Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: t0BYUpgPniW1wI4YGApmYtshNCETSreF90iMEtxPe/8=
Subject key identifier: 88:AD:D8:90:8F:45:8A:60:15:95:C9:9D:CB:DB:95:DF:9D:20:53:12
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0196B258A6722E619923C1CCF41EFA2640BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0876
Signing time: Fri 09 May 2025 00:01:16 +0000
Manifest this update: Fri 09 May 2025 00:01:16 +0000
Manifest next update: Sat 10 May 2025 00:01:16 +0000
Files and hashes: 1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: sa+KfF2M3l46xWKmOecVB9Vg8P2E4zeCfv/lloKcQAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:a6:72:2e:61:99:23:c1:cc:f4:1e:fa:26:40:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: May 9 00:01:16 2025 GMT
Not After : May 10 00:01:16 2025 GMT
Subject: CN=88add8908f458a601595c99dcbdb95df9d205312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:f7:cf:40:b3:5f:43:9a:e0:f3:b3:9f:5c:
25:b7:70:d8:de:48:bc:8c:27:97:cc:4e:d8:ca:e4:
75:bf:67:1e:13:e9:d3:e7:81:0e:dc:14:ff:a2:ef:
39:d4:58:2c:b0:9b:f2:2d:e8:8d:cb:bb:02:66:f4:
37:5a:77:f1:7e:db:da:a7:cf:ee:1a:5f:23:44:fc:
3f:53:90:31:f9:23:f4:98:b0:84:72:4e:e2:d4:27:
c6:f5:7a:81:f4:de:3d:0a:c3:d8:e9:db:75:8d:d8:
76:e1:c4:c8:b0:57:00:60:a6:b9:bf:63:d5:ef:ad:
3a:85:69:2c:58:c6:a5:fa:2d:75:82:8a:55:42:61:
f1:0d:12:35:56:68:c1:fb:2c:82:4f:1a:d9:03:cd:
94:d6:87:22:cf:5f:e6:3f:55:e5:57:60:e7:80:b4:
c0:12:7d:30:d0:f6:e2:6e:21:f4:7a:39:57:58:c2:
13:8a:95:e1:55:bd:1c:34:16:85:c9:69:88:f9:84:
a0:ab:cf:88:8c:60:ed:cb:f5:46:fe:bd:37:8a:8d:
18:0c:68:e2:a7:b7:70:b1:f9:e2:9f:54:cd:8c:a1:
02:7a:79:2f:b8:ab:7d:f2:ca:b0:a7:7b:fb:e2:6f:
0c:f4:53:8f:fb:8e:96:72:b2:73:e3:66:46:64:19:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AD:D8:90:8F:45:8A:60:15:95:C9:9D:CB:DB:95:DF:9D:20:53:12
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bd:c0:9c:53:d0:cc:35:bf:1a:e7:05:b9:05:79:2f:5d:f9:
a4:ae:46:a2:73:d6:8b:2f:25:10:42:36:ee:cb:ee:03:2d:58:
5a:c7:22:66:58:7a:f1:74:f3:35:b7:df:94:51:e2:2b:3c:79:
e5:12:63:5e:82:c6:2d:2f:c3:32:6a:57:46:a5:af:7a:fa:62:
92:d5:75:8a:fa:21:f8:57:6a:0e:d7:0f:72:38:5f:79:95:71:
01:89:66:fa:80:54:af:ae:a5:8b:af:74:62:21:37:2f:20:90:
ce:05:a4:41:16:09:b0:6d:ae:ff:9b:c7:6d:5b:e4:4f:10:5e:
e2:64:bc:db:d6:06:98:f1:db:38:72:ed:a3:27:f8:93:53:fe:
0d:49:a6:70:05:18:39:b5:7e:5e:24:57:64:b4:0f:f7:be:24:
da:34:fb:ee:c0:3d:b8:b1:10:f5:40:19:9e:36:b9:98:7c:bb:
27:43:68:7d:ce:e6:c7:d9:74:42:e9:ab:67:a4:a0:7c:df:42:
a8:44:b9:3a:8d:7e:f2:84:4f:db:2a:f7:da:a3:f8:89:7e:8d:
01:a9:1f:64:01:d7:ee:6e:e2:ab:13:ec:65:18:21:03:70:31:
50:6a:7c:f9:43:8e:c7:44:e6:65:b0:6f:2f:36:99:4d:33:4c:
85:76:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:41:27 2025 by rpki-client