Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: QJmDTp12Xi8uAhilcKPmPQLbImjIiP7zNVtKmfPMwI4=
Subject key identifier: 4D:C6:7A:CB:B2:39:CC:04:B1:07:C0:52:A3:E8:93:83:32:05:27:17
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 0196B3339E4C11BB0DDB2747852BD6D2FD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 04:00:26 +0000
Manifest this update: Fri 09 May 2025 04:00:26 +0000
Manifest next update: Sat 10 May 2025 04:00:26 +0000
Files and hashes: 1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: +vcYResbFfBItdi+fk6MFU2G1iTL8IvPzJnE+tOpuIA=)
3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:9e:4c:11:bb:0d:db:27:47:85:2b:d6:d2:fd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: May 9 04:00:26 2025 GMT
Not After : May 10 04:00:26 2025 GMT
Subject: CN=4dc67acbb239cc04b107c052a3e8938332052717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:32:9d:0d:d8:b4:4d:88:ab:85:d7:63:44:
25:be:55:50:0d:15:f7:aa:c6:aa:70:8a:c4:67:1b:
1d:3c:32:33:99:8c:aa:da:4e:5d:30:b9:f5:3f:15:
a5:64:21:1d:25:e7:17:c2:2a:30:34:3a:bc:a1:95:
86:26:01:24:e0:85:23:90:73:06:e1:6f:30:56:4d:
cf:52:3d:d4:1c:b3:d4:b4:25:2f:eb:89:89:85:4c:
a2:6f:5b:a5:2a:fa:98:39:44:7c:a9:39:19:2c:e9:
4e:c6:a3:1f:e2:c3:86:b8:97:9d:a9:29:ab:a6:c7:
d7:cd:41:18:5c:42:01:33:76:54:48:80:6c:4d:12:
f4:01:88:71:ba:ec:82:04:a8:d9:33:b1:67:42:06:
4f:4a:64:2a:fa:b0:30:d6:b5:12:03:26:c7:3e:50:
51:62:91:2f:28:06:ff:cc:cc:61:1b:39:5f:ea:76:
a3:78:7c:47:f3:0a:e0:8e:f1:d3:82:80:8c:f0:01:
8d:d6:1a:cb:4d:2b:3c:93:0a:56:f3:2c:43:d3:30:
28:81:d1:4f:53:ee:df:41:15:a4:d8:59:b5:c4:f8:
de:f4:dd:80:56:7e:b6:4c:e9:04:c0:a6:30:69:0d:
fc:ea:3b:8e:66:9b:aa:47:b0:24:28:c6:56:d8:cd:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C6:7A:CB:B2:39:CC:04:B1:07:C0:52:A3:E8:93:83:32:05:27:17
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:c4:c2:94:ad:1b:65:13:5c:fc:aa:87:73:41:45:4a:ef:
22:9a:e6:20:73:9a:15:d7:4b:c9:fd:76:3c:b0:10:e1:9b:82:
2f:77:6e:2e:6a:72:1b:5c:32:e6:16:6f:86:f4:e2:59:c1:14:
b4:29:ff:f8:0d:64:b5:11:1f:5f:a1:c0:49:bf:b5:20:79:2c:
5a:fc:fa:71:40:ef:7a:5a:e9:82:16:5f:03:99:15:cd:c1:e0:
65:68:84:a8:a6:4e:d8:26:13:a3:f6:04:db:c3:bd:77:f1:5e:
ef:88:15:02:6f:69:3d:11:40:ed:c5:65:db:23:d9:bf:9e:a8:
f1:51:9b:18:50:21:33:fb:4d:11:fb:b7:b5:b0:0b:bb:85:d1:
70:85:d5:74:e5:00:03:6d:d9:c5:56:c3:cc:a2:e7:78:fd:df:
91:08:c1:90:7b:4e:1d:fb:35:54:51:40:63:cd:14:1a:5b:3a:
ed:8a:e9:30:ed:8c:d0:3c:3e:30:f8:10:3f:f6:26:9e:25:38:
2d:bf:6a:86:c7:2b:a8:d8:2a:87:16:1f:1a:20:e7:78:2c:e2:
15:45:4a:35:13:16:5b:d8:4b:db:d4:61:a5:c3:e1:d3:0f:7c:
93:7e:94:f2:55:8f:48:25:6a:4b:31:11:68:f9:23:18:67:3a:
a6:34:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:32:37 2025 by rpki-client