Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: kDzrF2V5hbxRaOu/BHSNKYn2DC2vKMKqFPXuQxlKIkw=
Subject key identifier: C1:8F:53:2B:32:2C:A6:A6:62:09:71:83:7E:65:97:BB:8E:17:96:41
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 0196B7B51C2B23B255104C45C0091668EBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 01:00:21 +0000
Manifest this update: Sat 10 May 2025 01:00:21 +0000
Manifest next update: Sun 11 May 2025 01:00:21 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: C4Lb6bjONXpuhl+Co6rL+56F1Iyc6XhtKMd8DuhFsbQ=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:1c:2b:23:b2:55:10:4c:45:c0:09:16:68:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: May 10 01:00:21 2025 GMT
Not After : May 11 01:00:21 2025 GMT
Subject: CN=c18f532b322ca6a6620971837e6597bb8e179641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:86:f7:ae:09:b0:69:ab:86:e0:ee:fe:c2:
44:50:12:3c:7d:59:17:f4:eb:e2:c9:5b:1f:62:b2:
61:3d:5b:db:28:5c:13:90:03:3c:40:e2:63:92:27:
52:60:15:b4:72:38:c8:5d:17:98:1c:a3:20:f1:16:
20:5d:7b:0a:47:eb:f0:a4:d1:7b:78:5f:dc:14:64:
7a:09:a3:45:f0:b8:14:34:1b:5e:e9:45:25:8e:0c:
3c:51:df:e1:80:53:75:fb:11:b0:59:c1:7b:11:c0:
a2:ba:be:53:f0:73:d4:ed:23:01:a6:7a:ea:74:cf:
34:2a:59:8f:40:7c:8c:47:0b:f1:4a:69:e4:2d:cc:
32:1b:6a:33:82:8f:ce:7f:b7:cf:1b:2a:e0:cf:65:
30:28:8a:90:73:a9:ab:69:9e:ca:8f:83:60:d0:e6:
d3:f0:9e:82:42:54:ee:5b:76:3e:87:62:1f:41:ad:
35:3b:41:f5:f7:9a:9e:db:e5:8b:7a:a4:68:1e:de:
66:1d:12:a4:25:46:02:7d:24:5a:85:e8:a5:6c:5e:
86:89:2c:f3:db:b4:8f:4e:16:dd:83:85:74:2c:18:
26:0a:5a:6c:9f:41:af:b2:81:a9:76:ae:96:69:f9:
cc:96:ba:c2:fc:ad:2d:92:2e:a0:ce:80:2a:40:0f:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:53:2B:32:2C:A6:A6:62:09:71:83:7E:65:97:BB:8E:17:96:41
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:97:aa:7e:0a:e6:c3:36:da:4a:6c:5d:13:ca:51:5a:7a:
c6:8f:03:cf:51:04:71:bd:09:9c:7e:f1:ed:7e:9c:4e:d8:cb:
af:81:f3:41:25:f7:eb:2b:f7:c9:d7:c5:be:1d:fe:1e:e9:65:
25:b2:73:ed:32:23:b4:06:3f:d9:1b:05:f2:49:34:af:83:98:
27:4c:96:c5:ea:0c:79:e9:a0:77:92:a6:2b:3a:ff:85:59:f1:
08:53:3e:28:c2:42:80:7a:33:ca:ed:7e:ed:6f:b7:42:d6:c7:
6f:0c:52:74:77:aa:46:44:6f:d1:3d:d3:98:55:57:de:9a:73:
2c:5b:e1:67:76:e4:1f:50:29:31:ce:6f:d8:90:0d:0c:f6:02:
ea:1b:fa:bf:f9:a0:c0:74:5a:58:55:9e:d9:51:f3:07:31:a9:
32:c4:41:1d:3c:31:55:50:01:d9:b2:c8:6b:3c:e7:17:af:2e:
f4:90:1c:6b:55:ca:0f:ad:92:7b:e2:24:9f:ac:70:e4:58:23:
5f:83:fa:e1:1d:b5:7e:da:7d:e9:c5:f7:11:f7:13:8e:20:e5:
50:f5:64:66:b6:fa:67:cd:a0:a8:04:21:aa:26:c1:53:4f:ba:
c0:0b:5e:27:11:e1:32:45:0c:a2:13:ff:6d:32:4d:f3:6e:ba:
3c:70:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:37:32 2025 by rpki-client