e:1c:
24:46:66:ac:70:ad:6a:d3:e6:34:4f:34:36:39:7a:
71:ca:3b:93:9f:b9:82:09:53:ec:73:6a:8d:81:00:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:39:4C:0F:C0:3E:F3:1A:64:7B:97:FA:4F:BE:7E:A7:46:BA:C3
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:78:d7:c7:45:48:8f:59:c5:78:d2:12:ab:de:df:e5:ea:6d:
77:64:8c:32:48:ab:66:90:c6:32:63:43:43:94:a5:fa:96:56:
c0:1f:42:a0:7f:83:d6:65:45:17:fa:4e:78:6d:f9:7b:53:7f:
b7:10:c0:4d:ee:4e:00:4d:84:d6:e1:b4:73:76:62:0e:fd:fa:
7b:57:8b:71:7b:74:55:24:0b:ad:6f:9b:9b:03:6a:38:63:27:
f1:1c:41:f4:fb:0b:a5:81:18:c4:34:58:3a:07:03:09:7d:a8:
4e:16:dc:2a:9f:91:0e:e1:a7:43:3b:2c:c7:d7:25:6e:0d:dd:
2f:ce:be:13:cd:02:93:fb:ea:11:2a:1a:fe:c4:ce:a1:50:83:
3b:c8:68:b4:7b:39:a8:53:4f:76:a6:6f:82:35:e6:7d:0f:05:
0e:5d:57:5e:d0:c8:51:ec:ea:f1:81:76:9e:0a:31:c7:f8:0d:
ef:02:23:d2:79:5f:3b:b1:44:98:84:d9:8c:f9:27:22:31:4c:
25:a9:46:75:ba:d1:d6:0a:94:9f:ee:ff:9e:91:da:f0:02:a2:
b9:8a:1f:d0:45:95:9c:32:be:b5:1d:73:a7:e5:d9:98:79:64:
27:7c:0c:e4:44:25:f5:7b:58:95:13:9c:6a:5d:cd:7b:8f:c7:
02:b9:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:33 2025 by rpki-client