Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: CruE68hoIVnc1qfRr0d+U8PW5XK9RFBFAA9lsgg91BM=
Subject key identifier: 1D:5F:03:12:0D:F0:A1:6B:E5:C8:E0:FF:06:AE:65:F7:C8:0B:0B:17
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 0196C31491BC461D972BE4BE9A6C3F879D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0330
Signing time: Mon 12 May 2025 06:00:27 +0000
Manifest this update: Mon 12 May 2025 06:00:27 +0000
Manifest next update: Tue 13 May 2025 06:00:27 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: gQ2vc9T08UIHeKwTTDNAlYBGRUgHlJmCCNRRd23XwUE=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:91:bc:46:1d:97:2b:e4:be:9a:6c:3f:87:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: May 12 06:00:27 2025 GMT
Not After : May 13 06:00:27 2025 GMT
Subject: CN=1d5f03120df0a16be5c8e0ff06ae65f7c80b0b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:85:b6:7f:b6:8b:e1:1a:e1:65:21:db:f3:
50:aa:6a:dc:20:ac:74:52:f9:34:32:c6:46:c4:c6:
46:27:8a:3d:be:cd:3e:1d:6c:5d:66:25:b8:c8:0d:
7b:02:ef:58:78:c5:1f:12:53:b1:9c:6b:67:c2:fa:
3b:24:ec:38:2d:03:0c:69:f2:76:0e:36:c8:2b:76:
a4:e8:65:31:94:02:3d:5a:f9:5e:dd:db:a0:62:cb:
d0:d8:9b:32:73:01:05:e1:18:b3:4f:a5:8e:cc:57:
98:09:05:47:72:6b:92:00:41:64:d6:fe:6e:f1:dd:
f4:f9:c3:f9:4a:cc:bb:d9:04:68:53:9c:da:4d:f3:
30:0b:3b:42:8f:48:47:01:4e:31:a5:68:61:71:53:
39:7e:5c:aa:bb:8a:92:78:49:94:55:95:e7:d5:77:
76:18:5e:7f:34:a8:10:b0:0e:00:eb:41:2e:f0:85:
73:5a:f9:03:c5:f6:3c:f9:98:97:6c:24:39:c2:9a:
96:dd:74:0d:b1:b7:72:ae:eb:23:62:ef:6c:c6:18:
0d:75:6f:e6:71:29:22:57:fc:6c:fa:07:1e:74:eb:
e3:4e:fb:16:85:20:c9:b0:9f:51:b9:52:bf:a9:5d:
10:8a:4a:a3:42:2a:fb:9e:43:96:2c:4e:e1:a1:04:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5F:03:12:0D:F0:A1:6B:E5:C8:E0:FF:06:AE:65:F7:C8:0B:0B:17
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:50:6c:ae:fb:70:04:a0:64:01:85:6a:e5:78:ad:4b:28:
6c:99:f7:f1:71:f5:19:87:13:06:ab:f0:63:80:5d:05:34:da:
46:f4:bd:c9:15:ad:1c:32:63:04:ba:f1:14:9a:69:78:59:51:
c1:a7:d0:98:44:58:d0:c6:fe:da:7c:30:44:ef:09:a8:75:91:
d8:53:aa:cf:1a:24:01:8a:50:c6:be:1d:d2:bb:cc:1e:e2:83:
5c:e8:b7:50:a5:f7:b5:03:89:db:b7:6c:43:e3:60:58:5c:5e:
da:47:35:5e:86:50:b5:d6:61:b6:31:ac:03:b0:7b:93:b1:ff:
57:e2:88:a8:a9:7f:5a:1f:11:45:25:ba:2d:c6:23:95:25:14:
d3:24:3e:3e:8c:92:4f:22:c1:ec:8a:fe:a5:7d:d8:e2:95:7b:
e5:4e:92:84:f1:54:4a:41:66:31:63:f1:23:2d:cb:43:4e:ab:
6b:f0:30:d9:a7:d9:34:83:de:47:fc:f6:1e:03:6b:28:04:ae:
fa:a6:53:3d:45:6d:2c:7b:20:7f:35:3e:49:da:3e:28:3f:fd:
8e:88:55:c3:d3:2c:3f:b9:06:c2:fe:91:c4:d1:ea:63:17:12:
3e:3a:8e:df:12:6d:fe:44:b4:23:1c:66:66:9b:fe:fc:fd:21:
66:e0:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:25 2025 by rpki-client