Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: 2xXG+SSJhox/rjgFepeN30X8tZ27zeuczY6Sle0PWUk=
Subject key identifier: 10:68:31:60:1C:2E:73:09:44:A5:6C:D8:A5:50:96:78:E1:71:C0:4B
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 0196B6D98600F2708093D7E56DE27F4CB69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0920
Signing time: Fri 09 May 2025 21:00:30 +0000
Manifest this update: Fri 09 May 2025 21:00:30 +0000
Manifest next update: Sat 10 May 2025 21:00:30 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: 6IznKnnOmjfVzUw84Xe5GXBKCg6wIKaZBih9V/1UNu4=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:86:00:f2:70:80:93:d7:e5:6d:e2:7f:4c:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: May 9 21:00:30 2025 GMT
Not After : May 10 21:00:30 2025 GMT
Subject: CN=106831601c2e730944a56cd8a5509678e171c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:6d:ed:bd:f5:d2:88:ac:0f:76:37:75:51:
e1:d4:a3:11:ac:e0:cc:e1:12:14:c1:0d:7a:c7:e1:
d8:b6:65:38:bf:e7:a4:f6:66:4c:2c:31:02:31:7d:
88:fc:00:5c:6b:80:3e:0b:b9:e1:10:35:9a:3b:6d:
5c:d4:1b:be:4f:de:f7:92:56:17:f7:40:ee:62:4a:
9f:c4:0d:b3:15:0f:8a:78:77:f0:b3:80:ce:fd:7f:
d6:95:92:7a:bc:ba:50:40:06:32:be:8b:08:29:d1:
f1:9f:99:0a:c9:14:81:a8:14:8e:0e:92:40:32:a4:
1a:54:46:bf:1c:b8:2d:09:70:f0:51:68:51:05:d7:
45:0c:85:57:fd:39:fd:c6:ae:e6:a4:27:46:de:05:
a7:f0:f2:06:5a:08:73:47:e7:5e:46:69:fe:82:fe:
bb:49:83:f4:dd:7b:0a:94:e0:66:28:40:fa:a3:11:
a1:69:7f:96:e0:5f:43:04:b7:00:19:c4:c0:04:ec:
db:2c:67:78:7d:15:c1:df:d4:a9:61:c2:2f:59:b2:
a3:7a:ca:00:54:a9:ac:9b:c3:f7:a9:75:53:36:7a:
61:ab:3c:90:a3:3a:96:0d:94:51:9a:9a:58:56:ee:
63:d4:e1:0f:25:15:b4:41:64:75:b6:a6:d1:d3:ce:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:31:60:1C:2E:73:09:44:A5:6C:D8:A5:50:96:78:E1:71:C0:4B
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:82:38:51:23:8b:d5:54:a9:a0:54:a3:ff:e1:84:d8:68:db:
99:d6:b1:dc:c2:34:c1:92:54:8d:f4:33:ae:f9:f2:59:eb:83:
bf:f6:82:9e:f2:6a:d1:29:18:f7:ca:34:45:ab:4a:df:ce:d7:
8c:e5:e2:2f:e4:84:44:01:96:8c:8f:b4:a4:dc:e8:14:43:7f:
6c:0f:42:e0:1c:de:e6:bc:54:90:67:7d:4f:f3:3b:9d:14:32:
8e:7b:60:0b:dc:f8:1f:4d:b2:67:3f:18:1d:89:72:43:9f:29:
b8:65:19:89:78:75:2b:68:c4:c6:a5:ba:94:16:a1:42:ad:cd:
28:de:f7:9e:54:78:10:a6:d6:88:40:33:29:db:77:79:4d:bc:
57:b6:b9:93:0f:4a:0b:c6:7f:60:83:46:97:ba:13:b4:eb:6f:
22:0c:d8:93:34:16:42:48:81:66:ab:df:0b:06:a6:c1:9b:57:
bf:c9:eb:84:43:a4:3c:c4:8d:73:c5:91:06:27:1d:a3:28:e3:
ff:41:67:35:7c:ee:d3:e3:b3:22:b9:6b:93:f0:c5:de:c9:db:
dd:a9:a2:be:63:25:88:a4:db:91:77:89:e1:af:29:27:1d:89:
45:37:13:1b:a0:77:33:cc:80:a3:1a:bd:2f:4b:be:e8:4c:e5:
90:74:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:37:25 2025 by rpki-client