Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: W5C9KNmYc2FcNcfgTkw7Ers1wvlYZ4sZAO4y38qXvLo=
Subject key identifier: AF:8F:37:F9:6E:8C:08:9E:8F:30:7C:1C:0E:4E:58:49:1F:2D:45:5E
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 0196BDEE7F8B1721145DCCA9471CB530F06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 1431
Signing time: Sun 11 May 2025 06:00:46 +0000
Manifest this update: Sun 11 May 2025 06:00:46 +0000
Manifest next update: Mon 12 May 2025 06:00:46 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: 2EH8Z2BPaRBLWOsmBY7qTVaSDaWQHcz1hNbOYvh7Epk=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:7f:8b:17:21:14:5d:cc:a9:47:1c:b5:30:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: May 11 06:00:46 2025 GMT
Not After : May 12 06:00:46 2025 GMT
Subject: CN=af8f37f96e8c089e8f307c1c0e4e58491f2d455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:92:32:15:1e:0c:6c:56:13:04:ab:13:78:
d4:f7:fb:ba:cd:16:b2:35:89:94:f8:5d:31:cd:bb:
40:af:3a:62:f1:13:ed:84:c6:66:74:84:80:22:0f:
36:fd:2a:fa:7e:b5:d0:3c:ae:b0:c1:9e:cd:6c:07:
78:07:37:3a:f3:38:18:ca:f2:a3:b1:9a:2e:b6:0a:
28:56:0a:ea:31:ae:36:87:7f:9a:2c:46:e3:21:3c:
b2:45:e9:4d:67:c2:f8:93:68:13:4a:0a:7c:91:eb:
69:b4:bd:46:b1:d1:46:f1:79:f7:45:d8:7e:ab:6b:
d3:16:2b:6e:65:b1:3b:01:dd:2d:19:71:9e:bf:a7:
e4:c1:81:27:de:44:bc:ef:b9:d2:e8:e3:fb:d6:11:
15:9f:99:ed:13:70:0b:7b:a7:c7:aa:c5:ac:1d:17:
e3:57:98:4a:93:a8:c6:d1:2d:54:92:7e:b4:c8:9c:
5f:82:2b:32:d4:af:be:db:db:aa:0f:d3:f5:13:5f:
51:a8:b0:07:0a:b4:f7:a0:ac:75:ed:4a:7a:dd:ed:
79:1b:20:4e:33:e6:10:72:40:20:1e:a0:9f:ba:bf:
92:b5:0a:6f:d2:66:ad:66:32:0f:ba:b0:e2:a4:0f:
4b:02:54:6e:98:02:15:c7:8c:a1:cc:f4:dc:9b:3a:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:37:F9:6E:8C:08:9E:8F:30:7C:1C:0E:4E:58:49:1F:2D:45:5E
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:3d:c9:f8:93:ea:18:72:81:be:9b:57:bf:12:14:19:8d:
32:a2:7e:cc:72:ae:c8:f5:24:70:10:27:16:21:90:bc:fd:ed:
ad:b3:ff:4e:a8:d3:f4:68:6f:3f:0b:96:87:e7:6a:e3:da:b6:
f3:c6:13:e4:73:87:82:d6:eb:47:30:98:77:84:20:f6:28:64:
c7:fd:73:99:8a:67:a6:03:2a:ac:a5:b1:e7:a2:99:69:55:1b:
bc:82:a3:b9:99:7e:6f:1f:61:32:20:27:68:53:dc:25:2a:1e:
fc:17:a2:60:1c:0f:30:c8:a8:1f:23:f3:13:97:d9:bc:3c:6e:
40:e1:ab:34:99:a3:62:a3:a2:8a:03:34:70:67:11:fb:59:b4:
68:e2:bf:b9:39:0f:ff:58:e1:56:ad:c6:b0:2a:8e:ed:bf:60:
11:45:79:14:42:1f:af:b6:01:9c:20:3e:44:5e:9c:71:03:1d:
7a:06:f0:2f:77:08:9d:7e:c2:48:79:68:8b:3f:ce:5b:b1:59:
cb:63:27:e5:05:2c:88:18:1a:8c:cc:f0:6c:ef:4d:7d:07:63:
69:9e:ad:33:5d:58:b4:07:b3:82:db:6a:73:f2:78:db:2f:3d:
b8:8d:76:ad:96:4e:db:81:88:9c:cd:6b:8a:ee:d9:62:cb:e6:
30:bc:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:41:02 2025 by rpki-client