Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: It96PthKffXvMdcfZpBzevXGXJtQnzRaTot2UbVkYrk=
Subject key identifier: F4:8E:1B:29:F2:E6:86:B8:1B:48:4F:D4:59:DB:C9:89:C7:E4:DE:2D
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 0196B0D7414C13559907F33AA5E53784CC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 05BF
Signing time: Thu 08 May 2025 17:00:18 +0000
Manifest this update: Thu 08 May 2025 17:00:18 +0000
Manifest next update: Fri 09 May 2025 17:00:18 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: uSMpfGNkozC1RvF8s+ArgxaIbqfCHISLdtxUX0FWT94=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:41:4c:13:55:99:07:f3:3a:a5:e5:37:84:cc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: May 8 17:00:18 2025 GMT
Not After : May 9 17:00:18 2025 GMT
Subject: CN=f48e1b29f2e686b81b484fd459dbc989c7e4de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:3f:d3:d2:14:b9:fe:83:b1:e3:a0:b9:7d:
90:4d:de:75:2d:70:98:e8:4f:c0:65:9c:97:5c:ec:
6e:9d:04:8f:52:3b:a4:4d:7f:69:09:d9:27:b5:1b:
ec:2b:99:b5:57:ed:c6:55:20:75:4f:4d:0f:e6:d1:
28:91:ae:79:07:4f:eb:0f:ce:8b:f9:1a:2d:26:71:
52:94:4f:62:34:5d:05:12:e3:b6:79:84:e5:e5:37:
e2:aa:22:ca:c5:89:9b:ef:b8:61:0e:e1:c6:d8:7d:
ab:0f:52:4a:90:15:1f:01:57:aa:59:e3:d3:ff:49:
12:3e:a5:b8:cf:2f:38:13:93:1a:6b:81:d7:5d:f4:
42:44:37:30:72:9c:b2:32:4b:6e:6f:3b:bf:30:c8:
de:49:2f:f7:5a:f4:a0:6d:7c:66:7c:2a:d8:37:0a:
5e:40:58:13:6f:8d:28:e9:f8:a8:c7:c7:96:5b:33:
42:19:77:ca:c5:3e:e8:36:56:42:79:44:0f:53:7f:
17:5b:df:d2:75:2b:82:c2:69:84:c9:3d:32:54:4c:
1b:12:2e:b9:31:c0:20:36:fd:dd:61:36:26:ec:26:
54:0e:a1:a1:c8:61:85:f9:f9:de:96:8a:6f:6a:ae:
b3:2f:5b:5a:e1:cf:b2:eb:5e:e0:86:e6:dc:58:84:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:1B:29:F2:E6:86:B8:1B:48:4F:D4:59:DB:C9:89:C7:E4:DE:2D
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:b7:98:eb:7d:eb:88:b6:44:14:a8:3c:0e:89:15:bd:90:
66:3a:3c:f2:6e:4d:7b:7d:38:94:2e:79:47:3c:5a:0c:e4:c1:
65:e9:50:f7:3e:01:92:44:4a:64:d1:b1:76:df:95:01:63:a5:
d1:44:5b:cf:3b:7a:da:1f:a9:cf:d3:57:2f:04:64:3d:b4:4d:
2d:ae:87:88:46:4b:1e:a1:64:08:5f:28:3a:ca:bc:5e:03:49:
ff:13:d3:76:03:54:21:85:7c:f1:c6:99:8e:56:ae:65:b2:1a:
f2:29:34:7d:99:a0:89:ea:27:9c:22:b5:a7:c4:58:7e:82:d0:
0e:cc:1f:9d:ef:5a:1a:bf:b7:1e:65:68:25:04:91:2d:d7:66:
b8:01:93:95:7a:26:31:b8:cc:4c:10:01:27:ac:25:45:5b:ea:
fc:92:82:87:46:7d:5b:13:83:c4:c1:55:4d:28:df:91:90:79:
0e:0c:bc:ea:61:8a:40:2b:3f:f2:cd:d8:ac:22:e9:b5:98:88:
d1:4d:6e:52:28:b3:a1:08:96:ab:b6:37:31:5c:7b:29:41:a9:
4a:99:36:b3:c9:d0:a0:8a:98:a7:12:1e:db:75:1f:17:7c:8f:
63:ea:b2:ee:7a:08:27:29:e9:47:7c:14:bc:47:e6:61:98:90:
4c:22:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:41:03 2025 by rpki-client