Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: XQC6mrMVSaKh6WooqAjcAqG/fdjV3N2Yao5rKRinmYU=
Subject key identifier: 66:5A:D0:7E:82:A6:84:9F:A8:E4:4F:0D:74:95:D5:42:9A:72:A9:E3
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 0196BA48ABD6A70BEBBF9FEE899F72FD29A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 14C3
Signing time: Sat 10 May 2025 13:00:46 +0000
Manifest this update: Sat 10 May 2025 13:00:46 +0000
Manifest next update: Sun 11 May 2025 13:00:46 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: HtNOSk314Y89nilCicQAzNFX4hrpHq6DP29cZvW+Lio=)
2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:ab:d6:a7:0b:eb:bf:9f:ee:89:9f:72:fd:29:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: May 10 13:00:46 2025 GMT
Not After : May 11 13:00:46 2025 GMT
Subject: CN=665ad07e82a6849fa8e44f0d7495d5429a72a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:25:f1:f8:60:b5:b2:01:90:c6:5b:85:45:
13:04:0a:77:97:4b:83:05:c1:ff:ab:c0:63:15:c1:
cc:29:04:e9:25:5f:44:6c:60:95:bb:ec:10:6e:f7:
0b:55:f8:d8:1e:58:eb:f2:e7:7e:4f:6d:cd:8d:9d:
d7:c9:25:c4:f1:23:93:62:0d:b1:b6:8c:c7:26:09:
d4:78:df:a2:35:70:07:24:cb:27:e7:7a:05:8a:73:
a1:ed:c5:c4:81:33:a8:1c:6f:37:33:c0:86:9f:ed:
57:69:a3:7b:1d:87:8f:4a:3b:d9:93:fb:13:46:b4:
59:98:7e:b8:07:df:87:70:cf:f6:87:c4:c0:e3:eb:
e7:77:67:87:ec:2e:54:83:67:0f:d9:39:55:e3:2e:
a5:36:cc:81:12:85:f8:88:73:3a:0a:d5:ec:f3:4c:
ca:6e:e8:1c:9c:2d:1f:a5:07:15:9a:5c:4f:66:ac:
7f:c7:01:a4:9e:c2:4c:d2:17:b5:c7:fa:1f:7c:2d:
aa:39:41:ae:ca:a3:f1:f1:61:7d:fa:9e:8c:86:c5:
06:1a:0e:91:3b:24:d9:e7:c0:cf:6e:d4:33:02:2e:
7b:8f:a8:1f:93:3d:91:34:77:eb:bb:c1:aa:41:b4:
d8:03:3d:0a:9d:52:26:d7:ad:aa:a1:7b:aa:78:e8:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5A:D0:7E:82:A6:84:9F:A8:E4:4F:0D:74:95:D5:42:9A:72:A9:E3
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3d:54:b0:4d:2e:a9:e5:b8:9f:e3:03:8f:67:d6:79:3f:31:
58:9c:14:35:ff:a9:b9:2d:2d:de:d5:96:24:2e:a1:09:6a:98:
a2:b5:bd:6b:9e:d2:fe:15:cc:6e:c9:46:82:4a:b5:b4:33:a2:
eb:2c:4c:af:b4:06:8c:77:bc:60:2a:95:88:d1:e4:a4:a8:55:
43:bc:f1:04:de:62:d5:c3:3c:a7:56:c4:bc:8a:6d:21:54:d4:
d9:58:76:f6:26:48:90:80:07:83:18:4a:e4:92:87:f8:28:ff:
32:77:a6:79:38:40:c6:43:7e:e5:05:16:eb:5c:70:ee:63:e8:
78:5f:08:31:8b:24:68:e2:0b:3c:20:2c:bb:aa:08:34:89:d2:
fb:ed:c1:ab:11:fc:51:4e:3c:bd:ed:a1:12:4f:6b:ca:05:60:
99:10:e4:4a:8a:e6:8e:c8:19:89:77:2d:8d:4b:2f:ad:a6:1c:
b2:1d:83:ea:44:61:13:43:ff:b4:55:66:e8:b5:45:b0:63:01:
f9:a3:5e:a9:64:5e:fe:bd:e8:1e:b2:87:eb:61:6a:41:67:4a:
93:54:6a:32:89:9f:c7:3d:be:f9:13:e1:90:72:61:29:02:a7:
b0:a5:4b:f2:ef:6b:96:17:dc:e3:6a:22:df:a4:7a:a5:be:80:
27:c8:4f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:37:19 2025 by rpki-client