Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: LN1JANlGlsfQSTC5TFgJ8IJFjn135IzH6kvTRfysCHI=
Subject key identifier: 0D:7F:3B:E5:C2:49:07:09:18:78:60:9F:2A:8E:3E:EA:B8:AD:BA:D6
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 0196CA293FE359DBD376E3E1871C779F0CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0EB9
Signing time: Tue 13 May 2025 15:00:23 +0000
Manifest this update: Tue 13 May 2025 15:00:23 +0000
Manifest next update: Wed 14 May 2025 15:00:23 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: ux8F3rhM0N4sK7rEEv65M/MFFSff6WYV8nSUzXMwAzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:3f:e3:59:db:d3:76:e3:e1:87:1c:77:9f:0c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: May 13 15:00:23 2025 GMT
Not After : May 14 15:00:23 2025 GMT
Subject: CN=0d7f3be5c24907091878609f2a8e3eeab8adbad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:4b:de:18:84:94:d4:a8:27:2f:9e:da:3a:
c2:c2:31:17:37:7c:17:80:f7:d8:91:b5:b3:11:6a:
f0:2e:4d:40:b6:45:38:65:ad:08:0a:ef:ba:c6:47:
5d:fa:4b:50:79:af:ab:d3:20:9d:1e:ec:57:14:f7:
bf:7f:67:c8:a5:9a:5f:a8:c5:f5:47:7f:79:dd:04:
bb:be:fe:17:ae:df:b0:7d:3b:62:8e:65:de:ca:b8:
a5:61:46:84:c1:62:18:f1:2e:06:b0:c7:0c:82:f6:
36:6d:c3:8c:43:fd:b2:ee:af:55:9f:07:17:4e:83:
56:6c:42:a6:d7:23:f4:6d:08:3d:1c:83:4f:38:74:
15:db:65:5c:21:47:77:5e:15:f2:67:8f:98:53:dd:
98:06:91:7d:d5:af:28:1f:cc:4f:b8:b4:47:03:f3:
0a:fa:40:a0:d4:9b:12:50:79:7a:9d:dc:0b:33:69:
07:f2:ce:5f:88:dc:88:24:53:dd:01:2d:e0:79:88:
9a:06:25:df:40:2f:b2:65:70:52:08:86:ac:08:89:
a9:ec:37:6d:1b:45:c5:d4:46:ff:43:82:8a:0b:1a:
f5:90:d5:79:26:e8:be:23:3f:8c:e3:a9:bf:c6:ab:
a4:93:0b:85:a3:f7:c8:ba:26:38:89:ca:d7:6a:36:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:3B:E5:C2:49:07:09:18:78:60:9F:2A:8E:3E:EA:B8:AD:BA:D6
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:56:3d:fb:c3:ea:5e:d0:30:51:80:82:e6:7b:97:38:f6:9a:
a2:c2:11:92:75:95:64:fd:6c:62:41:3b:ee:83:35:3a:f4:3a:
a2:93:19:54:9b:cf:f8:f1:1e:fb:2a:f6:5e:43:cd:c1:30:88:
5a:1c:c8:5f:e3:e9:04:db:ef:2e:7e:05:73:d2:1e:24:1b:12:
91:54:9e:c5:a4:48:90:69:f8:d7:7e:50:e5:77:27:54:49:68:
44:eb:0f:f6:d6:30:56:e8:51:46:b3:1a:42:6d:10:f7:60:69:
73:a1:20:99:0b:84:7c:e2:dc:b1:27:60:47:db:6d:fa:a9:4b:
cc:b8:f2:43:1f:e9:9f:40:39:ea:26:be:42:98:b4:16:7c:fc:
66:36:ec:53:18:0b:66:ae:58:ff:9b:2d:6b:be:6e:f7:a9:cd:
9b:46:d3:29:0c:44:97:d9:14:60:20:06:b9:7b:44:37:43:c0:
36:1b:9a:fb:39:00:31:64:ab:3c:9c:c4:b0:fb:f5:99:5b:ac:
89:fc:50:51:85:ab:d0:bd:de:48:c5:31:ed:e5:10:77:62:eb:
4f:e8:b7:df:b5:98:e6:39:bc:fd:22:f3:fc:33:88:bd:98:5f:
f4:0f:0e:66:cd:0d:ad:1d:6c:01:e4:7f:44:f5:79:ec:63:6f:
b4:f8:8d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:05:32 2025 by rpki-client