Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: esQuL/09cZiAOWxNvQfjKOrIgmU+4lXUSVOBLHFFl6c=
Subject key identifier: C9:5D:6A:97:14:26:6C:D8:95:C0:74:32:F2:49:4C:72:E9:FF:28:CD
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 0196B5FDEA66FFD58AD36824B422F659FE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 17:00:38 +0000
Manifest this update: Fri 09 May 2025 17:00:38 +0000
Manifest next update: Sat 10 May 2025 17:00:38 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: hei+KD3uxI0O2Y3fbR1Rmu0CXeKS3O99eRkBG1L1nt8=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:ea:66:ff:d5:8a:d3:68:24:b4:22:f6:59:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: May 9 17:00:38 2025 GMT
Not After : May 10 17:00:38 2025 GMT
Subject: CN=c95d6a9714266cd895c07432f2494c72e9ff28cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:fc:e7:39:a2:91:62:3c:25:0a:87:69:2d:
16:54:b2:db:a0:e0:6c:91:73:f6:1d:6f:6e:81:44:
ed:47:5d:49:17:b8:1f:fd:61:d0:d3:1b:b7:51:5b:
9a:17:a6:b6:40:37:f1:fa:fd:b2:88:00:eb:2a:00:
4a:9d:0f:01:c7:9f:0a:69:50:75:6e:fc:d9:c3:02:
37:cc:bb:9b:51:2a:dc:0c:48:76:97:0b:55:5b:18:
41:16:09:a5:38:e7:2b:49:bd:7c:5e:38:28:ee:95:
eb:ff:00:ef:94:79:88:29:bc:9c:c0:c5:a8:08:f8:
6f:10:fe:5e:63:c6:30:f2:35:db:5d:35:dd:e6:f5:
af:93:eb:b4:d4:d9:89:9a:82:85:eb:57:ae:fb:51:
fa:74:a5:cc:35:1b:c7:77:3e:5a:1c:9b:b3:81:ba:
dd:f8:99:d8:f4:05:60:87:12:78:e2:de:a3:9b:68:
ee:5a:3c:72:c9:51:8a:19:57:55:ff:bb:f6:85:37:
1d:6d:94:34:2a:f8:2a:c7:03:b0:62:fd:6c:5b:b0:
68:72:68:a9:19:86:7d:ad:83:90:0e:84:27:58:3f:
b8:d0:45:b2:6a:b9:8a:64:35:ac:60:41:b8:05:11:
e9:04:8a:3a:9e:2b:d5:96:d1:72:6d:7d:9b:77:40:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:6A:97:14:26:6C:D8:95:C0:74:32:F2:49:4C:72:E9:FF:28:CD
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:44:f1:60:b6:7e:9a:dd:93:ea:f2:cf:19:f5:a7:d5:8c:0a:
e9:a2:bb:0b:f5:ea:05:ab:eb:ab:47:80:e4:20:5f:13:37:19:
21:e2:fb:86:0b:db:06:42:7b:cc:53:2f:39:3b:c8:e3:f9:34:
79:9d:04:b9:f1:22:1e:06:cf:a5:bf:ed:6f:33:cf:e8:b6:67:
72:95:b6:55:2d:e3:c0:f5:eb:70:9a:71:72:30:69:1e:3b:b5:
c6:24:09:b5:ce:0a:52:55:eb:7a:d8:79:d7:82:11:2e:f8:e8:
90:89:4f:2a:8c:4c:92:c0:8b:c3:b9:ca:b8:88:91:c3:4a:d0:
4d:83:62:35:23:4a:48:2d:2f:c6:55:73:c1:6a:c8:2f:e6:81:
e4:7b:62:17:b1:ae:51:05:66:4e:58:24:1a:c2:48:d0:3c:dc:
a6:b9:a7:14:32:0c:7f:93:68:c1:59:06:85:86:9a:69:93:41:
27:92:22:15:6f:1a:20:af:7a:d9:47:98:35:a8:58:b3:19:9d:
fa:38:25:e7:78:59:31:b6:14:44:5e:aa:5c:75:7c:d1:9b:7f:
c7:7a:5a:73:17:ed:4d:1d:b1:7b:a3:10:07:46:d2:91:3a:a4:
be:7d:a4:34:26:ac:12:d8:05:05:7d:75:59:30:18:cf:1f:d3:
7d:65:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:40:28 2025 by rpki-client