Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: e/fhwbc6/HZvvpKKcxX9teNjDNoHOy2/y4rkmNcwjNo=
Subject key identifier: 04:28:9A:46:83:AA:86:7E:47:92:DB:45:27:71:D0:E4:D8:2A:4E:B0
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 0196A051707083A9E525511C008A9F3C1B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 12:00:13 +0000
Manifest this update: Mon 05 May 2025 12:00:13 +0000
Manifest next update: Tue 06 May 2025 12:00:13 +0000
Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=)
2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: pAsKv5iZEEVJaremBGR7L8xJzTNaNy0LCUVk6HlBkbw=)
4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:70:70:83:a9:e5:25:51:1c:00:8a:9f:3c:1b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: May 5 12:00:13 2025 GMT
Not After : May 6 12:00:13 2025 GMT
Subject: CN=04289a4683aa867e4792db452771d0e4d82a4eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:6c:cc:39:68:cb:9c:43:9e:83:d0:90:22:
64:90:f1:a4:e9:d4:ec:eb:07:da:df:fa:00:39:bd:
9e:7a:ef:36:21:cb:45:15:5c:cd:7c:cd:42:a9:0f:
35:ef:36:55:74:d3:3c:66:18:58:35:6a:35:f6:65:
ae:62:21:7a:7e:e6:e3:27:67:5d:29:90:f5:85:a1:
a1:37:96:21:4d:9f:b7:b0:f2:bc:63:05:57:c8:a4:
83:6e:63:c1:7d:3d:c3:da:86:e4:2c:59:42:de:86:
cd:bb:1e:ec:71:10:26:06:2f:f8:67:a2:9c:7e:a3:
da:98:e9:b2:cc:bb:14:8c:b2:ca:34:ce:3e:86:b1:
c6:42:f0:98:7f:f5:08:d7:4b:7d:fd:c6:7c:3b:7a:
a3:09:00:34:13:46:8b:63:e1:84:a1:b1:52:9b:ea:
ac:d8:8b:06:b9:e9:3c:2f:0b:f1:cd:f6:26:a0:a7:
c8:7d:16:06:36:15:5c:a4:bd:10:89:7d:6b:0c:59:
1e:14:1f:31:95:76:01:02:28:9a:b2:40:84:36:ec:
cb:97:d9:fd:d7:84:d6:33:58:d9:38:9e:62:4b:5c:
35:59:e0:ff:c3:6a:ad:63:cb:4e:57:6e:c8:66:15:
79:33:51:79:4a:26:d4:99:80:d8:0c:59:45:c1:fc:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:9A:46:83:AA:86:7E:47:92:DB:45:27:71:D0:E4:D8:2A:4E:B0
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:11:4e:e7:bd:17:3c:64:16:63:58:d8:b2:3e:93:1c:e3:51:
28:51:77:9e:fa:6c:9c:e8:50:9c:e0:72:1b:d4:a3:36:e8:62:
09:9b:e0:a4:4f:bc:5a:39:43:1b:83:44:06:b7:e5:05:35:10:
b3:28:1a:ba:16:3a:6f:ac:e0:fe:63:b9:d1:47:5c:1b:d9:89:
2c:8c:b4:10:66:be:c1:70:66:cd:52:82:ac:b9:da:44:37:66:
f2:b8:dd:f4:15:3c:a9:4c:2e:06:82:1c:cf:a6:71:a5:49:20:
28:da:9b:04:8f:c8:49:c6:52:d9:dd:ff:3e:38:f3:87:6f:1b:
6a:a9:e5:06:5e:8f:21:cd:15:24:00:9d:c9:f7:7b:09:2a:df:
9c:36:14:16:1c:5c:47:5b:9d:43:ff:63:b3:b7:aa:25:e8:58:
a4:65:2f:ea:d3:66:26:c4:5b:b2:2c:4d:04:4c:4a:23:05:e2:
7c:e1:16:b7:ae:dc:bc:11:b2:0e:21:b7:84:d8:37:f4:6b:40:
90:82:b9:03:7e:a5:a6:49:ca:45:f4:ef:1b:b3:71:88:86:03:
9e:07:1c:e7:3a:1e:da:47:a8:30:61:bf:cf:ff:a5:f8:8c:56:
d0:74:24:5f:cb:c3:12:24:7a:aa:89:e0:98:07:ad:35:b2:66:
ad:02:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:13:49 2025 by rpki-client