Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: Dds5bBojrZLE2gdUx4F8koXszkJt+f/rwA3c1v7BV3s=
Subject key identifier: AB:A1:A0:7B:21:FA:18:E8:50:4D:1E:09:6C:48:67:02:81:66:A8:7D
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 0196BB5ACC0A2ACF693D91AEA1463C337919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 1489
Signing time: Sat 10 May 2025 18:00:11 +0000
Manifest this update: Sat 10 May 2025 18:00:11 +0000
Manifest next update: Sun 11 May 2025 18:00:11 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: ztPln47Sa1hOHlDUK1AF48Ppc9qSIT5XQqDjUGR53fo=)
2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:cc:0a:2a:cf:69:3d:91:ae:a1:46:3c:33:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: May 10 18:00:11 2025 GMT
Not After : May 11 18:00:11 2025 GMT
Subject: CN=aba1a07b21fa18e8504d1e096c4867028166a87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:3f:98:ed:12:4c:75:3b:9e:d6:0e:7c:d8:
c6:99:eb:31:b6:53:0f:00:c5:0a:55:98:0a:32:3c:
b3:db:26:c2:3d:0f:3c:fa:f7:2e:01:e5:36:48:63:
a6:d0:f0:d9:96:23:f5:fc:0c:48:78:e3:30:bc:88:
41:36:36:10:2f:f2:21:26:15:8d:7e:a9:f4:b9:64:
50:b6:44:26:f8:d0:5e:da:4f:32:d4:bb:70:55:31:
4d:12:54:21:f8:8a:01:72:b2:3a:5e:5d:e4:2e:5e:
1a:6f:93:6a:0a:19:90:18:28:30:9e:5a:ab:ba:a9:
95:0c:96:4a:b0:05:62:e3:0d:ca:73:34:40:38:fa:
1a:17:0f:bb:53:0e:c1:de:45:96:50:46:f9:67:1b:
45:f9:53:2c:4d:72:56:7d:c8:78:91:4a:a6:83:22:
f7:32:08:74:a2:65:29:1b:e5:ba:6f:ce:f7:44:8a:
d4:82:b2:27:aa:4b:a3:66:2e:68:14:a7:a7:10:ca:
ba:d3:3c:eb:9e:d8:11:91:93:ca:48:3e:b9:ac:fa:
26:48:22:4a:3e:85:ba:18:af:96:cd:84:d4:27:f0:
85:3d:85:28:b0:cc:71:4a:e8:83:47:12:39:ea:c8:
78:34:5b:25:1e:75:bc:0c:da:47:a0:40:4c:9f:b1:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:A0:7B:21:FA:18:E8:50:4D:1E:09:6C:48:67:02:81:66:A8:7D
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:49:03:f3:44:da:c1:e3:ca:b7:21:45:ce:94:6e:29:fc:
e6:20:96:2e:0c:9d:0e:eb:6f:d8:00:7a:6a:2d:75:59:c6:80:
b0:d8:2d:3b:7c:c2:18:28:35:df:a8:f3:af:06:f6:45:4d:a6:
c9:ac:96:ab:27:92:52:5e:94:e6:b6:2f:aa:97:44:23:69:c0:
df:94:69:ca:13:3d:63:23:c8:1a:d8:65:9d:a3:f5:f0:c7:65:
59:56:1f:84:d8:29:a2:9f:ec:e1:73:f3:12:d2:36:82:0b:f1:
81:45:54:1d:11:94:47:72:b6:85:06:11:fc:ab:e0:0e:21:18:
58:2e:57:c0:d2:82:77:42:8d:85:cc:d3:f7:c0:24:45:92:80:
4b:ac:a0:73:74:fd:57:76:5c:49:82:33:df:36:53:4d:4b:9d:
40:b1:39:24:60:4e:b1:60:b4:fd:ca:5e:84:9f:5c:d4:0e:20:
b0:a7:fe:d4:ce:1a:fd:82:e5:85:dc:5f:49:ae:41:91:28:e6:
6c:5e:68:46:c0:32:68:eb:05:11:f7:50:89:73:74:88:c6:07:
f7:b9:fe:f4:c8:99:a8:cb:85:a4:55:30:56:11:d6:98:3c:c3:
f8:d2:70:b3:51:b3:64:5e:51:49:a5:b4:9d:a3:79:39:33:78:
d0:12:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:18:39 2025 by rpki-client