Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: 9olJyU4jpJJB3C1uIDXZu6B0HPSs9/TmLf+/01x3D5w=
Subject key identifier: D8:D1:42:F7:C5:98:45:04:91:0F:E4:74:A8:38:E4:A6:6B:61:35:6D
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 0196BF6FBD6C831BFB7576499214B145AF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 07C5
Signing time: Sun 11 May 2025 13:01:33 +0000
Manifest this update: Sun 11 May 2025 13:01:33 +0000
Manifest next update: Mon 12 May 2025 13:01:33 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: qj37Bt5+OiGs5nmKKvX/01Sn3L06jeMVTyLQ4WKABl0=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:bd:6c:83:1b:fb:75:76:49:92:14:b1:45:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: May 11 13:01:33 2025 GMT
Not After : May 12 13:01:33 2025 GMT
Subject: CN=d8d142f7c5984504910fe474a838e4a66b61356d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:a1:0e:c5:07:ff:c2:74:9f:09:dc:59:23:
bd:31:55:ba:fc:b8:40:1d:9c:52:6b:02:17:7e:e8:
af:df:6a:34:f3:e8:c1:ac:c7:43:10:80:54:68:c0:
c7:7b:96:60:28:a8:f0:81:4e:97:1d:3d:11:c0:44:
db:63:2c:fe:ca:5d:74:1c:86:5c:a4:71:d3:f9:75:
bf:48:e0:a0:19:e4:77:86:82:09:c8:57:cf:3e:68:
1e:11:31:09:a9:33:52:a9:bc:b3:9d:2f:07:fe:d0:
97:62:b7:df:84:ea:ac:93:7f:93:1f:31:c0:62:84:
e5:8a:a0:b6:a5:ba:e4:27:c3:a5:d3:b7:ec:31:20:
5e:31:3c:9d:bc:2d:12:48:73:49:6a:4b:89:2b:e4:
57:a0:66:15:69:e9:31:59:04:32:54:f1:2a:e2:3c:
bd:a2:52:fa:ca:fa:4f:c1:b7:be:13:31:3d:41:35:
55:ac:ed:f3:7f:9a:e1:1b:48:17:73:72:41:54:f8:
14:2e:63:d0:09:ea:36:6d:bc:79:e9:aa:a0:c7:e5:
f8:9b:b6:89:fd:29:57:79:e7:65:72:9e:12:0c:85:
fe:0b:31:d7:32:a2:6a:99:69:d9:ab:55:5b:96:a5:
49:f7:69:ad:3a:9a:22:65:c2:b3:df:2b:2c:8b:53:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:42:F7:C5:98:45:04:91:0F:E4:74:A8:38:E4:A6:6B:61:35:6D
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0d:cc:e0:61:72:ae:e0:60:03:06:f2:08:f6:e2:1e:e8:e6:
16:4f:ec:bb:8d:d1:d5:8e:0e:4c:42:b8:ea:80:74:5e:e9:08:
1c:96:cf:3d:ed:fa:be:50:0b:9b:65:ea:13:98:da:5d:20:38:
43:6b:9d:3e:ac:05:aa:b2:ef:e2:c3:9b:92:32:fa:e4:27:c0:
ad:72:63:e2:c3:9d:2b:c1:bf:b8:d2:7d:61:20:12:0e:f6:fb:
98:fa:f1:a5:eb:ec:b3:fa:89:d9:1a:e8:4e:16:e5:02:b1:fa:
59:9f:9d:da:50:c2:f5:da:bc:25:4c:fa:76:71:ff:54:79:c5:
7b:00:b6:d8:5a:ae:26:b9:43:5d:d3:ae:b3:2a:77:c1:cf:94:
7f:a6:6a:1a:b6:01:51:71:72:9d:bb:52:4a:74:59:c0:fa:5b:
f9:d7:5b:d2:3d:70:a5:d6:28:d2:00:25:4f:0b:74:55:97:bd:
35:7a:91:ea:44:55:a7:7a:f3:32:0c:ec:c0:c5:9b:17:39:49:
2a:26:c0:7e:6e:6a:c6:33:38:b1:36:8e:15:59:5f:4f:eb:2d:
ac:63:00:92:f3:ad:77:41:6e:e7:be:7c:f4:1f:c5:60:5b:b8:
45:d7:a1:eb:ae:a9:18:0c:87:70:26:06:23:c3:cf:d3:41:93:
93:fd:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:01:53 2025 by rpki-client