Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: 65l9hdJabPZeS4lKsPj6wIUI5UlSvkowkljNJS2iIWI=
Subject key identifier: 8E:0C:6E:8D:68:F2:67:E1:A4:25:A4:99:2E:09:8F:5F:3A:04:60:27
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019611D7642A5C003D6C95B1F206D8C05BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0991
Signing time: Mon 07 Apr 2025 20:00:50 +0000
Manifest this update: Mon 07 Apr 2025 20:00:50 +0000
Manifest next update: Tue 08 Apr 2025 20:00:50 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: JKzWiGosK6mwQd20fSLfwRLZvDYXoyPGHH7bOJtmowM=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:64:2a:5c:00:3d:6c:95:b1:f2:06:d8:c0:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Apr 7 20:00:50 2025 GMT
Not After : Apr 8 20:00:50 2025 GMT
Subject: CN=8e0c6e8d68f267e1a425a4992e098f5f3a046027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:f9:82:6d:61:42:39:b6:98:98:9f:47:20:
c6:de:b9:40:94:21:73:2f:60:ba:fd:16:39:46:1d:
5b:e2:66:1a:87:00:54:1f:ab:c2:9a:2c:a9:58:b0:
04:32:fa:1f:17:bb:4a:42:93:5e:ab:17:98:e3:86:
f6:01:e9:d2:cf:5d:e4:ff:2c:e6:a3:9d:bc:9c:6b:
e7:8f:91:81:cd:a5:0c:4f:09:73:f9:26:90:52:7e:
9e:16:db:d3:8a:6e:84:e0:81:3f:05:6f:5a:f9:8d:
9c:33:76:e2:f0:75:78:0f:71:40:7b:34:34:70:47:
72:cd:e0:f7:13:8e:f9:d2:dc:e3:2a:35:06:8b:75:
41:82:a7:5b:54:dd:27:ab:1d:38:ec:a7:d5:88:41:
21:c3:55:67:c1:57:87:d6:1a:93:c1:c0:a7:a6:be:
a0:ad:59:2e:7c:77:2e:42:88:71:6b:d3:70:d6:20:
78:d3:ee:60:be:39:7a:f6:49:b8:d3:d0:05:47:54:
61:ed:b7:44:27:70:94:c7:c6:e4:53:01:e3:9d:8e:
35:c3:78:79:3b:b6:f1:7e:70:3b:30:cd:66:ce:6c:
d3:a7:cb:9e:4b:15:ab:96:de:1f:25:84:a8:17:e2:
2c:07:95:9d:45:3a:e2:54:b1:a7:b0:d8:b0:87:9b:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:6E:8D:68:F2:67:E1:A4:25:A4:99:2E:09:8F:5F:3A:04:60:27
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:39:b5:a4:57:a6:0f:ea:c4:92:2a:dd:55:4f:a1:fb:0a:9d:
80:3e:73:78:9a:bd:ed:ab:93:56:c8:5f:aa:fc:38:33:98:69:
b0:5a:19:5f:08:a4:c5:4d:90:f4:b9:cc:c9:d9:ef:99:4c:63:
44:57:dd:a7:0c:e3:ae:18:b9:1a:24:68:33:27:6f:ec:30:53:
68:04:79:42:22:9b:ee:46:21:3c:97:34:a6:eb:ec:e8:41:3f:
a4:a2:e1:89:f1:0b:83:c6:b6:5f:83:15:73:58:09:72:80:f1:
68:8a:dc:ea:9c:7c:41:10:24:be:3e:f8:86:06:90:3a:ad:88:
40:5a:4d:e8:f4:2f:5c:60:cf:2b:c6:27:18:16:75:f5:90:fc:
7b:74:9c:33:c6:17:86:8c:3a:6f:c9:cd:51:00:ad:e5:20:dc:
76:b0:e1:da:c3:d6:1e:dc:12:b0:8f:35:6a:de:4c:ee:a4:d2:
d9:71:3b:a9:be:8e:f2:3c:ce:0c:85:b6:c4:cb:a9:78:e9:44:
e7:95:a7:48:56:fb:b4:6a:bf:f6:c2:ca:a9:9d:c4:46:3d:a4:
6e:23:dc:46:eb:c7:21:23:9c:b3:d2:d3:e6:4d:6b:9e:fd:10:
92:68:fc:2f:00:f1:e7:4c:9a:d5:9d:f2:d0:5e:a5:e6:f9:6d:
39:9e:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:54 2025 by rpki-client