Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: qkI/2I0R+W3XbDsDZ2L8DfuVy8M5cpFMz+JrEodqXHA=
Subject key identifier: 51:91:41:53:EF:52:10:FF:38:13:32:8E:D4:4F:98:F6:A7:FB:F2:CF
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01964CA2B88849B71A8744F9263429398BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 06:00:54 +0000
Manifest this update: Sat 19 Apr 2025 06:00:54 +0000
Manifest next update: Sun 20 Apr 2025 06:00:54 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: awGVGU3gxK7yNCFRR+mssUGdLsBdZrqoOzVtpDyJ7ak=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:b8:88:49:b7:1a:87:44:f9:26:34:29:39:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Apr 19 06:00:54 2025 GMT
Not After : Apr 20 06:00:54 2025 GMT
Subject: CN=51914153ef5210ff3813328ed44f98f6a7fbf2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:db:66:d2:a3:ad:55:2f:18:14:14:77:bf:
84:5c:84:f6:6d:76:37:39:45:ee:6d:9e:6f:d7:6a:
60:8e:fd:b9:20:05:03:a1:53:95:fa:e6:89:1f:5d:
16:91:f4:a8:86:be:ce:9c:a8:91:d5:d9:4f:bb:69:
71:7b:eb:89:9e:77:c3:45:da:c0:94:f4:d3:57:ee:
e0:ad:33:6a:5a:56:5a:78:5f:5a:f4:a4:39:b6:71:
5b:c2:33:22:33:08:45:35:40:34:0c:ba:3c:ce:a9:
9e:96:5f:af:80:09:b4:5a:cb:70:89:ea:5e:06:cc:
13:00:d5:e8:13:54:76:ba:91:74:92:f0:e0:07:7d:
43:a4:c6:3b:08:21:65:e6:be:a7:b7:3c:9a:1a:6a:
60:1d:52:04:a6:20:f1:00:da:d2:3c:5f:ab:2b:8f:
de:ea:09:14:c3:aa:76:58:86:6e:8a:3e:34:cc:9b:
a5:e7:0e:e4:bd:91:9c:f7:e6:0d:68:64:0f:a8:08:
48:0d:0d:c8:47:95:ce:b0:78:2a:06:bd:fb:42:8c:
81:ed:38:8f:e4:94:f2:d1:bb:70:ee:11:e0:bd:1c:
8f:b5:40:3b:7c:96:64:95:69:02:70:8b:4b:e4:c1:
79:36:cb:9a:ac:68:26:7d:c6:20:c3:80:e9:6f:58:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:41:53:EF:52:10:FF:38:13:32:8E:D4:4F:98:F6:A7:FB:F2:CF
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8b:38:74:89:b1:11:af:0d:e4:ef:39:09:1e:f6:15:f7:5d:
7d:bd:40:08:67:f4:0c:ca:23:09:c5:f7:0c:1d:59:df:9d:fd:
ba:e3:ba:8c:a4:59:aa:9c:83:2b:57:00:e0:9e:69:56:02:60:
a3:4f:39:ee:77:35:d4:a2:62:68:ab:83:53:51:ea:51:42:62:
9c:e5:0a:fc:c4:85:04:7f:82:0b:76:37:f2:51:ca:ce:57:01:
b8:16:7d:03:f9:2d:96:cd:88:54:9f:29:ba:6d:21:2a:8c:b9:
1a:1f:3a:c2:9c:39:c8:5d:d9:b4:11:93:30:0c:32:00:61:86:
0b:19:eb:4c:c9:8f:75:c3:05:2b:bf:10:a9:65:ad:bd:b3:b5:
88:39:9d:1d:17:fe:99:f9:3c:c1:0f:0b:c7:82:bf:77:37:79:
c9:02:f3:18:99:78:c2:d6:c7:6c:30:ae:b5:b6:5b:07:f2:9d:
36:3d:28:82:00:a2:67:2e:ff:d2:68:55:d4:a5:2d:73:18:7a:
fc:6a:4c:59:cf:69:0b:82:e3:b8:67:86:bd:b8:6b:09:2a:cb:
37:02:29:8e:11:a8:1c:5c:52:8d:69:97:eb:15:bf:5d:17:06:
37:01:68:c5:67:7f:d4:8b:08:5f:12:e6:a6:64:b2:27:c9:e7:
1c:54:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:10 2025 by rpki-client