Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json)
Hash identifier: yC4F2w0ts10KR+PnzSVC/q0eAx01mc24NDsL/VusDGs=
Subject key identifier: 64:3B:AD:48:ED:94:81:8A:C3:C3:C5:A5:9C:A7:AA:B5:19:A9:43:E7
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 0196BECA40B96A10CEFEF4B1D2FDEFE5C4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
Manifest number: 1540
Signing time: Sun 11 May 2025 10:00:47 +0000
Manifest this update: Sun 11 May 2025 10:00:47 +0000
Manifest next update: Mon 12 May 2025 10:00:47 +0000
Files and hashes: 1: RJXW4LBK4fFR7-qXARrAfcS6HVM.roa (hash: nADRNIhqhtAZRzc6jlM5uns21XppYQB+SgxQZjcIenk=)
2: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: RMc+0epyMjRdfDFNbfTYfdMylZo7nLNUGpglalR+g+c=)
3: pPV-duHwP_qg6dqtHXTIMJzGTZk.roa (hash: alNCRojVtM9rfP6fgcCwPL9ZC8lIXb9OD5QPFguw90Y=)
4: vCf8yvFQk2s2r3n1HJDp_jQFJXM.roa (hash: jBJIOl65ecVZp1wJaLRHWAhQzp/SzkHduM8VaB76Diw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:40:b9:6a:10:ce:fe:f4:b1:d2:fd:ef:e5:c4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: May 11 10:00:47 2025 GMT
Not After : May 12 10:00:47 2025 GMT
Subject: CN=643bad48ed94818ac3c3c5a59ca7aab519a943e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:35:37:ad:0e:b0:28:9d:44:d5:72:3d:c8:
89:e0:85:a8:bb:87:50:0a:9f:1f:ed:b9:de:fd:fd:
12:1f:3d:05:71:44:e1:a2:2e:52:c6:b5:d5:cd:91:
7c:f8:05:1f:3c:3a:89:f4:9a:dd:40:f0:c2:c5:b4:
8a:67:08:ca:32:2a:69:1b:28:37:55:aa:7a:5c:53:
a2:42:a2:19:85:42:b4:63:14:65:77:e7:27:2d:3c:
30:26:d2:2a:c5:47:7b:68:53:56:20:8b:37:fc:44:
fc:9f:69:cd:f0:0f:23:8f:b7:70:a6:44:ca:99:88:
27:54:c9:ed:ff:35:3b:54:36:b3:78:30:91:4c:72:
4a:42:6a:3d:d0:3e:e1:22:0d:15:6a:cf:5a:f1:f8:
9c:45:10:5e:9e:32:55:29:cc:21:51:a3:4b:40:6e:
61:41:26:0f:be:41:b4:75:e1:8e:de:4c:7f:28:b7:
de:b2:97:52:4e:b6:38:13:ce:bf:e4:7e:5d:ee:29:
17:b8:ea:dd:28:83:18:14:5a:5f:d9:64:75:a0:8f:
e4:dc:dd:73:0e:90:58:0a:b4:53:80:c9:d7:e2:12:
92:c1:cc:64:f7:98:db:33:54:4a:b3:ab:1e:97:bc:
02:1f:12:de:fc:d2:1a:35:0a:03:0c:4e:76:7f:5f:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:AD:48:ED:94:81:8A:C3:C3:C5:A5:9C:A7:AA:B5:19:A9:43:E7
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:57:0a:d1:0c:1a:71:82:42:b1:7b:08:79:e7:78:89:59:89:
d4:3d:4b:f1:0a:42:e8:e2:fe:0b:53:68:0d:d1:8d:10:3a:21:
79:88:3e:14:51:db:af:9b:cd:d4:06:b4:68:8b:c8:f6:37:64:
bb:08:97:bc:91:96:73:0c:c2:87:64:62:cd:f5:91:d5:d6:20:
42:01:36:39:a3:8a:5c:16:7a:0b:96:6f:7c:91:c0:d2:92:c3:
1a:b3:99:90:79:d4:7e:28:79:4c:ef:cc:73:32:66:d2:bf:41:
02:5b:a0:4e:88:22:a6:82:1b:f9:42:1c:58:c6:ef:82:71:64:
01:53:2c:f6:d2:a4:e3:fe:c8:80:ad:5d:ec:0a:16:52:60:85:
30:3c:b2:1a:77:65:61:fa:d1:cd:81:e9:61:87:13:4b:29:65:
b4:ac:7f:83:5c:d6:c7:df:0f:d5:f0:5c:44:fa:23:ed:72:6a:
ec:5d:05:04:5b:b7:ad:00:25:6a:c3:fe:a3:6d:37:98:1a:4d:
57:9e:1d:66:47:b0:36:1b:85:49:8a:84:36:0c:04:e0:79:97:
8c:f0:cd:be:d1:57:83:4f:aa:c4:b3:0d:8c:ea:34:af:8b:d3:
36:73:1b:c4:32:b1:05:a3:f6:39:31:c9:11:77:16:59:99:ba:
64:37:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:44:31 2025 by rpki-client