Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: oZ7BiukX4oI61wXrlSMxaXvRd3wybSk+gGTtHnkMwc8=
Subject key identifier: 7F:C7:95:0A:61:68:DD:24:A2:B9:CC:C1:6C:53:9D:D0:97:F7:3F:A3
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 0196C4CBEF42B26F0152FB1FA130B5CE6ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 05CC
Signing time: Mon 12 May 2025 14:00:21 +0000
Manifest this update: Mon 12 May 2025 14:00:21 +0000
Manifest next update: Tue 13 May 2025 14:00:21 +0000
Files and hashes: 1: SILoOgzFVVKXYr4BeO1iAtaShUA.roa (hash: dPpD4jLPayYBOVInoYbVqKqufem4sI8eQUfot03I5EY=)
2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: IuzvJKU0N/xJO14ouUvVwNxRIwifZTkRKO+GVdetjis=)
3: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:ef:42:b2:6f:01:52:fb:1f:a1:30:b5:ce:6e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: May 12 14:00:21 2025 GMT
Not After : May 13 14:00:21 2025 GMT
Subject: CN=7fc7950a6168dd24a2b9ccc16c539dd097f73fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:da:bb:e1:05:f0:c0:33:e6:21:7a:d4:6f:
26:a8:ea:7d:82:a1:ce:c7:42:05:a3:5b:9e:2f:a3:
da:21:7f:c8:4a:ee:d0:31:fb:be:d2:ef:48:e3:34:
c8:75:57:7d:a4:27:3b:d5:d7:c7:56:c3:40:f6:b2:
90:0f:67:d7:23:92:5e:a2:14:b0:94:b1:a1:7d:bc:
be:0f:14:5b:a3:93:99:f0:b3:eb:d3:eb:26:6b:aa:
82:d2:01:1a:9f:c8:aa:32:1a:c9:d8:51:57:68:e9:
b3:3b:a2:54:8c:82:44:56:f7:c0:9c:59:49:0e:e0:
5f:62:70:b9:d7:07:5e:e7:2d:0b:2e:8f:81:2d:00:
23:cd:ad:26:19:37:7d:20:3d:06:06:d7:7c:8b:69:
58:85:c8:ef:57:51:4c:c1:b3:1b:51:30:72:b4:6c:
51:b4:1b:91:57:c4:2c:63:b7:b8:4f:f0:39:a9:86:
78:8b:09:31:59:fa:fb:6b:8e:8b:c8:a9:06:11:fe:
91:c2:26:7c:77:33:4c:de:5d:03:6b:6d:a3:2c:38:
2e:b3:77:b6:55:20:04:14:2e:e2:82:46:52:6c:96:
c7:79:68:94:b3:70:b7:ed:5e:8f:c9:f5:df:29:c3:
ae:35:dd:b9:0c:26:d8:15:24:4e:9e:5d:71:81:10:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:95:0A:61:68:DD:24:A2:B9:CC:C1:6C:53:9D:D0:97:F7:3F:A3
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:36:d4:ea:86:32:03:62:59:16:e2:11:02:63:d6:10:5f:b1:
4c:9e:1c:9e:2c:cc:2f:3a:a9:a7:15:6e:51:47:ec:3f:49:76:
35:43:7f:bd:f6:e4:54:52:44:84:db:f2:4f:b9:c6:1e:bc:f4:
5a:21:2e:63:35:4e:7f:93:8c:52:80:29:55:b3:9c:00:92:9a:
f3:ab:50:9e:10:60:b8:3d:6d:ff:a1:88:4d:05:e0:be:a7:9d:
62:a9:f2:ad:f3:43:d6:7b:fe:16:05:46:6b:0d:61:cf:90:86:
69:c3:7c:24:9f:56:88:5f:62:ac:8f:5d:25:5c:54:34:04:9b:
db:9f:66:f7:e8:34:ba:77:82:b4:24:40:88:0c:87:fd:ec:fc:
1c:10:71:5c:45:c1:5a:63:d0:18:6f:2e:b8:af:67:4d:ca:03:
71:94:99:05:3e:3e:09:57:ea:b9:80:40:6e:cc:86:36:bf:a2:
d5:d5:d2:f4:ac:21:74:33:35:d6:bb:19:5d:18:2f:00:9e:ba:
9a:d2:1d:4c:0a:04:79:35:6e:4c:aa:87:81:2b:26:61:3b:f2:
dd:13:31:61:70:21:48:4b:2a:e9:ac:e1:43:0a:54:79:4d:4e:
a8:0a:45:73:44:75:76:44:f0:e7:f5:fe:51:a6:85:09:83:45:
a5:06:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:58:40 2025 by rpki-client