Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: ZmjbWPYfjUicP/T/yVIlqoI3uUY4nIb9MiG1LV4O71E=
Subject key identifier: D0:CD:D1:04:1B:5B:3B:40:FB:50:3A:6D:B6:94:8E:5B:FF:63:78:2D
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 0196BF37D2C5738946AA72C421428C964D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 1543
Signing time: Sun 11 May 2025 12:00:28 +0000
Manifest this update: Sun 11 May 2025 12:00:28 +0000
Manifest next update: Mon 12 May 2025 12:00:28 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 3SABCWIPmPE1Dl5JuJIqBdynyVWFg2NgLr0YBoXxqv8=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:d2:c5:73:89:46:aa:72:c4:21:42:8c:96:4d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: May 11 12:00:28 2025 GMT
Not After : May 12 12:00:28 2025 GMT
Subject: CN=d0cdd1041b5b3b40fb503a6db6948e5bff63782d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:13:cb:9a:c5:af:f7:7d:be:26:3f:99:57:
a3:04:ad:54:92:11:3d:c2:66:49:ef:51:03:61:85:
3b:d2:a9:79:24:ea:2b:be:aa:ec:9c:7d:c5:35:45:
c9:7a:8a:9e:23:e6:1f:cb:d3:11:06:10:37:81:a5:
2a:d2:a4:c7:0e:f2:48:90:3e:c3:13:9b:59:65:77:
55:44:f7:86:fd:c4:bc:22:57:56:6d:d2:fa:02:f2:
40:1d:88:0e:13:0f:1e:a8:9b:48:ec:16:1d:da:c8:
9a:44:43:28:57:d0:1f:73:b3:81:3b:14:aa:13:dd:
72:cc:48:08:75:65:b5:fb:87:ff:f8:58:e6:14:17:
a9:a9:bd:49:56:b3:06:bc:5a:e1:73:cf:59:b4:0a:
1e:fd:da:73:9a:99:63:fe:f8:88:44:54:12:2e:49:
2a:06:0e:7a:f5:3f:0d:bc:d0:dc:a3:8e:60:d2:9a:
0d:65:5d:c6:e8:21:07:cf:c8:93:66:c8:c8:ee:72:
6d:b7:80:35:c2:8d:96:21:7b:8c:f0:34:03:49:86:
2e:4f:d3:20:bf:02:b9:fc:c9:47:48:bb:ea:c7:90:
99:56:a9:a3:23:cb:6e:c6:e7:7b:f5:1e:a7:38:e7:
a2:1e:40:7a:fa:89:41:d4:c5:b4:71:4f:be:12:8e:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:D1:04:1B:5B:3B:40:FB:50:3A:6D:B6:94:8E:5B:FF:63:78:2D
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:31:58:bf:b8:00:41:f9:09:f0:c7:ba:17:bb:f6:a5:2c:0a:
ea:ec:df:62:9e:11:8f:21:66:aa:39:da:74:6f:6d:a8:9e:55:
eb:58:ba:ca:cc:fe:6f:ed:d2:28:49:1d:8d:3c:ab:28:59:80:
6e:2b:1c:c9:c6:cf:9c:ec:b7:a3:7b:c4:b9:b4:69:dc:29:58:
d1:ee:c4:35:92:9b:bb:f9:9f:5a:7e:cf:42:e7:0a:d0:cd:30:
c1:40:1b:12:92:46:0d:5a:53:9d:1d:6e:04:43:13:e1:17:7a:
69:30:6d:c4:cf:ea:4c:22:02:a5:5e:8b:3b:73:fc:39:2c:35:
d1:a4:e2:e1:76:80:a7:27:37:14:6b:62:2b:b6:fd:b8:92:ed:
c0:f8:1d:d5:28:1b:49:c2:75:0c:ce:ac:b7:e5:7e:6c:3f:55:
f4:43:fa:d6:c8:de:83:79:a6:db:82:0e:2c:19:d8:2d:df:33:
50:de:7b:b3:02:fd:d0:05:e6:15:ce:e3:0e:d3:d6:6c:b4:48:
ee:98:35:77:f0:21:09:2a:40:3f:4d:30:67:11:00:72:46:fc:
a8:0c:31:51:c5:12:1d:f5:68:0f:89:1b:e2:c6:b9:54:30:7f:
f1:80:be:45:f7:b3:54:93:25:d7:55:d5:73:26:50:d2:23:86:
d8:19:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:02:59 2025 by rpki-client