Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier: as/Hb4M9VOiSTrTZI+3y2sK5UKYlYmj5xAr6k43OQLc=
Subject key identifier: 8F:53:FC:61:ED:4F:A6:B8:50:94:E9:30:FA:17:27:CF:87:EF:7D:CE
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 0196B9A3D0B69A7BA1C42054A65E34D3E4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 10:00:42 +0000
Manifest this update: Sat 10 May 2025 10:00:42 +0000
Manifest next update: Sun 11 May 2025 10:00:42 +0000
Files and hashes: 1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: wBRr6/a87y4OSq2y/bxBq1nIUv4h8bVKTlIK5jtPPrk=)
2: Vn0PoWq91day6d--kuy39s7CP5U.roa (hash: daOIdL4b5N4GukWwie8JBBD3OBe/sdcGSiKd1pWKhtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:d0:b6:9a:7b:a1:c4:20:54:a6:5e:34:d3:e4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: May 10 10:00:42 2025 GMT
Not After : May 11 10:00:42 2025 GMT
Subject: CN=8f53fc61ed4fa6b85094e930fa1727cf87ef7dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:9b:c0:be:34:f5:5f:54:fa:93:2a:c0:76:
f6:b2:2d:54:94:ac:b1:31:50:63:c3:77:c7:e1:c6:
48:95:ac:9e:91:af:cd:9e:0c:a2:08:eb:d7:92:75:
ef:4f:a8:72:19:d3:ff:70:51:f9:ad:67:32:2e:a8:
ad:e7:bc:75:95:79:5f:42:7a:63:ca:06:fa:33:e7:
9a:62:0c:0a:5e:1a:58:ce:2a:b5:45:c1:f5:a2:8f:
4e:0f:79:86:dc:ad:40:a3:c4:cd:eb:14:9e:4d:95:
f6:e4:09:ab:61:4c:35:f3:ef:f7:c5:97:6c:f4:b7:
ed:5f:30:f0:21:bc:57:13:4a:d8:ca:8a:b2:77:68:
21:e4:f0:1f:69:b7:ca:7e:04:2a:5d:a8:6e:64:5b:
d8:57:69:ab:1c:31:5d:ea:d7:96:2b:d6:61:a4:57:
14:4a:b8:d6:30:5d:c3:5a:eb:75:3f:cb:77:fa:5e:
6c:f2:e0:68:c3:3e:12:c9:96:39:96:9f:95:0d:63:
89:33:80:c1:e2:09:ef:06:d3:32:a2:a7:80:b3:62:
42:9f:69:b8:15:b3:ac:e5:57:08:58:54:59:b1:7c:
fb:71:ba:2f:d3:f2:3e:ed:27:3c:6a:5d:ac:f2:41:
ac:c7:2e:2f:35:41:f8:94:0e:0b:70:f1:da:c1:a1:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:FC:61:ED:4F:A6:B8:50:94:E9:30:FA:17:27:CF:87:EF:7D:CE
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9a:dd:a3:31:e3:47:b8:d1:ac:ba:73:00:76:e2:0a:8b:1a:
bb:34:b0:b2:db:e9:ec:3a:4c:92:03:b9:63:bc:69:30:8c:33:
ec:57:40:ec:db:dd:c1:62:f1:6e:35:8c:8f:31:e1:46:04:ea:
24:6d:0c:d8:b2:dc:e0:b8:61:c0:2f:91:9f:b5:2a:1b:65:ad:
5d:f1:84:bb:29:db:c2:5e:15:d7:82:23:81:2d:4f:a5:90:d2:
96:8a:33:01:0e:c5:e3:88:c0:32:7b:10:36:87:4f:8c:38:57:
d7:1c:7f:f5:f0:1d:00:fb:8e:72:22:6a:74:5b:4d:3b:bb:b5:
f0:7e:0f:68:53:ab:43:85:00:10:91:21:6b:ce:66:51:1d:44:
80:19:2e:b6:c2:d1:95:b5:31:68:b7:cb:c6:e4:d0:bc:ca:9c:
66:80:35:11:2b:5a:36:d6:a7:bc:e8:79:b3:1c:4c:ff:86:5d:
8d:3e:34:ee:40:9a:a2:a3:84:f0:df:6c:bc:40:b7:2f:a5:5e:
f8:6a:d2:fe:2e:be:43:3b:27:1e:29:24:1c:d4:ca:a8:7b:08:
f2:6b:76:8c:4f:71:6e:ea:fe:3e:34:9b:2a:ef:28:8c:2d:56:
5e:14:a5:2c:83:34:55:d2:ab:25:df:58:2e:be:b2:bc:0e:f3:
e3:78:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:46:22 2025 by rpki-client