Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: wpFNHrftPeXbrtCf97gBXoFItcGq901QVVYLKY4IIXE=
Subject key identifier: CA:DF:E6:04:1A:FE:46:C8:90:26:09:B0:76:58:08:CA:02:1D:A9:8C
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 01963FC27FBC1B7209227D0D385D7324DC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 18:00:33 +0000
Manifest this update: Wed 16 Apr 2025 18:00:33 +0000
Manifest next update: Thu 17 Apr 2025 18:00:33 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: 478t3RP0vXRVdKH4tWkdoyBiTEfEKaIw5hAB3qogD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:7f:bc:1b:72:09:22:7d:0d:38:5d:73:24:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Apr 16 18:00:33 2025 GMT
Not After : Apr 17 18:00:33 2025 GMT
Subject: CN=cadfe6041afe46c8902609b0765808ca021da98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:c8:0d:0a:c2:76:2e:08:a2:1e:4e:55:20:
f1:79:2a:8a:9b:f4:62:aa:4b:f2:e6:c9:2f:96:26:
15:5a:33:ef:b6:0c:13:47:7b:22:45:c8:1d:2d:80:
1d:e3:96:d1:00:53:77:f9:40:42:95:10:df:d2:81:
4e:c4:05:63:db:31:07:50:a6:16:7d:8e:37:31:4a:
b2:31:94:67:09:8f:30:3d:a9:42:ee:38:3e:7f:a6:
0f:52:26:b9:7a:fa:f1:7a:07:71:45:4e:8c:34:31:
22:f3:b3:d5:ba:b5:61:4a:bd:6f:2e:61:23:2e:1c:
54:49:76:ec:ce:dd:4d:c7:84:4f:bd:0b:09:52:a5:
c9:8b:b5:3b:a5:dd:5e:10:a2:84:12:a8:e8:51:d0:
22:56:76:16:c3:b3:eb:6c:f6:d5:6b:ef:8f:08:3d:
2a:13:9b:7e:26:3f:c7:f2:23:35:27:b8:70:24:fe:
67:f9:42:82:65:b3:fd:85:44:36:ab:24:c4:0a:6b:
3c:cf:6d:6b:1f:15:16:9a:81:b2:05:e1:5b:eb:f6:
41:69:5c:96:3e:0f:50:7e:81:af:ef:cd:b8:e3:3b:
a5:a0:aa:55:5d:42:ce:0a:c7:22:7f:1b:95:0a:8b:
a0:70:e8:ad:ed:ca:32:1d:c4:11:06:65:ce:b9:cc:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:E6:04:1A:FE:46:C8:90:26:09:B0:76:58:08:CA:02:1D:A9:8C
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:16:27:de:93:16:fe:91:70:27:2d:07:f8:09:d0:0a:25:7f:
4d:cc:5a:f9:71:4e:a7:e9:b7:b8:9d:4d:a7:9d:e0:bf:ba:a2:
d4:e4:d1:67:d8:00:05:15:2d:b0:a5:9c:46:1c:d0:d2:ef:e5:
f2:0a:9d:3b:79:13:a8:bb:7b:be:0f:2e:8d:fe:df:a7:a2:21:
62:9d:8c:4f:ef:fa:a8:59:b8:2a:76:4e:44:b3:cc:fa:a7:62:
ac:19:05:61:7c:28:31:91:9b:a3:3b:ff:08:12:f6:a9:7a:94:
72:ea:a4:c1:e2:a4:29:65:16:95:5d:2f:5e:79:3f:42:f7:ed:
da:ff:25:df:27:55:4e:ec:8a:37:01:d1:6a:78:c2:6f:01:00:
af:0c:45:e3:a3:77:36:9a:14:db:ee:ca:e1:76:31:9c:fb:80:
7e:78:df:0f:58:62:15:d0:a7:e1:36:01:ce:5d:61:b5:e7:ff:
28:92:b7:82:88:bd:7b:cf:ab:61:1a:a1:12:a2:f2:84:35:04:
56:ac:e4:fa:6d:a9:a4:b9:68:b4:e2:32:a6:45:d4:7c:2f:07:
92:73:e1:c9:79:57:6d:9d:3a:2e:55:d0:a3:04:16:6d:41:93:
77:5b:05:23:a9:2e:8d:79:66:da:77:70:1e:7e:94:2f:1c:89:
01:da:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:09:17 2025 by rpki-client